llnoperator.web.stag.pib.dowjones.io

Issued by Amazon

About this certificate

This digital certificate with serial number 03:6e:e2:6e:50:eb:a9:68:c1:bb:a7:99:5e:de:0e:85 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=llnoperator.web.stag.pib.dowjones.io

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6e:e2:6e:50:eb:a9:68:c1:bb:a7:99:5e:de:0e:85
Serial Number (int): 4563429206505578870116690882681769605
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 87:b0:60:84:e6:04:53:2c:01:a9:10:49:e3:71:4b:2e:8b:1d:1e:52
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): bd:43:2b:9e:f3:ca:ad:43:90:d3:9f:a1:e0:6e:a5:82:84:6d:ab:1a
Fingerprint (sha256): 05:a7:77:25:38:ac:ca:93:2a:84:46:db:c1:3e:10:aa:33:1a:14:4b:4c:3c:b9:1b:56:ec:10:8a:ff:b7:af:ca

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate llnoperator.web.stag.pib.dowjones.io

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for llnoperator.web.stag.pib.dowjones.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

llnoperator.web.stag.pib.dowjones.io
llnoperator.vir.web.stag.pib.dowjones.io
llnoperator.vir.green.web.stag.pib.dowjones.io
llnoperator.vir.blue.web.stag.pib.dowjones.io

Other certificates including the domain name dowjones.io

(limited to 100 certificates)
fanout.dev.mktdata.dowjones.io
mlnewsplus.wsj.com
ldap-auth.identity.prod.pib.dowjones.io
lat2.essex-extract.contentmgmt.prod.pib.dowjones.io
logintemplates.identity.prod.pib.dowjones.io
session-tracker.ore.identity.stag.pib.dowjones.io
api.dev.rnc-feeds.dowjones.io
public-admin-api-nonprod-virginia.dev.rnc-feeds.dowjones.io
suggest.int.factiva.com
artifactory.dowjones.io
users.usr.stag.pib.dowjones.io
mesh.ore.contentmgmt.prod.pib.dowjones.io
consul.mktdata.dowjones.io
mesh.vir.usr.int.pib.dowjones.io
consul.mktdata.dowjones.io
*.dev.shdsvc.dowjones.io
dev.bartender.mobile-dev.dowjones.io
gavel.mktdata.dowjones.io
map2mw.dev.mktw.dowjones.io
*.stag.deliverysvcs.customerappsstag.dowjones.io
riskcenter.stg.dowjones.com
consul.dev.mktdata.dowjones.io
sample-cert.dev.mktdata.dowjones.io
newsplus.int.wsj.com
footprintmatcher.contentmgmt.stag.pib.dowjones.io
riskreports.stg.dowjones.com
api.int.brm.financedev.dowjones.io
dmi-api.datamgmt.int.pib.dowjones.io
millstone.stg.mktw.dowjones.io
dylan.stg.mktdata.dowjones.io
developer.factiva.com
scs.customerapps.nonprod.dowjones.io
legacyapi.web.int.pib.dowjones.io
grafana.build.pib.dowjones.io
authoring.int.pubedit.dowjones.io
vanityrouter.customerappsprod.dowjones.io
randc-audit.dsv.prod.pib.dowjones.io
crunchbase.mktwatch.dowjones.io
nssfeedfiler.dsv.stag.pib.dowjones.io
*.infnonprod.dowjones.io
nsscalserver.dsv.int.pib.dowjones.io
alertbus.dowjones.com
llnsubscriptions.dowjones.com
api.mktw.dowjones.io
llnoperator.web.stag.pib.dowjones.io
*.int.cust-ctr.customerappsnonprod.dowjones.io
video-api.stg.shdsvc.dowjones.io
portfolio-news.cntsvc.int.pib.dowjones.io
authoring.int.pubedit.dowjones.io
keyphrase.contentmgmt.int.pib.dowjones.io
authoring.dev.pubedit.dowjones.io
neodmi.datamgmt.int.pib.dowjones.io
djmatcher.contentmgmt.stag.pib.dowjones.io
api.dev.mktdata.dowjones.io
dev.pubedit.dowjones.io
*.allesseh-api.dev.content.dowjones.io
api.kb.customerappsstag.dowjones.io
content.mobile.dowjones.io
membership.usr.stag.pib.dowjones.io
dsp-metadata.contentmgmt.int.pib.dowjones.io
widgets.dowjones.com
*.shdsvc.dowjones.io
yardstick.dev.mktdata.dowjones.io
riskreports-global-api.virginia.int.dowjones.com
chatbot-proxy-01.customerappsnonprod.dowjones.io
consul.stg.mktdata.dowjones.io
newsplus.web.prod.pib.dowjones.io
theo.mktwatch.dowjones.io
video-api.shdsvc.dowjones.io
chatbot-01.customerappsprod.dowjones.io
consul.stg.mktdata.dowjones.io
portfolio-news.cntsvc.int.pib.dowjones.io
barrons.prod.pubedit.dowjones.io
vnext-api.datamgmt.int.pib.dowjones.io
platformenrichment.contentmgmt.stag.pib.dowjones.io
newsrelevancy-ingest.cntsvc.int.pib.dowjones.io
marketwatch.int.pubedit.dowjones.io
authoring.dev.pubedit.dowjones.io
mesh.vir.build.pib.dowjones.io
*.stg.dowjones.com
*.prod.chatbot.customerappsnonprod.dowjones.io
trkalerts.cntsvc.int.pib.dowjones.io
newsplus.web.prod.pib.dowjones.io
randc-audit.dsv.stag.pib.dowjones.io
valuator.mktwatch.dowjones.io
collector.dev.archimedes.dowjones.io
newsrelevancy-ingest.cntsvc.int.pib.dowjones.io
prod.pubedit.dowjones.io
*.prod.caj.customerappsprod.dowjones.io
monty.adtech.dowjones.io
oskar.dev.shdsvc.dowjones.io
llnsubscriptions.stg.dowjones.com
entitymatcher.contentmgmt.stag.pib.dowjones.io
piboauth.identity.int.pib.dowjones.io
chatbot-proxy-00.customerappsnonprod.dowjones.io
barrons.int.pubedit.dowjones.io
developer.beta.factiva.com
prod.pubedit.dowjones.io
api.stg.rnc-feeds.dowjones.io
kaavio.dev.mktdata.dowjones.io

Certificate

The complete raw certificate details for llnoperator.web.stag.pib.dowjones.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3dYg4DbQGtZakOOvMDvc
cHMVNv1jwGUWKYZDes6HPKBKchE1Hn2xz4OoGeIpNbAeZ9vhELMxIhcyyQoQlwKi
thGECkMWfXtXsQgcI6N4TasEfTZN+7xSMYohM9A6Dg+flOnOweSMxzSPK+BVlxRJ
MysdcY/UQHOoI87hNGMB/yVylfP9ttozpSijgnixNIMcakms/k/c8oLVJ7CmTXgq
9ItLnarttI3KPNqSpQTG+OB83s61cfYD7kC6OY3v7AzN/9ZGYnbr52PMBoquB7nz
STfeS78V1gcJsE7HrftprrqQNYODa6N7Y3Ht/F1xhSmVS/6CoU+XY36h0coyPA+g
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4563429206505578870116690882681769605
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'llnoperator.web.stag.pib.dowjones.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28004256057428144586079207140041583498362529290703583331416473440298938163702732692943648361953987111525619190552004686334810062850607112677654838366961488488493877450152885858486632379154210378806605699628647254974337235764885947306922101634123683387571693688333133061556224592510307387738151435603120511059418620204183336891064749430197685122830293966266210416220867637721316348463058648354823517093105264960651949328338186748877798921883492532487440544960559294913079685889419615133505365348574051993729703773749448751899168525033240478307197538151101149341887745478231504079069279451305942071445290476317342408953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							87b06084e604532c01a91049e3714b2e8b1d1e52
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (178 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llnoperator.web.stag.pib.dowjones.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llnoperator.vir.web.stag.pib.dowjones.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llnoperator.vir.green.web.stag.pib.dowjones.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'llnoperator.vir.blue.web.stag.pib.dowjones.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016a7a812f9d000004030047304502203e819f71e0ccbe1c3e15667d0371f0f0e3e66e70f11c1a81898b57ad2cfb3dc2022100963e8bdd3a7f7d437aa309aaa4d834742132e4f1844be398918a1d523ad1f8ad0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016a7a8130ba000004030047304502200fe6b7f157501ba88a2732256bec23d6ca88591545b6df6b6934ec5159c4d9fa022100d7fc8eac55d1b47df344d1aad5b15357499718bb0d9a72eca935612697a4e223
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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