main.auth.carta.com

Issued by Amazon

About this certificate

This digital certificate with serial number 05:ed:b5:c8:ac:53:81:4e:dd:8f:f6:00:2b:d3:6b:6b was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=main.auth.carta.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:ed:b5:c8:ac:53:81:4e:dd:8f:f6:00:2b:d3:6b:6b
Serial Number (int): 7880401349500470490081959753087675243
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: db:a0:30:dd:cd:4a:2e:93:34:61:ae:31:1e:37:f5:4d:ac:0f:06:03
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 83:40:9a:28:91:b1:db:52:56:6e:36:93:37:ce:b1:e4:1a:a2:1c:ca
Fingerprint (sha256): 03:d2:a5:32:9c:3c:fe:2b:f8:0c:26:03:72:1e:b4:c0:6f:23:d5:bf:c4:1a:7b:db:f9:fa:e9:1c:6d:33:a4:87

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate main.auth.carta.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for main.auth.carta.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

main.auth.carta.com
*.main.auth.carta.com

Other certificates including the domain name carta.com

(limited to 100 certificates)
amtrust.kinnser.com
carta.us.unblu.app
calendar.peopleteam.carta.com
statuspage.io
hello.carta.com
statuspage.io
statuspage.io
amtrust.kinnser.com
statuspage.io
changes.carta.com
1pw-scim.carta.com
issquaredown.com
incorporate.carta.com
statuspage.io
calendar.peopleteam.carta.com
amtrust.kinnser.com
statuspage.io
statuspage.io
statuspage.io
community.carta.com
statuspage.io
statuspage.io
statuspage.io
preferences.carta.com
releasenotes.carta.com
statuspage.io
5657230527430656-fe3.pantheonsite.io
sandbox.carta.com
statuspage.io
statuspage.io
statuspage.io
changes.carta.com
carta.com
boardroom.carta.com
statuspage.io
statuspage.io
statuspage.io
main.auth.carta.com
carta.us.unblu.app
5657230527430656-fe3.pantheonsite.io
5657230527430656-fe3.pantheonsite.io
statuspage.io
5657230527430656-fe3.pantheonsite.io
*.app.carta.com
calendar.peopleteam.carta.com
statuspage.io
statuspage.io
releasenotes.carta.com
statuspage.io
calendar.fundadmin.carta.com
mixmax.carta.com
1pw-scim.carta.com
hello.carta.com
statuspage.io
statuspage.io
carta.com
tracking.peopleteam.carta.com
statuspage.io
ink.carta.com
carta.com
statuspage.io
statuspage.io
safes.carta.com
statuspage.io
na46-1.cdn.salesforce-communities.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
5657230527430656-fe3.pantheonsite.io
statuspage.io
releasenotes.carta.com
amtrust.kinnser.com
statuspage.io
1pw-scim.carta.com
carta.com
ssl809935.cloudflaressl.com
sandbox.carta.com
carta.com
statuspage.io
main.auth.carta.com
email.recruiting.carta.com
statuspage.io
www-contentful-test.carta.com
statuspage.io
1pw-scim.carta.com
calendar.fundadmin.carta.com
5657230527430656-fe3.pantheonsite.io
5657230527430656-fe3.pantheonsite.io
statuspage.io
statuspage.io
calendar.fundadmin.carta.com
unblu.demo.carta.com
5657230527430656-fe3.pantheonsite.io
changes.carta.com
changelog.carta.com
hello.carta.com
statuspage.io
community.carta.com
changes.carta.com

Certificate

The complete raw certificate details for main.auth.carta.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTP5paHPCRwqzmjZ7yzu
RgbKv0pBL5+8/MM8ZpYWcnGwxMcxyLN+uQl1gtypr8MktTtvKW1sTqRCZ/9LaRva
VSy0yx2ApdaR/IFSNQxkXPQnd9ZZc8jszaDB1lMksKLnDB/r78xI5J7Y7tXDopGG
czXMnEoX+myUYnPpe6Ebjs7ixBm8wiFajsx/JkxrcWaoAQfHprwc7wHw+ptHZtXZ
1ONiRmmAeljPQ/1qJkKkGPF55XkUxXWWtc3ax42nPxSb+CDfWn74qLa4tIR8MUaY
+03i09O+5b5IPpO2YhGU4mSoxLL6nKUzahcGIAX8CEsalksIG8S/tKscUbZqSjql
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7880401349500470490081959753087675243
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-27 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'main.auth.carta.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22874763117127316111210043061552485941299458569664307014534128522441079309155293508361545174172900819420452719173064552485135449969923375643828161802610012237748775906616212780095393416976636226643064274082173277683473029773114882103116635402168309387077985793594365790556935661262113319268799447045652711874607393626089863074664016550175977817547357918838498090442650968490883006378544027129472782845748584771688187009297809108794293720944859964797483482605540505766073288094127350132418790417370608368684329289382866444855455297386978836079926105071585868672473326253162140818534712792952072259708087459712199206223
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dba030ddcd4a2e933461ae311e37f54dac0f0603
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'main.auth.carta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.main.auth.carta.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000169bd99946600000403004830460221009a7e955e7a121643bed1903b97ecd098b380a10cd43d452abe31a22fbb4ef74f0221009ef3070c6231ff567763e9b1da11065acdcaae8a4688ac2dd9f5072d257e3f3d0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000169bd99954c0000040300463044022006b5198100e2e20dc37183064653b6e16f7a65711a613ee90579db944cd8f98e02203fef7e1917aa86c734adf646494f08409edcf64b980ac7dce59c93f4587ae46c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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