jenkins-pi3.mgmt.wmdtc.tech

Issued by Amazon

About this certificate

This digital certificate with serial number 02:dd:ed:b7:ff:7f:07:f2:90:80:1c:0d:f7:1c:8d:e8 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jenkins-pi3.mgmt.wmdtc.tech

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:dd:ed:b7:ff:7f:07:f2:90:80:1c:0d:f7:1c:8d:e8
Serial Number (int): 3810775106208082822600958466437451240
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: e9:d7:49:25:7c:68:2d:56:bc:b1:35:fd:dc:3f:58:14:b7:6f:44:ad
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 4c:33:23:94:0c:0a:60:94:49:d7:43:a3:60:f8:d6:71:c5:3e:26:fd
Fingerprint (sha256): 06:32:50:5f:65:3b:f7:05:ef:f7:e6:d2:34:7e:f2:4f:6f:08:de:f5:75:7e:42:a3:fe:c3:69:5a:58:63:de:17

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate jenkins-pi3.mgmt.wmdtc.tech

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jenkins-pi3.mgmt.wmdtc.tech

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jenkins-pi3.mgmt.wmdtc.tech
jenkins-pi3.hurley.hbo.com

Other certificates including the domain name wmdtc.tech

(limited to 100 certificates)
test-cert.sandbox.wmdtc.tech
janus-latam-production.production-latam.wmdtc.tech
test-record.sandbox.wmdtc.tech
payment-provider-production-emea.production-eu.wmdtc.tech
jenkins-pi3.mgmt.wmdtc.tech
test-record.sandbox.wmdtc.tech
eks-service-alb-tftest-1.sandbox.wmdtc.tech
test-cert.sandbox.wmdtc.tech
blackforest-1-us-east-1.snp.wmdtc.tech
cme-slack-bot.production.wmdtc.tech
*.snp.wmdtc.tech
telegraph-1-us-west-2.snp.wmdtc.tech
blackforest-1-us-east-1.snp.wmdtc.tech
devices-1-us-east-1.snp.wmdtc.tech
test-record.sandbox.wmdtc.tech
payment-provider-production-main.production.wmdtc.tech
test-record.sandbox.wmdtc.tech
test-record.sandbox.wmdtc.tech
test-record.sandbox.wmdtc.tech
test-record.sandbox.wmdtc.tech
lb-test-cert.sandbox.wmdtc.tech
*.mgmt.wmdtc.tech
*.production-eu.wmdtc.tech
test-record.sandbox.wmdtc.tech
payment-provider-production-latam.production-latam.wmdtc.tech
cme-slack-bot.snp.wmdtc.tech
*.sandbox.wmdtc.tech
test-record.sandbox.wmdtc.tech
*.nonprod.wmdtc.tech
lb-test-cert.sandbox.wmdtc.tech
eks-service-alb-tftest-2.sandbox.wmdtc.tech
test-cert.sandbox.wmdtc.tech
*.sandbox.wmdtc.tech
test.sandbox.wmdtc.tech
*.hbogo-production.wmdtc.tech
comet-1-us-west-2.snp.wmdtc.tech
janus-emea-production.production-eu.wmdtc.tech
*.sandbox.wmdtc.tech
janus-us-production.hbogo-production.wmdtc.tech
*.mgmt.wmdtc.tech
*.locust.wmdtc.tech
test-cert.sandbox.wmdtc.tech
*.production.wmdtc.tech
login-1-us-west-2.snp.wmdtc.tech
*.mgmt.wmdtc.tech
test-record.sandbox.wmdtc.tech
test-record.sandbox.wmdtc.tech
test-cert.sandbox.wmdtc.tech
*.detokproduction.wmdtc.tech
test-cert.sandbox.wmdtc.tech
janus-us-snp.hbogo-snp.wmdtc.tech
eks-service-alb-tftest-1.sandbox.wmdtc.tech
test-record.sandbox.wmdtc.tech
test-record.sandbox.wmdtc.tech
*.snp.wmdtc.tech
test-record.sandbox.wmdtc.tech
eks-service-alb-test.sandbox.wmdtc.tech
eks-service-alb-tftest-2.sandbox.wmdtc.tech
login-1-us-east-1.snp.wmdtc.tech
test-cert.sandbox.wmdtc.tech
test-record.sandbox.wmdtc.tech
test-record.sandbox.wmdtc.tech
test-cert.sandbox.wmdtc.tech
*.wmdtc.tech
blackforest-1-us-east-1.snp.wmdtc.tech
devices-1-us-east-1.snp.wmdtc.tech
test-cert.sandbox.wmdtc.tech
test-cert.sandbox.wmdtc.tech
eks-service-alb-tftest-1.sandbox.wmdtc.tech
*.mgmt.wmdtc.tech
*.mgmt.wmdtc.tech
*.nonprod.wmdtc.tech
test-record.sandbox.wmdtc.tech
eks-service-alb-tftest-3.sandbox.wmdtc.tech
blackforest-1-us-east-1.snp.wmdtc.tech
eks-service-alb-tftest-2.sandbox.wmdtc.tech
test-cert.sandbox.wmdtc.tech
*.detokproduction.wmdtc.tech
test.sandbox.wmdtc.tech
*.snp.wmdtc.tech
test-record.sandbox.wmdtc.tech
*.mgmt.wmdtc.tech
test-record.sandbox.wmdtc.tech
oyster.sandbox.wmdtc.tech
devices-1-us-west-2.snp.wmdtc.tech
test-record.sandbox.wmdtc.tech
optimizely-webhook.production.wmdtc.tech
test-record.sandbox.wmdtc.tech
*.sandbox.wmdtc.tech
test-record.sandbox.wmdtc.tech
*.locust.wmdtc.tech
hurley-cicd-us-west-2-jenkins.mgmt.wmdtc.tech
ingestion-us.production.wmdtc.tech
*.hbogo-production.wmdtc.tech
optimizely-webhook.sandbox.wmdtc.tech
test-cert.sandbox.wmdtc.tech
test-record.sandbox.wmdtc.tech
*.hbogo-production.wmdtc.tech
*.nonprod.wmdtc.tech
*.production-eu.wmdtc.tech

Certificate

The complete raw certificate details for jenkins-pi3.mgmt.wmdtc.tech in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzY3TOyEyUp1ouey8ArzC
f0tz/GbAVq+60sZWnOOB6keBu2883QIsOzQmqVYxFXzExOZVc5Z4QWpfkYNcadQo
61EBgFmOEOVkP598RIXS//QtyC1MhxVrgL5DUEWR4cwhMHwhkJfVOWMlz4+P2xfI
rie5b5OER2UXj66Ah7eCvn12STTgLycdUYLdQpkuGBCX0z4/Ea0euCdoIe5kxDX7
uozAMU8MO90IExnCSvgLbFW8S5hn6HhubQblhK9U3yd/8r8EjWlNCsl4o3pXHHWr
igHRUP42HcbhrabHbgbkiIL6Y83t/c5fY5L6vuVi/wu6OJkxFcwSQieqwytnE1T+
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3810775106208082822600958466437451240
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jenkins-pi3.mgmt.wmdtc.tech'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25948789091777548063585443809562084921113671238248820928033696982768790528913214119155809260537673529316542245785252431504398481215779807117809208665726566861493203424594268822632163742454958685442288595948145332036739867506176299616478118544142841171858215692740917227768480506043000282272207677292525071346059284071980760755181668192967242096535755669191859051263600725647436603611092052562533826213472232524329065250957400468852743897489292589605673547043755226888020046017367845161964130940390948044377245353536850893325257329189063280446832682433013408324907202316421763820730453982478563818477014163019995086381
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e9d749257c682d56bcb135fddc3f5814b76f44ad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jenkins-pi3.mgmt.wmdtc.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jenkins-pi3.hurley.hbo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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