enhanced-migcal-dr.poladmin.test.ic1.statefarm

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 08:88:a5:c0:27:ff:97:52:67:77:ba:8e:ce:99:fc:1b was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=enhanced-migcal-dr.poladmin.test.ic1.statefarm

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:88:a5:c0:27:ff:97:52:67:77:ba:8e:ce:99:fc:1b
Serial Number (int): 11343338160810774869545121550993849371
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e1:3f:4c:7c:4e:7f:6e:ab:5e:27:ed:68:9f:e9:0f:01:fb:58:3b:7d
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 4d:92:12:36:7e:19:1d:96:80:cc:ba:23:53:80:0b:33:8b:c0:5d:ba
Fingerprint (sha256): 03:ed:02:21:0f:81:56:86:50:b4:89:65:20:f2:a7:9d:85:03:24:2d:b1:54:ab:1e:80:eb:72:f3:17:5d:dc:70

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate enhanced-migcal-dr.poladmin.test.ic1.statefarm

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for enhanced-migcal-dr.poladmin.test.ic1.statefarm

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

enhanced-migcal-dr.poladmin.test.ic1.statefarm

Other certificates including the domain name ic1.statefarm

(limited to 100 certificates)
rentaleligibility-1748234.claimsvc.test.ic1.statefarm
mmw.usw2.puasisbx.test.ic1.statefarm
rental-exp-rest.claimsvc.sandbox.test.ic1.statefarm
sf-amccint-asap-moonracers-associate.amccint.test.ic1.statefarm
cnam.test.ic1.statefarm
*.mgmt.ic1.statefarm
doccatalog-api.pcmcc.test.ic1.statefarm
sf-isc-flc6-spa.iscsbox.test.ic1.statefarm
payloadcapture-env1.amccdev.test.ic1.statefarm
docs.pcsndbx.test.ic1.statefarm
doccatalog-vafab9-api.pcmcc.test.ic1.statefarm
uics-api-dev1.pcmcc.test.ic1.statefarm
sampleapp.pcfrate.test.ic1.statefarm
doccatalog-gj8t.pcmcc.test.ic1.statefarm
stuckapp-bdd.bassets.test.ic1.statefarm
sf-pcmcc-hotapi-env6-us-east-1.pcmcc.test.ic1.statefarm
sf-pushnote-api.pushnote.ic1.statefarm
sf-thunder-bei-env1-api.pcmngdh1.test.ic1.statefarm
doccatalog-api.pcmcc.test.ic1.statefarm
rentaleligibility-1746348.claimsvc.test.ic1.statefarm
jgdb.pcattest.test.ic1.statefarm
max-monthly-benefit-api.ethealth.test.ic1.statefarm
doccatalog-nk5f.pcmcc.test.ic1.statefarm
directemail-xm2r.claims.test.ic1.statefarm
*.hub.test.ic1.statefarm
doccatalog-dqgn.pcmcc.test.ic1.statefarm
updated-mi-jwt-authenticator.redcap.test.ic1.statefarm
stuckapp-bdd.bassets.test.ic1.statefarm
app-use1.rmr.gendeptm.test.ic1.statefarm
datasolutions-plii-api-sndbx.pcingest.test.ic1.statefarm
customer-data-api.iihenbld.test.ic1.statefarm
bcd-services.puasisbx.test.ic1.statefarm
pcmcc.test.ic1.statefarm
sf-aventicon-efs-v.pcsndbx2.test.ic1.statefarm
wc.poladmin.test.ic1.statefarm
data-registry-ops.pcas.isbx.ic1.statefarm
pnr-env1.bassets.test.ic1.statefarm
claimaggregator-sbx.pcurim.test.ic1.statefarm
clmfilclms-sts-api.poc.test.ic1.statefarm
tdm-env3.bassets.test.ic1.statefarm
lablooter-lp-ddk6.seccode.test.ic1.statefarm
pcmcc.ic1.statefarm
prisma-test-vaar8w.test.ic1.statefarm
api.pcmr.pcingest.test.ic1.statefarm
claimaggregator-env7.pcu.test.ic1.statefarm
doccatalog-nk5f.pcmcc.test.ic1.statefarm
analytics-test3-seg4.claimsvc.test.ic1.statefarm
efttoproviderl9kt.claimsvc.sandbox.test.ic1.statefarm
doccatalog-vaflld-api.pcmcc.test.ic1.statefarm
repaireligibility-1490984.claimsvc.test.ic1.statefarm
mmapi.scrummy.bill.test.ic1.statefarm
api.compas.poc.test.ic1.statefarm
*.beginningofday.pcsndbx2.test.ic1.statefarm
plpc-aws-rac.pcmngd02.test.ic1.statefarm
devops.test.ic1.statefarm
iseit-poc.udaas.test.ic1.statefarm
dlt-prodbea-api.pcmcc.ic1.statefarm
nkapi.reg.eclipse.dev.test.ic1.statefarm
pnr-bdd.bassets.test.ic1.statefarm
cdmgt-c2d2syncv2.custmgmt.test.ic1.statefarm
autotools.pcmngd01.test.ic1.statefarm
dlta-dev9.pcmcc.test.ic1.statefarm
claimsvc.clmsbx.test.ic1.statefarm
terratest-lilypad-s3-api.redcap.test.ic1.statefarm
pcmcc.test.ic1.statefarm
lgcyacquisition-ing-api-breakfix.pcingest.test.ic1.statefarm
*.ops-k8s.warm.pcas.isbx.ic1.statefarm
pcesm-apigw-env2.pcmngd01.test.ic1.statefarm
bti.renewal.pymnt.test.ic1.statefarm
resistance-cbk-test.pcafcld.test.ic1.statefarm
doccatalog-vabaus.pcmcc.test.ic1.statefarm
bicmpretend.bparch.test.ic1.statefarm
enhanced-migcal-dr.poladmin.test.ic1.statefarm
api-use1.treasuryfncl.gendeptm.ic1.statefarm
doccatalog-vafph9.pcmcc.test.ic1.statefarm
sfp-ep20.sfconnect.digxp.test.ic1.statefarm
dltage.pcmcc.test.ic1.statefarm
cssdb-document-info-ebet.pcmngdh1.test.ic1.statefarm
event-ingestion-hub-test.entint.test.ic1.statefarm
tfe.infra.ic1.statefarm
w1q4-jwt-authenticator.redcap.test.ic1.statefarm
dlt-dev6gea-api.pcmcc.test.ic1.statefarm
rqstsvcs-test.pcsndbx2.test.ic1.statefarm
aprvlapp.ds.test.ic1.statefarm
im-main-vaaei8.sfconnect.digxp.test.ic1.statefarm
et-metadata-systemtest-axon.datalake.test.ic1.statefarm
wss-emg6.sfconnect.digxp.test.ic1.statefarm
repaireligibility-1724763.claimsvc.test.ic1.statefarm
repaireligibility-1498767.claimsvc.test.ic1.statefarm
ecrmofficeswitchcheck.koko.amccdev.test.ic1.statefarm
dlt-testgwa-api.pcmcc.test.ic1.statefarm
doccatalog-dqgn-api.pcmcc.test.ic1.statefarm
uicscoi-userinitiated-dev1.pcmcc.test.ic1.statefarm
tdm-env3.bassets.test.ic1.statefarm
clmfilclmsdata-api-env3.poc.test.ic1.statefarm
doccatalog-dqgn-api.pcmcc.test.ic1.statefarm
lmtapi.asts.test.ic1.statefarm
bti.renewal.pymnt.test.ic1.statefarm
mmapi.scrummy.bill.test.ic1.statefarm
ingest-ftsj.sfconnect.digxp.test.ic1.statefarm

Certificate

The complete raw certificate details for enhanced-migcal-dr.poladmin.test.ic1.statefarm in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYZ1BF3hzgDToIENfG+N
mEZj+lQ5LZZ6jlinMuvMKW4ehCwBEv05rsDzGBkhxN1KqeaoUAgzIVIpH2hsEgtZ
NrlbDNNteBEA0YlyKcMCKZM+Iqf3D83LRJOHBv5QR+pocYElNG1F1AguQDOFE7t7
Zmv55tA5dm0qDF+dH32MSXk+eWs//PsH+debyGRUlS5gBS8TN462dKEHui74tdjn
6MweTE2yrZVK++w+OLk1QZnqSBVO0V95FLummSc6hFqBsFP7lfpchewKWEO0CRnS
Ao6HGD1K9awMHO+0BfsqtIe5Es6D2b1LU+Geu185h2/7ENM8vZKJmDhC/Iji46XA
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11343338160810774869545121550993849371
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'enhanced-migcal-dr.poladmin.test.ic1.statefarm'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21400576805385579563960832264463857778992720051319000174363764825812172470678796266236264446800669210566575314502591492509480558302157889450838419629787298547884169875313947009610446959488838358020183440720664060138637626153444342387608172855528158014782122853695419309541612113642324705894018894340369273464861528999633225698251735726886829070335081321928866509717268754518545683682118900754624367721267154359812611378898681033465131425674896207990682725515924550484669643084079222319832184224655602105921528688521818603967998904671336045569530288575462037941235698688882893071076615718201200900094058256022957834357
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e13f4c7c4e7f6eab5e27ed689fe90f01fb583b7d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enhanced-migcal-dr.poladmin.test.ic1.statefarm'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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