*.ott.kaltura.com

Issued by Amazon

About this certificate

This digital certificate with serial number 03:a3:ce:3d:36:8f:e4:42:a0:14:98:33:c5:cb:90:ce was issued on by Amazon.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.ott.kaltura.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a3:ce:3d:36:8f:e4:42:a0:14:98:33:c5:cb:90:ce
Serial Number (int): 4838211401478334987529559143241978062
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 0d:f5:1e:0a:ed:a9:93:2f:5b:0b:a9:45:c2:14:f3:41:da:c4:d4:3a
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 77:63:35:12:41:9c:df:ce:b0:8b:56:d5:32:97:f0:4a:b2:1c:6d:48
Fingerprint (sha256): 04:ea:5c:59:ad:4e:b3:e0:d1:47:3d:74:3c:86:61:37:3b:92:75:07:bc:6d:37:bd:ac:14:90:f5:44:46:aa:52

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.ott.kaltura.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ott.kaltura.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ott.kaltura.com
*.drm-as.ott.kaltura.com
*.dms-as.ott.kaltura.com
*.tvpapi-as.ott.kaltura.com
*.api-as.ott.kaltura.com
*.tvm-as.ott.kaltura.com
*.images-sg.ott.kaltura.com
*.player-as.ott.kaltura.com
*.rest-as.ott.kaltura.com
*.kaltura.com

Other certificates including the domain name kaltura.com

(limited to 100 certificates)
clarity.status.broadcom.com
nagra-drm-proxy-vpn-orp1.ott.kaltura.com
u2.shared.global.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
ez.fukuoka.status.ricoh.com
rest-vfs1.ott.kaltura.com
*.ott.kaltura.com
u2.shared.global.fastly.net
incapsula.com
cms-corp.kaltura.com
canada.status.coconutsoftware.com
newrelic.kstars.org
ez.fukuoka.status.ricoh.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
gij.gitkrakenstatus.com
images-nl.ott.kaltura.com
status.activtrak.com
u2.shared.global.fastly.net
u2.shared.global.fastly.net
rest-vfs1.ott.kaltura.com
u2.shared.global.fastly.net
us-east-1-san4.blackboard.com
u2.shared.global.fastly.net
impactstatus.validic.com
impactstatus.validic.com
canada.status.coconutsoftware.com
covid-19-status.anexia.com
u2.shared.global.fastly.net
newrelic.kstars.org
prospective.shared.global.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
apicdn.sg.kaltura.com
canada.status.coconutsoftware.com
university.kaltura.com
pingdom-check.acmeapi.co
incapsula.com
rest-vfp1.ott.kaltura.com
estado.medios.com.ar
u2.shared.global.fastly.net
vpaas.kaltura.com
*.ott.kaltura.com
estado.medios.com.ar
newrelic.kstars.org
u2.shared.global.fastly.net
u2.shared.global.fastly.net
canada.status.coconutsoftware.com
canada.status.coconutsoftware.com
*.eu.kaltura.com
impactstatus.validic.com
leapfrog-ssl-42.gcs-web.com
dns-vetting1-jeffg-noah.map.fastly.net
us-east-1-san4.blackboard.com
mediaspace.kaltura.com
chat.nvp1.ovp.kaltura.com
u2.shared.global.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
impactstatus.validic.com
u2.shared.global.fastly.net
canvas.kaltura.com
u2.shared.global.fastly.net
dev.mw.smart-integration.status.ricoh.com
*.here.tv
dns-vetting1-jeffg-noah.map.fastly.net
corp.kaltura.com
6bd21a3c.status.cleafy.cloud
drm-vfp1.ott.kaltura.com
u2.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
u2.shared.global.fastly.net
ez.fukuoka.status.ricoh.com
prospective.shared.global.fastly.net
u2.shared.global.fastly.net
drm-vfp1.ott.kaltura.com
clarity.status.broadcom.com
*.ott.kaltura.com
canada.status.coconutsoftware.com
prospective.shared.global.fastly.net
connect.kaltura.com
impactstatus.validic.com
u2.shared.global.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
leapfrog-ssl-42.gcs-web.com
ez.fukuoka.status.ricoh.com
u2.shared.global.fastly.net
canada.status.coconutsoftware.com
static-vfp1.ott.kaltura.com
newrelic.kstars.org
drm-vfp1.ott.kaltura.com
prospective.shared.global.fastly.net
u2.shared.global.fastly.net
compass.status.atlassian.com
canada.status.coconutsoftware.com
estado.medios.com.ar
estado.medios.com.ar
statuspage.io
cms-corp.kaltura.com
tvpapi-vfp1.ott.kaltura.com
tvpapi-vfp1.ott.kaltura.com

Certificate

The complete raw certificate details for *.ott.kaltura.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqhYMkNL21FmVORy6qOu
bD01l6c1FW3r3vWGlNN66fWhib9o5wgfVpSisWvDepr6pp+UMbpL2X5f7tUHRUU9
gBvaMW7SlN69qRJnlZcxTtXh8BAPTjH8RQI8Ufkjgq8v4l54INzhKxphhRnIEXRJ
KaVKrQhKJ/uExLEQRLAUfT6qID37TIk+XN6MzmH3PSL/lrz1OvbObDZNL2HSaZKb
XZAvA9CPbkoNKhPqMu+pUSplvmFDqX7rGLxRjYsOHrwnfNAeYhUnmJb+VRvalwRO
Lekv/g19PJ9nNxHSpr42N29NiAUX1hf5PrVQq7jGCiw6FMZKIp9wGJ6bPCkNZ/zV
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4838211401478334987529559143241978062
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ott.kaltura.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22553432059232563520313641132296153945099347431426431167064353683060381984479231855425903737159991091090091006247818518104156891677611901436447434226515832719562920723020282265097946467563646295315449595340291506929552476060504031078712933442716652176608355355594930793576195899239184894562789094740347066497104064054027835055593193529358136132303416517484636535057744015405642845439040608756812372890697197146301918836592527528092983078399703614693674323258666918924948155487163216603986769391057660441741475549027104293605665007104994824931974745217339229348394387778694978278535083303296594861789809411124862178581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0df51e0aeda9932f5b0ba945c214f341dac4d43a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (255 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ott.kaltura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drm-as.ott.kaltura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dms-as.ott.kaltura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvpapi-as.ott.kaltura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api-as.ott.kaltura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tvm-as.ott.kaltura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.images-sg.ott.kaltura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.player-as.ott.kaltura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rest-as.ott.kaltura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kaltura.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0032bcd281b5117c244157f442354812805709a241605fb99c3f90b8b2c0525940b768f629840be665198b94a253770c7f8618842c96f5f491311313b038f49fad22823838d11ac977e0ffdc9d2151e042bdce587e4f8fd73ecc455cfa83e9a4657d3f3d123e835d60d354af909d6f9ffbc779b0c094d477e2b90a267797de48659006e794dccdf1e09ebc3b91dc82a60c8856a65dc3a162adcf337af3536d97a9a1d574c19046d387de091730aa5b1d94153d23f2121949deb7d86add9b7fda5b306cfd00992d72daf310b431aaccbfc301325c1e26b02001145b43c44654cda3845e8a92308fe1853d6fac7987be5298683420e12b998525dde8ce159f52b9f9