lift.acquia.com

Issued by Amazon

About this certificate

This digital certificate with serial number 07:7a:79:7e:b8:29:34:22:d9:89:25:cd:a3:e9:5b:d9 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lift.acquia.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:7a:79:7e:b8:29:34:22:d9:89:25:cd:a3:e9:5b:d9
Serial Number (int): 9940520398541232702088406090457373657
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: de:0f:03:42:0b:ec:1c:c3:18:dd:51:ac:2a:55:ec:dc:70:14:c2:71
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): bb:ba:dd:1d:87:33:cb:9b:e2:74:ca:e3:98:dc:5a:80:4b:f4:66:c0
Fingerprint (sha256): 03:f3:ec:d0:c4:48:ed:38:2f:49:cc:d8:f6:ae:95:cb:2c:48:a5:37:fe:1b:3a:f2:17:c4:c8:e0:e2:c5:1d:ff

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate lift.acquia.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lift.acquia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lift.acquia.com
*.lift.acquia.com

Other certificates including the domain name acquia.com

(limited to 100 certificates)
statuspage.io
status.acquia.com
statuspage.io
statuspage.io
statuspage.io
adxstatus.com
ssl973641.cloudflaressl.com
san-30-s12.tlsprovisioning.exacttarget.com
sni.cloudflaressl.com
statuspage.io
adxstatus.com
svn-2411.prod.hosting.acquia.com
*.acquia.com
statuspage.io
san-29-s12.tlsprovisioning.exacttarget.com
statuspage.io
lift.acquia.com
radash.acquia.com
useastucc5.acquia.com
*.content-hub.acquia.com
cskb.acquia.com
acquia-sites.com
cskb.acquia.com
adxstatus.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
lift.acquia.com
statuspage.io
*.c.ssl.fastly.net
otto.acquia.com
lift.acquia.com
statuspage.io
sni.cloudflaressl.com
helpdesk.gapsi.com
statuspage.io
cds2.cvent.com
*.jfrog.ais.acquia.io
adxstatus.com
adxstatus.com
statuspage.io
status.acquia.com
statuspage.io
cds2.cvent.com
statuspage.io
statuspage.io
statuspage.io
acquarium.acquia.com
portal.ops.acquia.com
helpdesk.gapsi.com
statuspage.io
lift.acquia.com
statuspage.io
acquia-sites.com
*.acquia.com
questionnaire.acquia.com
view.marketing.acquia.com
svn-2420.devcloud.hosting.acquia.com
statuspage.io
statuspage.io
san-30-s12.tlsprovisioning.exacttarget.com
statuspage.io
statuspage.io
*.acquia.com
ssl363537.cloudflaressl.com
*.c.ssl.fastly.net
adxstatus.com
*.acquia.com
sni.cloudflaressl.com
statuspage.io
statuspage.io
adxstatus.com
ssl363535.cloudflaressl.com
statuspage.io
statuspage.io
statuspage.io
dev.lift.acquia.com
ssl946310.cloudflaressl.com
*.sr-dev.acquia.com
cci.acquia.com
dev.lift.acquia.com
accounts.acquia.com
cds2.cvent.com
statuspage.io
sni.cloudflaressl.com
*.sr-dev.acquia.com
acquia-sites.com
acquia-sites.com
statuspage.io
adxstatus.com
test.bin.acquia.com
helpdesk.deistermachine.com
ssl363535.cloudflaressl.com
statuspage.io
bin.acquia.com
statuspage.io
statuspage.io
accounts.acquia.com

Certificate

The complete raw certificate details for lift.acquia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyCat9RCv3XVMG2M08B4
Bom16QgzqlcJO+fJrAlTnsocJ3yVueKwaZyhb777ESv6ZmdeXU9UCLe/lh2h20+T
NRs4CVJfDLfCBDEpH/pb3+IbSf95WmardQj8uTJCrt/YBPzFQI57rxuQGsM+KLNI
gDx5/cyrxWAqTYln/wLSmJTnSBRwknDPF4KQRxw3NLBZVX7K01duuYJ73empbozg
L+3OM47zcURHyGQvt1KsqTs1W4tyvX/N0GxVLPWMLMr8ent1G31UfjWWQhowQDq4
sCcAkN9fDE3z3G+Kyv98FprEu9MK1vpuwOzOlnfScfHJxuK5Z9KP/vY3H3lhZxce
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9940520398541232702088406090457373657
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lift.acquia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26147406940821668003354731641903945316239275555901560928562133774566147048563555549887256157981509930709461079308090343057652698173861075261441840601476713450067684271025928397034967367349374816037568729077606233607333675261973661599893137898251497586106612887035918218472880456847580542748262461261874421673495782857922744509899220197349368571466347830446428967218468040401477115614431683430738370559183618692616466462240104109668936376704605091146396466855058600734676968472316717993074950408405490158423873306613606141432511856423444462940872671269404846031855805990318392229924372905377567109430323454850148802069
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de0f03420bec1cc318dd51ac2a55ecdc7014c271
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lift.acquia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lift.acquia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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