aok.wp-test.s-cloud.fi

Issued by Amazon

About this certificate

This digital certificate with serial number 04:0b:36:20:16:28:9c:c3:18:4b:4f:93:a0:6e:2f:9e was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aok.wp-test.s-cloud.fi

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:0b:36:20:16:28:9c:c3:18:4b:4f:93:a0:6e:2f:9e
Serial Number (int): 5375125040861111779081938938301919134
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: c2:19:5d:d5:16:83:50:ec:74:3e:57:d5:a6:28:34:af:03:0a:eb:c8
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): aa:2f:fd:d2:c4:03:ff:ee:fe:15:00:2f:df:30:8d:e4:28:a9:c4:e1
Fingerprint (sha256): 07:bf:ba:1e:dd:eb:bf:27:f7:08:2c:56:92:f4:80:88:4c:d4:92:73:4c:62:5c:2e:8a:26:f8:ef:cc:5e:99:83

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate aok.wp-test.s-cloud.fi

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aok.wp-test.s-cloud.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aok.wp-test.s-cloud.fi
*.aok.wp-test.s-cloud.fi

Other certificates including the domain name s-cloud.fi

(limited to 100 certificates)
products-search.contenthub.s-cloud.fi
*.coco-dev.s-cloud.fi
splunk.logmanagement.s-cloud.fi
*.devopstools.s-cloud.fi
*.tunnistus-qa.s-cloud.fi
api.abcmobile-dev.s-cloud.fi
auth.tunnistus-test.s-cloud.fi
*.tunnistus-qa.s-cloud.fi
reo-salesforce-adapter.coco.s-cloud.fi
splunk.logmanagement.s-cloud.fi
staffapi-dev.raflaamo-test.s-cloud.fi
api.cmg-dev.s-cloud.fi
ext.eu-west-1.sokoshotelsmobile-test.s-cloud.fi
t-ext.dam-test.s-cloud.fi
splunk.logmanagement.s-cloud.fi
management.pobmanagement-dev.s-cloud.fi
data.s-cloud.fi
sinkhole-int-test.logcollector-test.s-cloud.fi
dam.s-cloud.fi
wp-multisite.sites-test.s-cloud.fi
beta.omo-test.s-cloud.fi
dia.coco-test.s-cloud.fi
ext.dam.s-cloud.fi
api.pressu.s-cloud.fi
api.skartta-qa.s-cloud.fi
lb-ext.dam.s-cloud.fi
browser-consent-front.coco.s-cloud.fi
splunk.logmanagement.s-cloud.fi
entry-dev.s-cloud.fi
dam-input.contenthub-test.s-cloud.fi
adyen-webhook-listener-dev.ssc-dev.s-cloud.fi
api-dev.sokoshotelswebsite-test.s-cloud.fi
dam-input.contenthub-dev.s-cloud.fi
ao-api.ahis-edu.s-cloud.fi
*.gluucb.tunnistus-qa.s-cloud.fi
abc-auto.sites-test.s-cloud.fi
api.emobility-qa.s-cloud.fi
aok.wp-test.s-cloud.fi
radiator-dev.sokoshotelsmobile-test.s-cloud.fi
ext.dam.s-cloud.fi
wp.sites-test.s-cloud.fi
splunk-test.logmanagement-test.s-cloud.fi
henksu-test.s-cloud.fi
sinkhole.logmanagement.s-cloud.fi
reo.coco-dev.s-cloud.fi
*.sites-test.s-cloud.fi
ahis-api.ahis-dev.s-cloud.fi
sp.s-cloud.fi
*.wp.s-cloud.fi
splunk-demo-demo.logmanagement-test.s-cloud.fi
sinkhole-int-test.logcollector-test.s-cloud.fi
sinkhole-int-test.logcollector-test.s-cloud.fi
frontend.atlassian.s-cloud.fi
int.eu-west-1.sokoshotelsmobile.s-cloud.fi
ext-qa.eu-west-1.sokoshotelsmobile-test.s-cloud.fi
tasku-osk-ui.coco.s-cloud.fi
ext.dam.s-cloud.fi
*.service.int.abcmobile.s-cloud.fi
splunk-test.logmanagement-test.s-cloud.fi
dam-input.contenthub-test.s-cloud.fi
boomi.s-cloud.fi
mastergui-test.logmanagement-test.s-cloud.fi
product-brands.contenthub-test.s-cloud.fi
event-stream.custi-dev.s-cloud.fi
lupa.coco.s-cloud.fi
*.purchase-event-stream-dev.s-cloud.fi
*.tunnistus-qa.s-cloud.fi
testrail-test.s-cloud.fi
*.test.sokos.fi
spectrum.coco-test.s-cloud.fi
sinkhole-int.logcollector.s-cloud.fi
lb-ext.dam.s-cloud.fi
vikke-osk-ui.coco.s-cloud.fi
ext-preprod.eu-west-1.sokoshotelsmobile.s-cloud.fi
raflaamo-test.s-cloud.fi
argocd-qa.s-cloud.fi
reo.coco.s-cloud.fi
api.price-comparison-test.s-cloud.fi
tos-poc.coco-test.s-cloud.fi
api.skartta.s-cloud.fi
splunk.logmanagement.s-cloud.fi
s-bonus.sites.s-cloud.fi
rekku.coco-test.s-cloud.fi
*.gitlab-pages-dev.s-cloud.fi
s-bonus.sites.s-cloud.fi
reo.coco.s-cloud.fi
*.gitlab-pages-test-spankki.s-cloud.fi
radiator-dev.sokoshotelsmobile-test.s-cloud.fi
splunk.logmanagement.s-cloud.fi
tasku-bff.coco.s-cloud.fi
shiny.paja-test.s-cloud.fi
sok-contacts-nm-bff.coco-test.s-cloud.fi
dropshipping-api.ecommerce-om-dev.s-cloud.fi
mrm-id.s-cloud.fi
admin-ui.contenthub.s-cloud.fi
t-lb-ext.dam-test.s-cloud.fi
api-ext.dam.s-cloud.fi
api-int.s-cloud.fi
splunk-test.logmanagement-test.s-cloud.fi
reo-salesforce-adapter.coco-dev.s-cloud.fi

Certificate

The complete raw certificate details for aok.wp-test.s-cloud.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTmdJXmxVcwPn6fQsNUX
O2WNtOdPjRrDKAcG5an8phGs4L6qyBXigqCOjzC46nnX+Wjc2GUg4RkwDJzjrL9W
JPsC2RLM1pph/VjbWP56j7OqdO1PNEZLul4NRiHR5oBCJLJCQ/45w2H9JOXi+9BQ
FIDeM5Qq2fbJdjf3Kpv1tUVURCUF7gDgLdAN6xV/Zj2/BQ7HBSzSVMFcJf/HATJP
uVlXXXFYE6xoWzxpTrrMPvI8Y3GCdkXdoXhjo/yH/ovdlPCQ5SW7mvkPtCHmNxg1
7FnGH4o9j3AW59TtvvBCP5/2G74djkBYoZxh4c+OXXwPDSs99IZqfA8HDbOJEa9z
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5375125040861111779081938938301919134
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aok.wp-test.s-cloud.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25907262967867063885131317712084493474062903256443867120254841961188268243467931554724664128859095714739202386356615727936681964058070904449848859110886118499836897611754150462853183721878006363982108607858077014437055518166231129883471942925569992328238997651200928408599634576056857809513806258366428442629725831599633514478831902850591274957371187942582589146569782473211204465187490262322781150565398598559001660326299193276291277155227646730023276720906027440575488259110550149140901096969165580769271874826155040026556718800820605277140084969586688291356203930443180882895586505626525196201339027451253686760263
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c2195dd5168350ec743e57d5a62834af030aebc8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aok.wp-test.s-cloud.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aok.wp-test.s-cloud.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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