assets.disneyanimation.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:c4:37:63:00:f6:a3:8b:8c:2f:c0:54:c2:4b:69:f6 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=assets.disneyanimation.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:c4:37:63:00:f6:a3:8b:8c:2f:c0:54:c2:4b:69:f6
Serial Number (int): 19628005501676106261448851718383823350
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 28:0b:cc:e7:d0:aa:de:e6:44:07:fe:69:09:58:b4:2c:21:78:76:b3
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 84:aa:03:bf:53:56:be:f4:7b:dc:22:3e:2e:18:bb:95:18:11:d4:fd
Fingerprint (sha256): 05:49:55:98:eb:92:7b:9e:1c:a8:e0:7d:73:cf:26:07:05:f5:13:4b:d1:20:1c:48:25:8b:28:8a:f3:10:01:d7

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate assets.disneyanimation.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for assets.disneyanimation.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assets.disneyanimation.com
assetsdev.disneyanimation.com

Other certificates including the domain name disneyanimation.com

(limited to 100 certificates)
shotguntools.fas.fa.disney.com
interviewfeedback.disneyanimation.com
beansandlogs.disneyanimation.com
felix.disneyanimation.com
f5.disneyanimation.com
threepio.disneyanimation.com
teradici-mc.disneyanimation.com
www.disneyanimation.com
caricatures.fas.fa.disney.com
wdas-gp.disneyanimation.com
daweb.disneyanimation.com
filemaker.disneyanimation.com
assets.disneyanimation.com
dmzloghost.fas.fa.disney.com
testevents.disneyanimation.com
emailinfo.disneyanimation.com
technology.disneyanimation.com
datasets.disneyanimation.com
wdas-elastic.fas.fa.disney.com
disneyanimation.com
technology.disneyanimation.com
vrlcm.disneyanimation.com
holodeck.disneyanimation.com
wordpress-test.disneyanimation.com
superset.disneyanimation.com
ohana.disneyanimation.com
datasets.disneyanimation.com
mailgate.disneyanimation.com
noteworthy.fas.fa.disney.com
parsec-monitor.disneyanimation.com
staging.disneyanimation.com
element-service.disneyanimation.com
daweb.disneyanimation.com
lighthouse.disneyanimation.com
coda-stage.disneyanimation.com
*.disneyanimation.com
mailgate.disneyanimation.com
gogo.disneyanimation.com
dwing.disneyanimation.com
awconsole.disneyanimation.com
techweb.disneyanimation.com
ohana.disneyanimation.com
daweb.disneyanimation.com
prodman.disneyanimation.com
daweb.disneyanimation.com
gitlab.fas.fa.disney.com
portal.disneyanimation.com
pure01.fas.fa.disney.com
icoda.disneyanimation.com
wdas-elastic.fas.fa.disney.com
assets.disneyanimation.com
techweb.disneyanimation.com
wsoneaccess.disneyanimation.com
prin.fas.fa.disney.com
disneyanimation.com
holodeck.disneyanimation.com
starfish.disneyanimation.com
prin.fas.fa.disney.com
mobilereviewserver.disneyanimation.com
code.disneyanimation.com
mediacopyserver.disneyanimation.com
daweb.disneyanimation.com
datasets.disneyanimation.com
caricatures.fas.fa.disney.com
www.disneyanimation.com
dwing.disneyanimation.com
sidecar.fas.fa.disney.com
arl-sidecar.disneyanimation.com
staging.disneyanimation.com
filemaker.disneyanimation.com
teradicicac.disneyanimation.com
wdasldap.disneyanimation.com
wayfinder.fas.fa.disney.com
*.wdas.dev
shotguntools.disneyanimation.com
daweb.disneyanimation.com
awconsole.disneyanimation.com
infoblox.fas.fa.disney.com
portal.disneyanimation.com
postweb.disneyanimation.com
*.artifactory.disneyanimation.com
playbook.disneyanimation.com
*.wdas.dev
portal.disneyanimation.com
noteworthy.fas.fa.disney.com
storyserver.disneyanimation.com
daweb.disneyanimation.com
starfish.disneyanimation.com
vrlcm.disneyanimation.com
darts.disneyanimation.com
dpix-storage.disneyanimation.com
roll.fas.fa.disney.com
f5.disneyanimation.com
daweb.disneyanimation.com
mailgate.disneyanimation.com
mirror.fas.fa.disney.com
ohana.disneyanimation.com
teradicivan.disneyanimation.com
lighthouse.disneyanimation.com
cdn.disneyanimation.com

Certificate

The complete raw certificate details for assets.disneyanimation.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbzoX6FDD7Gx0NHwkHTP
1dOUW4CJKYlZUNnJHL0msl3Q9p1ux6a3g+a4ky1PO6KOOArFlD0UvdrEb8u3bZl2
3vRoLM6L3bqlqEmTx/g75G+dpQOraJzllPg7n4tRhG86LBQHg/xaIT4xfAn43Jpd
y9SUR5l49SunE7Rs8V5T0Lbgyulgz0wGjOanJPKdTpl08f5bp87hjOIohNuLzRRV
loU/3crLm+Kz7SCJjrDX1qpMFFkX1jxWE/MOGoyRzkvnF/SrSSex3SsXKH7olNqf
l5BtXl3A7GeOx9RRxQpPwLdDjBUvSLWY7tNkFZF2mv7NS6yVJFZo8mrQ6fcrsHcT
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19628005501676106261448851718383823350
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'assets.disneyanimation.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23952193501882113364841090694113123328621777271268734320609135210140558706427031457301027214244175214106311924305440872994470305302335626294265703484777829292159020928509366500512094758293108402368279071683670836338130290287937980780261708056052931244093238657922238906072618942374304188284941571692680243209021983335242566626885541647958917343859440591900246946077659099294225046135209771282068316075598146533673615261937033493441965704985183736978519420238489239144295146169338031212677116160830183366960342435838451780897846929964349041191300658854823187279605294146791022084776163881890059029103768560767583327067
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							280bcce7d0aadee64407fe690958b42c217876b3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.disneyanimation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assetsdev.disneyanimation.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a94d2a8e176016d6408d4bad93e566f6495b37d4f79a7bd48120fe959c2a0847c6cfe05ca7efa3eecfe000245b9621116722b0ef716d550b24c03e5110485fbbfec0e6669f567ef14b0266f2c3578ffb784a5c83044074263c5b9675dc8ea7a6542255f5aaee58b61bb6f5428f071b4df4b98a3044049d8aa915ce144a26d097aed74932b15eb630d571db0dcb194bd7466cb0d9187cf9e0b08478d61075cee23dcb9b47dcce4cc0ec08165b521b748988833cfdce702bd9aa4bcf8d2e212de9ee8333588dbc4ab5284c2c43ef87e16bf17585c2e640980346a4b095f6f410f2f451825a0b4a661c852fa472bf0315dd70f23ea4408232dc0f05acd216e7bacc