dev21.import.dev-av.capdev-connect.aveva.com

Issued by Amazon

About this certificate

This digital certificate with serial number 08:7d:66:38:35:f0:0c:15:5b:60:a4:a5:b7:a2:a7:77 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dev21.import.dev-av.capdev-connect.aveva.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:7d:66:38:35:f0:0c:15:5b:60:a4:a5:b7:a2:a7:77
Serial Number (int): 11284934332845758485585579696346802039
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 51:35:0a:d8:e4:a1:43:3b:18:a1:73:4f:57:94:86:09:1c:2d:63:75
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): a9:56:3d:05:7e:dc:96:5f:a2:a9:6a:8f:c1:32:f3:40:02:a9:06:09
Fingerprint (sha256): 03:bd:9f:80:07:4d:43:21:63:a5:a0:46:df:95:be:1d:d8:97:e1:71:ca:e8:c4:85:65:22:1f:ff:f6:3c:7d:d1

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate dev21.import.dev-av.capdev-connect.aveva.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev21.import.dev-av.capdev-connect.aveva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev21.import.dev-av.capdev-connect.aveva.com

Other certificates including the domain name aveva.com

(limited to 100 certificates)
dev4.dashboard.dev-av.dev-connect.aveva.com
cdojam.import.dev-av.capdev-connect.aveva.com
ots.int-cep.connect.aveva.com
sjvcvxtr.alb.tr-av.connect.aveva.com
dev2.import.dev-av.capdev-connect.aveva.com
portal.services.test-connect.aveva.com
testrc.import.dev-av.dev-connect.aveva.com
techsale3.alb.demo-av.connect.aveva.com
internal.integrationstudio.capdev-connect.aveva.com
dev2.import.dev-av.dev-connect.aveva.com
mahtest.import.dev-av.capdev-connect.aveva.com
management.test-experience.test-connect.aveva.com
aimsec.api.report.preprod-av.connect.aveva.com
test.tpskc.r53.aveva.com
91287234589239034672357235790.dev-dbc.capdev-connect.aveva.com
demo.dev-connect.aveva.com
tpsknowledgecentre.aveva.com
gcsresource.AVEVA.COM
testrc.import.dev-av.capdev-connect.aveva.com
dynamicsimulation.int-cep.connect.aveva.com
appservice-sanity-vek33.dev-ue.capdev-connect.aveva.com
*.chp.capdev-connect.aveva.com
urs.aveva.com
sw.aveva.com
aav4812.dashboard.dev-av.capdev-connect.aveva.com
test-license.capdev-connect.aveva.com
ssl508503.cloudflaressl.com
dbc.connect.aveva.com
rdspre.api.import.imav.connect.aveva.com
*.statusdashboard.com
alpha-datahub-cdn.dev-datahub.capdev-connect.aveva.com
thacvxp.dashboard.preprod-av.connect.aveva.com
cdo2a.api.report.dev-av.capdev-connect.aveva.com
dp-capability.sg.dp.aim.capdev-connect.aveva.com
sw.aveva.com
processengineering.test-connect.aveva.com
rdssh2.dashboard.imav.connect.aveva.com
gateway.aveva.com
int-datahub-pbi-cdn.int-datahub.capdev-connect.aveva.com
dev8.import.dev-av.capdev-connect.aveva.com
ssl322849.cloudflaressl.com
bukoshe.import.salesdemo-pv.connect.aveva.com
cdn.int-datahub.capdev-connect.aveva.com
identity.aveva.com
ram-api.filetransfer.dev-ue.capdev-connect.aveva.com
prev.liveview.dev-insight.capdev-connect.aveva.com
dynamicsimulation.connect.aveva.com
online.wonderware.com
12837234589239034672357235790.dev-dbc.capdev-connect.aveva.com
democvx.elb.tr-av.connect.aveva.com
pvtemp2.api.report.dev-av.capdev-connect.aveva.com
api.3d.pt.dev-fabtrol.capdev-connect.aveva.com
testop7.api.import.dev-av.capdev-connect.aveva.com
dev21.import.dev-av.capdev-connect.aveva.com
testop9.dashboard.dev-av.capdev-connect.aveva.com
dev-systemplatform.exchange.aveva.com
help.exchange.aveva.com
help.exchange.aveva.com
laxman-laas.dev-license.capdev-connect.aveva.com
12837234589239034672357235790.dev-dbc.capdev-connect.aveva.com
*.avs.dev-aim.test-connect.aveva.com
capdev.connect.r53.aveva.com
infra-pbi-cdn.dev-datahub.capdev-connect.aveva.com
rdspre.api.report.imav.connect.aveva.com
dev13.elb.dev-av.dev-connect.aveva.com
sni.cloudflaressl.com
access02.aveva.com
result-service.test-wse.test-connect.aveva.com
testavir.api.report.dev-aim.test-connect.aveva.com
babwas.dashboard.imav.connect.aveva.com
dev14.import.dev-av.capdev-connect.aveva.com
demorc.dashboard.dev-av.dev-connect.aveva.com
*.avs.tr-av.connect.aveva.com
testdev.import.dev-av.dev-connect.aveva.com
*.preprod-avs.capdev-connect.aveva.com
cdn.datahub.connect.aveva.com
avevaworld.aveva.com
mcbucvxtr.api.report.tr-av.connect.aveva.com
sni47348.cloudflaressl.com
ceros4.map.fastly.net
perf.dashboard.dev-av.dev-connect.aveva.com
*.aveva.com
mahtest.api.import.dev-av.capdev-connect.aveva.com
*.int-cep.connect.aveva.com
portal.services.connect.aveva.com
test-datahub-pbi-cdn.datahub.test-connect.aveva.com
dev3.alb.dev-av.dev-connect.aveva.com
mfg1cvx.import.imav.connect.aveva.com
design.aveva.com
dev9.dashboard.dev-av.dev-connect.aveva.com
bukoshe.alb.salesdemo-pv.connect.aveva.com
ceros4.map.fastly.net
*.statusdashboard.com
urs.aveva.com
gomcvx.dashboard.imav.connect.aveva.com
services.softwaresupport.aveva.com
test.tpskc.r53.aveva.com
cdodptest.alb.test-aim.test-connect.aveva.com
2anvax80xptoqf3szqsg24.dev-dbc.capdev-connect.aveva.com
4hmxzvyhs5bbgcoqybirfc.dev-dbc.capdev-connect.aveva.com

Certificate

The complete raw certificate details for dev21.import.dev-av.capdev-connect.aveva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33lF4wnu1Buk8S8ZwbJi
M3RRiPDSPE0SwzPaZcWV/B4z4GnJPJrmnxPYm3GsaeX408Kft1r9Y1mk6GOlkYF6
3cYyeNqPOvq4VIeWBcdmLTABz9w9wvIS1w4p1i5iN5FUga6SwEBxpjvUzfyyeAIX
SGG+jBvPWBQaYh0a+DYRHLJU4Gb+bHk3rkOzIPfLSaphTFALb0yx6Vk57gn4ke71
CyD16ACgkoppCRBishhDmm2OE9UTVUb05rBvVh+BO1MG7StQZyq2B1RiGhkHnvg1
LufEFmi7oBN0LGiszqN+UR80NObSrRxSg0u/xYk5ts3umotFIkgPy6fMo40yZjJ/
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11284934332845758485585579696346802039
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-28 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev21.import.dev-av.capdev-connect.aveva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28210943950404041874781330100544493410573569284262165769182652867539858078351542448126587223174487245000565069088144197416463625734753973657405753908788969252120653278114011179915135102821114141934929081595148624161192139655458131033656873904040721350291152524154458055120103980676161811310029567016209576859686449403783765746177929073506284654680508839325570988430177353274768352195035388308440196559747448608319643160291511464750666023899023006536669598799069461124471183158767490456820587656104485933271740909145564018904809286207562589464809967137542355371554425266282691139862691406761477983624783802043970256777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							51350ad8e4a1433b18a1734f579486091c2d6375
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev21.import.dev-av.capdev-connect.aveva.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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