*.chaordicsystems.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:f8:f3:b6:d8:a8:39:11:bc:33:45:37:a9:43:72:ed was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.chaordicsystems.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:f8:f3:b6:d8:a8:39:11:bc:33:45:37:a9:43:72:ed
Serial Number (int): 17243368682447023839894933397123068653
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0a:fe:69:e2:f4:cf:64:2f:b6:07:fc:f6:e6:c6:24:f3:79:8c:30:a3
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): ef:5a:eb:ca:8c:b0:5c:8e:e0:80:3a:bf:93:92:5c:f1:01:76:c8:eb
Fingerprint (sha256): 03:fc:d9:f2:4a:7f:36:9d:bd:09:50:59:5c:65:11:1d:fc:85:93:06:0b:66:78:fc:70:ed:08:e2:47:06:5c:d0

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.chaordicsystems.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.chaordicsystems.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.chaordicsystems.com

Other certificates including the domain name chaordicsystems.com

(limited to 100 certificates)
azion.com
azion.com
*.chaordicsystems.com
*.dc.chaordicsystems.com
*.chaordicsystems.com
*.chaordicsystems.com
*.chaordicmail.com
azion.com
*.chaordicsystems.com
azion.com
*.datalake.chaordicsystems.com
azion.com
*.chaordicsystems.com
*.chaordicsystems.com
azion.com
azion.com
*.chaordicsystems.com
azion.com
azion.com
*.chaordicsystems.com
azion.com
azion.com
*.chaordic.com.br
azion.com
omniplat.io
azion.com
azion.com
azion.com
azion.com
*.neemu.com
*.neemu.com
azion.com
*.chaordicsystems.com
*.chaordicsystems.com
*.linximpulse.com.br
*.common.linximpulse.net
azion.com
azion.com
azion.com
azion.com
azion.com
azion.com
azion.com
*.linximpulse.com.br
omniplat.io
azion.com
*.chaordic.com.br
*.chaordicsystems.com
azion.com
*.chaordicsystems.com
azion.com
*.chaordicsystems.com
azion.com
*.chaordicsystems.com
azion.com
*.chaordicsystems.com
*.chaordicsystems.com
*.dc.chaordicsystems.com
*.chaordicsystems.com
*.chaordicsystems.com
*.chaordic.com.br
*.chaordicsystems.com
*.datalake.chaordicsystems.com
*.chaordicsystems.com
*.chaordicmail.com
*.chaordicsystems.com
azion.com
azion.com
*.omniplat.io
*.linximpulse.net
*.chaordicsystems.com
*.platform.linximpulse.net
*.chaordicsystems.com
*.chaordicsystems.com
*.platform.linximpulse.net
azion.com
*.chaordicsystems.com
azion.com
*.linximpulse.net
*.chaordicsystems.com
azion.com
*.neemu.com
*.platform.linximpulse.net
azion.com
azion.com
*.chaordicsystems.com
azion.com
*.chaordicmail.com
azion.com
azion.com
azion.com
azion.com
azion.com
azion.com
azion.com
*.dc.chaordicsystems.com
*.neemu.com
azion.com
azion.com
*.linximpulse.net

Certificate

The complete raw certificate details for *.chaordicsystems.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPX18HJ2ydLdhkKqJ7EB
2/lJ2gVuxqWO0XJ+2jpHEjV8PhjqgahX34G46yiaXp5OYfQ7Y6iAqwBmFoFvPwaA
rvBvNcTrgkZuIpFuHMZ0B7I+WXpq+w+U4Nac/NhkvSbCxb0e5Z3n5DteN9s763Is
8KkQvH51kd5UlPlhT5mtc1gbmLPg1hYxRF7aTS89HZUlnz9dzujpPthb3i45Gb6n
VymC6QyvBSISDLUofJqTvWc4jVfISQoXDIAHxvpDWm3noDYKMphBeZ08IiEY0reG
/egmeKwVdV5nloSh8J0inOJ5GuIjx554RyS0ZnRcFpb8nzx0NTF5f20QPXRUlOiv
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17243368682447023839894933397123068653
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-28 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.chaordicsystems.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23854089075334785983569968248928287034167902603413565412344525074470415658161177393119370645397179632221787699839023475340187139150919451276834982086878019872606091215980474916360355332593315236266234432106116915751593320383095188062940775857408284489982843271235624753031061657748657706936660506264726012431294720092081898358175689563763689580625926787952979261848305797225414134666817796542728027678797827960265999824734394513166291971378802431409339707914563113675081264183643987871681636071016413728330249956314459238864027118737327897577728539721098060537039625625285046304624191287908373344083430404771375787969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0afe69e2f4cf642fb607fcf6e6c624f3798c30a3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chaordicsystems.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016894c73c010000040300473045022100f69a7012a033707394e1a95d3e17a91e1dee37ebbe7e299bab32eea49c8d57d902207f311356a3e0dbb7ab627fd18a9d001a9c46c065ece63e0f6d87742614cb7d860077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016894c73cc70000040300483046022100c4060fc40efa3f6398c7644fb9d9b05081517204441ec2b315c965e8762c8c3c022100b9f2ba4404b37352b49371dbbaecc1964ce0761b088db68fbaa911f8d19a5401
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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