one-local.aods.horizondev.cloud

Issued by Amazon

About this certificate

This digital certificate with serial number 07:63:9d:1a:69:69:de:75:6a:3b:97:ae:7a:4a:1f:13 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=one-local.aods.horizondev.cloud

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:63:9d:1a:69:69:de:75:6a:3b:97:ae:7a:4a:1f:13
Serial Number (int): 9821819790353271502264406441129025299
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: b4:2f:41:86:5b:fa:7d:cc:67:f8:20:e5:bd:37:40:2e:78:2d:ad:3b
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): dc:60:34:da:20:96:3d:d4:79:47:bb:0b:d2:fc:55:4a:64:74:50:87
Fingerprint (sha256): 03:c3:08:c3:93:a3:fe:5b:eb:3d:fe:1d:4a:05:1f:fb:07:db:26:b3:8a:ca:dd:b5:f1:b7:22:7d:62:5d:79:16

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate one-local.aods.horizondev.cloud

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for one-local.aods.horizondev.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

one-local.aods.horizondev.cloud

Other certificates including the domain name horizondev.cloud

(limited to 100 certificates)
fgeks-qatest.qa.horizondev.cloud
feat-device-local.regional-stats.horizondev.cloud
prom.dev-v1-0-2.qa.horizondev.cloud
feat-nb-dev-local.regional-stats.horizondev.cloud
z003zmzv-local-om.boic.horizondev.cloud
hedge.horizondev.cloud
regional-stats.horizondev.cloud
z004np6z-ingest.point.horizondev.cloud
feat-device-local.regional-stats.horizondev.cloud
feat-224222-local-om.boic.horizondev.cloud
local-api-fix-paginationcursor.experience.horizondev.cloud
prom-dev-chore-non-fargat.qa.horizondev.cloud
device.horizondev.cloud
j7wj6e.aods.horizondev.cloud
fix-sonar-issues-ws-om.boic.horizondev.cloud
one-local.aods.horizondev.cloud
fgeks-teratest.qa.horizondev.cloud
markuswsl-local.aods.horizondev.cloud
nb-cetapi.cerberus.horizondev.cloud
ent-local.regional-stats.horizondev.cloud
device.horizondev.cloud
test-csc-local.aods.horizondev.cloud
*.device.horizondev.cloud
*.local-app-reference.apps.horizondev.cloud
*.dummytest.apps.horizondev.cloud
*.alarm.apps.horizondev.cloud
qadzzr.aods.horizondev.cloud
*.dummytest.apps.horizondev.cloud
local-api-fix-paginationcursor.experience.horizondev.cloud
feat-nb-dev-local.regional-stats.horizondev.cloud
9qxco0.aods.horizondev.cloud
prom-dev-cr-126-local.qa.horizondev.cloud
supress.aods.horizondev.cloud
arag5b.aods.horizondev.cloud
ita48361-local-om.boic.horizondev.cloud
chore-logging-improvements-local.aods.horizondev.cloud
fix-sec-headers-local.aods.horizondev.cloud
fgeks-qatest.qa.horizondev.cloud
feat-csc-migration-local.aods.horizondev.cloud
prom-dev-chore-non-fargat.qa.horizondev.cloud
fgeks-qatest.qa.horizondev.cloud
feat-csc-migration.aods.horizondev.cloud
fgeks-qatest.qa.horizondev.cloud
dwg-asset-extractor.cerberus.horizondev.cloud
engineering.horizondev.cloud
user.horizondev.cloud
z004np6z-ingest.point.horizondev.cloud
local-feat-2383077-2.onboarding.horizondev.cloud
aods.geometry.horizondev.cloud
main-local.regional-stats.horizondev.cloud
vivek-local.aods.horizondev.cloud
fgeks-qatest.qa.horizondev.cloud
fgeks-teratest.qa.horizondev.cloud
z000jc4t.engineering.horizondev.cloud
ent-local.regional-stats.horizondev.cloud
prod-alarm--local.comfort.horizondev.cloud
fix-shift-mt-local.aods.horizondev.cloud
inc-coverag-local.regional-stats.horizondev.cloud
fgeks-qatest.qa.horizondev.cloud
*.horizondev.cloud
fix-sonar-issues-ws-om.boic.horizondev.cloud
*.local-app.apps.horizondev.cloud
fix-delete--local-om.boic.horizondev.cloud
v1-1-3-local.regional-stats.horizondev.cloud
feat-org-ev-local.regional-stats.horizondev.cloud
ecoview.horizondev.cloud
prom-dev-chore-126.qa.horizondev.cloud
prom-dev-chore-non-fargat.qa.horizondev.cloud
feat-new-po-local-om.boic.horizondev.cloud
prom-dev-chore-non-fargat.qa.horizondev.cloud
fgeks-qatest.qa.horizondev.cloud
*.local-app-reference.apps.horizondev.cloud
engineering.horizondev.cloud
feat-device-local.regional-stats.horizondev.cloud
test-kms-creation-local.aods.horizondev.cloud
hangman.engineering.horizondev.cloud
fix-me-permissions-local.aods.horizondev.cloud
prom-dev-chore-126.qa.horizondev.cloud
local-api-fix-emptycovs.experience.horizondev.cloud
user.horizondev.cloud
z6jm90.aods.horizondev.cloud
feat-device-local.regional-stats.horizondev.cloud
prom-dev-main.qa.horizondev.cloud
fgeks-teratest.qa.horizondev.cloud
inc-coverag-local.regional-stats.horizondev.cloud
user.horizondev.cloud
locations.horizondev.cloud
fgeks-qatest.qa.horizondev.cloud
local-fix-defect-2402097.onboarding.horizondev.cloud
logs.hedge.horizondev.cloud
aods.subscription.horizondev.cloud
*.pen-dummy-test.apps.horizondev.cloud
local-z004drnb.onboarding.horizondev.cloud
fgeks-teratest.qa.horizondev.cloud
post-delete-local.comfort.horizondev.cloud
kl13mt.aods.horizondev.cloud
nvajgf.aods.horizondev.cloud
xdg2lr.aods.horizondev.cloud
cetapi.cerberus.horizondev.cloud
feat-nb-dev-local.regional-stats.horizondev.cloud

Certificate

The complete raw certificate details for one-local.aods.horizondev.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ZsTt2l0+HdsSYS3N4UD
QWJ0cghltdFKJPGTDqs636ZlAeh7xaJ8zxsF1YySDt31URxv9Kxh6fLdvrY03p1z
jRnazF461xF81MvK9305DB0K9Hn125rd/Cx82R5/K+Nec2LW+8Hqj5xFxyWXzqZu
AX4V1JuDwPfVdCwHiub74xVXzPGm5QtIlPcqj3YD3MuZ5e6o+wsc55w5oARtJsLf
DLq3d9DeOk2vltUrdj4IZP8NGdeuMerRsw2zcylfDDqfBHCO5Ivv0IHgM5Oo0Y06
IPsFi2KiAxmuOq3uAjILRyYYguoucYFFqTK+CoArxq811oFho+UVSEbYsF+6VtRO
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9821819790353271502264406441129025299
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'one-local.aods.horizondev.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31004856044086806822147409040085309113712186317073138411031093378458244434012041553251304241641235767668248029586391311617236713277024010886875311384898387027009252484007892459031061502872437082539716115074432356090323422102437736922579796874014967279321830488266611933192939163430334465848545276920801398086288834674015080781315661699229550179781908061146278242963200071621109653716652719563274890320450826103008313693237945081089964353475165335977996466165146406119760635265553869737962379645117097565550434994044906668178327177168293929303378528635317808693758229096889895811308167901462048229774700257360523578969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b42f41865bfa7dcc67f820e5bd37402e782dad3b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'one-local.aods.horizondev.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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