*.xplore.spglobal.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:d5:5d:b0:5e:11:7b:6b:a0:02:3b:cc:e7:5f:4b:a8 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.xplore.spglobal.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:d5:5d:b0:5e:11:7b:6b:a0:02:3b:cc:e7:5f:4b:a8
Serial Number (int): 17058595417649376374144261756238646184
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 37:aa:55:2c:09:80:6c:a1:cd:af:10:29:24:eb:f1:4f:05:81:0b:6d
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 3d:98:0d:cc:15:b0:bb:3e:12:ef:71:c8:84:51:c3:f8:d5:a2:87:24
Fingerprint (sha256): 04:51:fb:0f:d9:37:11:91:8e:81:fd:cc:71:83:f5:19:e5:9e:9e:8c:10:79:05:be:14:8a:ed:af:11:b5:a9:fd

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate *.xplore.spglobal.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.xplore.spglobal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.xplore.spglobal.com
xplore.spglobal.com

Other certificates including the domain name spglobal.com

(limited to 100 certificates)
Lync2013EMEADRExt1.spglobal.com
accredible.tutor.com
*.jiveon.com
VA06MSG6003.spglobal.com
qa.np.ebb.spglobal.com
aonhrlearningcenter.credentials.aon.com
fdus-74.freshdesk.com
info.spglobal.com
academy-achievements.gong.io
sloft.spglobal.com
spglobal.com
nj09msg071.spglobal.com
*.module1-dev.micld.spglobal.com
stage2.www.spglobal.com
webmail.spglobal.com
leapfrog-ssl-1.gcs-web.com
api.qa.pmi.spglobal.com
academy-achievements.gong.io
*.module-dev.micld.spglobal.com
myreward.spglobal.com
*.jiveon.com
lync2013namdraccess.spglobal.com
*.spgi.spglobal.com
edx.standardandpoors.com
ew-aces.spglobal.com
cdn.spgi.spglobal.com
vgsathostedapps.taxsolutions.spglobal.com
webinspect.spglobal.com
rapcustomerportal.pde.spratingsvpc.com
public-davos.dev.capitalmarkets.spglobal.com
ratings.spglobal.com
sftp-qa.spglobal.com
aonhrlearningcenter.credentials.aon.com
*.xplore.spglobal.com
dcr.infomosaic.nrsdevops.spglobal.com
learning.spglobal.com
support.kot4x.com
api.prod.pmi.spglobal.com
*.aws-east-1.container.spglobal.com
sftp-qa.spglobal.com
nj12msg043.spglobal.com
*.spindices.com
webconf.spglobal.com
academy-achievements.gong.io
spglobal.com
learning.spglobal.com
*.marketintelligence.spglobal.com
uat.eventsplanner.spglobal.com
trial.marketintelligence.spglobal.com
sloft.spglobal.com
edxuat.standardandpoors.com
internal.qa.pmi.spglobal.com
aonhrlearningcenter.credentials.aon.com
razor.spglobal.com
spratingsvpc.com
interactive.spglobal.com
accredible.tutor.com
spindices.com
*.api.corp.spglobal.com
sso.spglobal.com
connect.spglobal.com
*.marketplacestage.spglobal.com
platform-b-prod-eu1.solprod.spglobal.com
*.mistagecld.spglobal.com
share.spglobal.com
academy-achievements.gong.io
stage.www.spglobal.com
*.internalstg.spglobal.com
myreward.spglobal.com
thehub.spglobal.com
*.platform.micld.spglobal.com
accredible.tutor.com
uconnect.spglobal.com
redirect.researchmanager.spglobal.com
www.marketintelligence.spglobal.com
*.pmc.spglobal.com
www.capitaliq.com
sloft.spglobal.com
share.spglobal.com
uk.ldap.spglobal.com
spkhett.spglobal.com
*.jet.spglobal.com
accredible.tutor.com
VA06MSG6006.spglobal.com
www.marketintelligence.spglobal.com
sso.spglobal.com
*.dev.spglobal.com
sf.spglobal.com
app.ratings.spglobal.com
stage.www.spglobal.com
*.api.marketintelligence.spglobal.com
*.marketintelligence.spglobal.com
fdus-74.freshdesk.com
recognition-cdn.spglobal.com
myreward.spglobal.com
*.marketplacestage.spglobal.com
*.stage-ash-w.container.spglobal.com
VA06MSG6004.spglobal.com
plattsreporting.spglobal.com
dw8apiint.taxsolutions.spglobal.com

Certificate

The complete raw certificate details for *.xplore.spglobal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7L7gOh2AcxsJObu8/W4
g3alqsfNYxLum2qul3IX6lxx58gHSX+LR3quFgnwJJubgCXP6gut0uwmmghOL5oH
122RplsRaEy7uEIvRLff0JXYKggYsO2yteYNIITniNKv6qB7IQhKdPS/+oOtUXgN
rwsks/g7ZlCbJT3eeWxr7PXSDnZfcJRMB6YZHLRTBWCZYhVb/+kYn7Ae0kIb9Cpu
gm7ywBldMLj/GEyum7+wGhwwB7QArN7jL14ucGYSO4ayD1oi8K0l17ZGY1J6DHm2
488tTPSdlI6C7Loas8zRgFtflvhKSVHhg3iHBd12L56RGotL5ccbwuPyQPc2mj2u
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17058595417649376374144261756238646184
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.xplore.spglobal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20665103238004066425379998904828923203216493959929977859036750352530355572751593639726403216262771376712630520384281883461030825688901833084681178642531265379399946363871000864957800376502526786361244597662683841731156055102954998390756273053115580245998211983003232752897362888061523873321170653293155587351902699171970190211429976388492445460557063806741257928608247519128681341718287787886715976522316842761620597342180611150300022898145670305659298933963242017965279994562975962006123203106169339104558876292857690030851373053034265713023266153777906320626080660132063033073832121238288040664506295332382265159341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							37aa552c09806ca1cdaf102924ebf14f05810b6d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xplore.spglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xplore.spglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00c2182250eb013a0f41e30696629b5c8369ee331a6692187b76983b5f609ce120449cf5a45626e293db8e354c2aef1b11b021cd5300f16916a1540653fc6b05f2b437871f86e584a654b1f3efd7fdae7d3a081ffb00e69b9658d78f6ec2239f9f505483df2a20d608bc4a31200240844255eb3bd31300d029c883db8144159837b0718bbcaee4d56614aa6b15bd2c1aacc549e7af457b83b07bb17c4ad574e390b41b8bd4eab503f1089adb49bbad46d96fd8ecc14858f7b97beb7d44b2f07769aacb1f173f17bff30a36bdad2e7093be21783b29d7cbb5796a1bb78a8179a2966e80ec1f2fb8326600b2375600e7996974916dd8d8ca79b7ba227b674dc29a38