*.tlmam.inbcu.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0d:59:eb:c0:b1:a5:73:d5:25:53:ba:0d:8d:cb:bf:78 was issued on by Amazon.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.tlmam.inbcu.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:59:eb:c0:b1:a5:73:d5:25:53:ba:0d:8d:cb:bf:78
Serial Number (int): 17746859998656433390597358178729181048
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a6:cd:6d:73:e4:75:2d:42:c3:53:ae:2f:b7:9f:b2:c0:28:58:d6:ab
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 1b:c8:45:8b:da:14:99:fc:23:33:5f:60:f6:fe:d0:96:d8:d6:6a:8f
Fingerprint (sha256): 07:bd:e1:ff:7e:ae:6f:30:34:cb:9b:d5:3e:d2:8b:51:cb:83:1f:34:27:d0:93:e7:eb:b6:d3:18:e3:d6:31:9b

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.tlmam.inbcu.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.tlmam.inbcu.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.tlmam.inbcu.com
tl.aws.mediasys.io
translator.inbcu.com
tlmam.inbcu.com
*.tl.aws.mediasys.io

Other certificates including the domain name inbcu.com

(limited to 100 certificates)
mstr11DAVDProd.inbcu.com
cp.stg.inbcu.com
fss.stg.inbcu.com
retool.inbcu.com
cnbcvimbiz.inbcu.com
*.ise.inbcu.com
remediant.inbcu.com
ssoapp.stg.inbcu.com
e.shootscalendardev.inbcu.com
mbam.inbcu.com
gtmbetaush.inbcu.com
crucible.inbcu.com
mstrhubble.inbcu.com
*.sso.inbcu.com
gp-connect-int-amers2.inbcu.com
mail.inbcu.com
roomreservation.inbcu.com
lmw2-dev.inbcu.com
sso.inbcu.com
*.tlmam.inbcu.com
mstr11filmentwodmzdr.inbcu.com
sgjamf.inbcu.com
*.tlmam.inbcu.com
ssologin.external.stg.inbcu.com
ssocp.inbcu.com
enterpriseservices.wc.inbcu.com
tmsavxapi.inbcu.com
api.stage.rights.content.inbcu.com
eclapls00029la.tfayd.com
inbcu.com
*.devsysaoa.inbcu.com
jira.inbcu.com
csnneenpsmobile.inbcu.com
*.mts.inbcu.com
jirastg.inbcu.com
mstrfilmentwodmzdr.inbcu.com
dev2.my.inbcu.com
enterpriseservices-dr.inbcu.com
anywhere.nbcuni.com
anywhereny.inbcu.com
thrivelibrary.inbcu.com
mstrsharedaoaprod.inbcu.com
devcoe.inbcu.com
airwatch.inbcu.com
*.inbcu.com
stg-domeccweb.inbcu.com
rtproapistg.inbcu.com
mstrstg2.inbcu.com
electiontonight.inbcu.com
jira.inbcu.com
scorestaging.inbcu.com
mstrhubble.inbcu.com
gp-connect-int-amers2.inbcu.com
dev.safe.inbcu.com
inbcu.com
clrs.inbcu.com
wikidev.inbcu.com
anywherela.inbcu.com
qa.biportal.inbcu.com
github.inbcu.com
nbcumail.inbcu.com
sharedtableauint.inbcu.com
ssologin.stg.inbcu.com
fss.inbcu.com
retool-uat.inbcu.com
oems.inbcu.com
preprod.servicing.inbcu.com
cp.inbcu.com
fss.inbcu.com
eclaplp00193la.tfayd.com
TableauSharedUsh2023Prod.inbcu.com
sso.inbcu.com
dev.lptbu.compass.inbcu.com
nexusrouter.inbcu.com
licensingapprovaldev.inbcu.com
myfrequency.inbcu.com
esb.inbcu.com
ssologin.prod.inbcu.com
neat.inbcu.com
primesurvey.inbcu.com
wirelessrepair.inbcu.com
ostnnvredit.inbcu.com
jira.inbcu.com
sso.stg.inbcu.com
enterpriseservices.wc.inbcu.com
hpam.inbcu.com
stg-jamf.inbcu.com
ushposstg.inbcu.com
intstorefront.inbcu.com
search.supportcentral.inbcu.com
wikistg.inbcu.com
devcoe.inbcu.com
apps.inbcu.com
login.inbcu.com
*.devash.inbcu.com
enterpriseservices.ec.inbcu.com
cnbcvimbiz.inbcu.com
neat.inbcu.com
ise.inbcu.com
ip.inbcu.com

Certificate

The complete raw certificate details for *.tlmam.inbcu.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qzCAZUDLu4O1Yru7TAT
NmSpCDpLhYG362NGyC6+SL8NH50U1/tFcSCXZMyXDJXQ+08xOmmX2xzwV5Q0ZBMy
MeOzZHY1qj5StLE4P5Pz0+bEOCR/88CF5uNuncyc4AkT8xVUkYVlptbTjGLjFMZN
H/h7W8oEW1oOQsAdP+yUuycxpCIl+8LYhQ0NYmmCEs942oOzUL1SIYLQRnslFY9n
APixAihXyEVsVP4bX4gNG/AVgnB9EIeLAUulEWiOdVi5eQyclhTd4eL/iPl8Gqn7
ehKKwnpQtwZBNb0WgFqFBtbkQe8Sh8SErnAZxALUgEE2N2gjJoQ/qSrdUSySlP4L
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17746859998656433390597358178729181048
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-04 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.tlmam.inbcu.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27605140546925449245832211867681398267304486475233027968463203879480471176194990503855007142514406037762831187564397859980624467811996755898570118245817918867564546630509285987917496634398687046903405404580265993811084084450881567584641373542873648014617679981109082061877169134950882378124539861235444908830394987378760163312787615179872803174060496195714723240362015090491856845282872033090168598848761243971181106943074154020819507133504285196838805396402692310042951692063865363714757052902320917149245195416506147586494489814515049157604058591773911638632801489795034884446045181980112125605105568871887344110501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a6cd6d73e4752d42c353ae2fb79fb2c02858d6ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tlmam.inbcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tl.aws.mediasys.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'translator.inbcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tlmam.inbcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tl.aws.mediasys.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002104cd73a29c3baa116ebb9fb2ccdb4fa390f8178bf8c06f1d8e3d18aa629a81850b23e9495d10f0929d9b75ebab2fdb35104a23242839875fb9d420c4ef61150dc1542dc8b86f00ef7527531bffbfee40442b8c26a6e9b7778a70c62727c4f856c56dc200626daa0e394afccd64c90b28398eeffd129bd21738ecb4a4fa70f79212bc4c7aac72791ed00ff3f6d5da5b86a5df8cfeae5dfe2310b91574609a72487f0b3c9ab3bf1ede955698f1443bfa9166cfc8597a57b5d93e8182aa39c23d6e508a78507ef00866c19a5a989ca6a2d832856d84aaa87927213adc7138889405dccc12b3b9b0a5394b497449ef46705c1ca1b78563843fe270d851710047dd