data.us-west-2.di.xarth.tv

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:ab:b0:c8:3f:e6:fe:d4:1c:49:47:c1:99:2a:f0:70 was issued on by Amazon.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=data.us-west-2.di.xarth.tv

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:ab:b0:c8:3f:e6:fe:d4:1c:49:47:c1:99:2a:f0:70
Serial Number (int): 16842204281728003497277268780015874160
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b9:02:70:22:c3:85:e6:b9:d1:d5:f4:67:83:d0:95:e4:76:b9:36:14
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 16:60:b1:d7:eb:03:62:71:39:fb:a3:f1:01:f2:1c:7d:81:c4:ce:6f
Fingerprint (sha256): 06:3f:72:a6:26:3a:84:f9:be:e5:5b:50:90:96:33:e7:56:8d:8c:f7:48:f3:03:d5:54:c4:49:d1:7e:40:4a:e1

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate data.us-west-2.di.xarth.tv

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for data.us-west-2.di.xarth.tv

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

data.us-west-2.di.xarth.tv
forecasts.internal.justin.tv
forecasts.us-west-2.di.xarth.tv
*.sci.twitch.tv
data.internal.justin.tv

Other certificates including the domain name xarth.tv

(limited to 100 certificates)
*.xarth.tv
sourcegraph-prod.osiris.xarth.tv
teleport-dashboard-production.osiris.xarth.tv
lighthouse.video.xarth.tv
bouncer.xarth.tv
us-west-2.prod.helix.xarth.tv
minixperiment.us-west-2.di.xarth.tv
us-west-2.perf-prod.twitchbrowsergridrouter.twitch.a2z.com
git.xarth.tv
scanner.video.xarth.tv
chef-dev.it.xarth.tv
popmap.video.xarth.tv
ovaledge-qa.xarth.tv
blueprint.staging.di.xarth.tv
ecs.aegis-nexus.xarth.tv
na85-1.cdn.salesforce-communities.com
acheron.video.xarth.tv
metapod-beta.xarth.tv
internal-lb.codeanalysis.security.xarth.tv
na85-1.cdn.salesforce-communities.com
autoprof.video.xarth.tv
*.curse.xarth.tv
c2c.xarth.tv
minixperiment.us-west-2.di.xarth.tv
na85-1.cdn.salesforce-communities.com
admin-panel.osiris.xarth.tv
na49-1.cdn.salesforce-communities.com
data.us-west-2.di.xarth.tv
dartui-production.osiris.xarth.tv
secsplunk-dev.osiris.xarth.tv
us-west-2.bastion-staging.xarth.tv
ovaledge-qa.xarth.tv
blueprint.us-west-2.di.xarth.tv
metapod.xarth.tv
na85-1.cdn.salesforce-communities.com
osiris-martechcoreui.osiris.xarth.tv
design-staging.xarth.tv
eu-west-1.bastion.xarth.tv
osiris-martechcoreui.osiris.xarth.tv
sentry.chaos.xarth.tv
beta.vulcan.xarth.tv
secsplunk-production.osiris.xarth.tv
na85-1.cdn.salesforce-communities.com
kirby.video.xarth.tv
twitchpeople.xarth.tv
na85-1.cdn.salesforce-communities.com
jira.xarth.tv
wiki.xarth.tv
catalog-beta.xarth.tv
minixperiment.osiris.xarth.tv
ldap-dashboard.xarth.tv
toolkit.xarth.tv
ovaledge-qa2.xarth.tv
bridge.video.xarth.tv
*.dev.xarth.tv
proxy.dev.xarth.tv
na85-1.cdn.salesforce-communities.com
jdev.xarth.tv
login.titan.xarth.tv
stage.nagios.xarth.tv
savant-staging.osiris.xarth.tv
tableau-dev.osiris.xarth.tv
grafana.xarth.tv
us-west-2.bastion.xarth.tv
dev.sap.xarth.tv
blueprint.osiris.xarth.tv
secsplunk-dev.osiris.xarth.tv
bouncer-staging.osiris.xarth.tv
sbx.sap.xarth.tv
lodestar.xarth.tv
admin-panel-staging.osiris.xarth.tv
login.dev.xarth.tv
scoop.us-west-2.di.xarth.tv
ovaledge-qa2.xarth.tv
*.xarth.tv
*.xarth.tv
minixperiment.us-west-2.di.xarth.tv
starfruit-support.video.xarth.tv
tableau-prod.osiris.xarth.tv
tsm.tableau-dev-temp.xarth.tv
arcwarden-east.video.xarth.tv
passwordreset.xarth.tv
demo.osiris.dev.xarth.tv
secsplunk-dev.osiris.xarth.tv
na49-1.cdn.salesforce-communities.com
*.beta.build.xarth.tv
tableau-dev.osiris.xarth.tv
iogate.video.xarth.tv
demo-internal.dev.xarth.tv
port-authority.video.xarth.tv
teleport-dashboard-staging.osiris.xarth.tv
minixperiment.osiris.xarth.tv
vulcan.xarth.tv
popmap.video.xarth.tv
jira.xarth.tv
secsplunk-cm-dev.osiris.xarth.tv
tempest-development.video.xarth.tv
tableau-rmt.xarth.tv
tsm.tableau-staging-temp.xarth.tv
api-dev-2.browsergrid.xarth.tv

Certificate

The complete raw certificate details for data.us-west-2.di.xarth.tv in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQ/+HgkI5cLCp5AB5SIr
MvlVALznB/nVA2rEu8gOFI3QvpE0VHl7Xisd5/7D9khZD6A8++MtJjIy07LY97ir
G3PrcSQzQVKiA/F2Z9Gv3Sokd564qEIckqPPDpdpGP6w6uMpa4a/+QebYlXtmat0
LbxD8GNxaUlTfdGrNwePQGWGsvq/WIoUOg0uEnr3k8RWHrmDudP0lVNewrTcG0sO
DhJ61+LcwG41NtliSDxKZsbRYqt43/pOrUTkPibAgRpMZgaBl6TSMOthVLL/Ptly
7vgnDjAJgWe9RONfu1GUzWKpGl1USIx6c0bA1w9U+9MlXLyeiE9Qcp1iwgH1li8r
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16842204281728003497277268780015874160
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'data.us-west-2.di.xarth.tv'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24371879126019589190735843364860483029655321651303618296802607276777391207849342892142163085886747874155430188962115168523897487025527236397719151903749093280080144152027632872476574192517712923605586474579800519177184890986923910464422301950546361001288596525039430309777465821995299851124583105090341338673060577008354722710906542526624332649384226488330271645025761451313674571230006947573369192651179788924319144718513185167657504981361192001085464061917017997653056411986620000521796387794534445601325129147421619550443882801614372970406162839020965226412211325542862908313697953852054527818144804758638130310123
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b9027022c385e6b9d1d5f46783d095e476b93614
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (136 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.us-west-2.di.xarth.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forecasts.internal.justin.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forecasts.us-west-2.di.xarth.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sci.twitch.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'data.internal.justin.tv'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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