atlarge.cdn.icann.org

Issued by Amazon

About this certificate

This digital certificate with serial number 0b:65:fc:bb:99:b7:50:65:30:59:97:91:3d:7b:84:d6 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=atlarge.cdn.icann.org

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:65:fc:bb:99:b7:50:65:30:59:97:91:3d:7b:84:d6
Serial Number (int): 15151055966805422164380458599327696086
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 5a:bf:6c:19:2f:5f:8a:d3:01:e0:5b:64:4f:56:42:d0:14:9e:61:10
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): a0:65:b8:9f:a0:f2:73:8c:d8:6a:55:ca:7e:ed:48:29:0a:e5:5c:a5
Fingerprint (sha256): 07:c0:e2:72:16:c1:16:12:88:5d:07:95:ce:a7:33:08:ac:db:38:2f:01:5e:e5:be:07:18:72:6d:26:3e:79:5b

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate atlarge.cdn.icann.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for atlarge.cdn.icann.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

atlarge.cdn.icann.org

Other certificates including the domain name icann.org

(limited to 100 certificates)
st.icann.org
67.schedule.icann.org
ithi.research.icann.org
69.schedule.icann.org
rfc-annotations.research.icann.org
68.schedule.icann.org
download.research.icann.org
ithi.research.icann.org
ithi.research.icann.org
portal.sloanps.com
*.dev.icann.org
st.icann.org
members.icann.org
63.schedule.icann.org
ithi.research.icann.org
xn--mgbag5a2flx.icann.org
*.dns.icann.org
vanity6.jiveon.com
www.lroot.icann.org
redirects.icann.org
62.schedule.icann.org
ithi.research.icann.org
ombudsman.icann.org
schedule.icann.org
xn--mgbag5a2flx.icann.org
singapore41.icann.org
67.schedule.icann.org
archive.icann.org
eaitestbed.icann.org
vanity6.jiveon.com
ithi.research.icann.org
participate.icann.org
singapore41.icann.org
moodlerooms.com
moodlerooms.com
learn-ar.icann.org
atlarge.cdn.icann.org
ithi.research.icann.org
members.icann.org
redirects.icann.org
autogestion.venamcham.org
marketo.icann.org
www.lroot.icann.org
rfc-annotations.research.icann.org
icann.com
newsalerts.icann.org
62.schedule.icann.org
st.icann.org
download.research.icann.org
moodlerooms.com
icann.org
access.icann.org
ithi.research.icann.org
aso.icann.org
66.schedule.icann.org
owa.icann.org
vanity6.jiveon.com
*.jiveon.com
clearpass.icann.org
vanity6.jiveon.com
go.icann.org
st.icann.org
download.research.icann.org
dns-demographics.icann.org
observatory.research.icann.org
rfc-annotations.research.icann.org
icann.jobs
ombudsman.icann.org
observatory.research.icann.org
icann.jobs
singapore41.icann.org
ombudsman.icann.org
epa.cheggindia.com
go.icann.org
observatory.research.icann.org
singapore41.icann.org
download.research.icann.org
members.icann.org
xn--mgbag5a2flx.icann.org
st.icann.org
access.icann.org
icann.com
71.schedule.icann.org
go.icann.org
63.schedule.icann.org
ithi.research.icann.org
66.schedule.icann.org
redirects.icann.org
www.afralo.org
moodlerooms.com
64.schedule.icann.org
www.lroot.icann.org
magnitude.research.icann.org
events.icann.org
71.schedule.icann.org
download.research.icann.org
singapore41.icann.org
download.research.icann.org
magnitude.research.icann.org
www.lroot.icann.org

Certificate

The complete raw certificate details for atlarge.cdn.icann.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUlkDJ9Y08gdbmoT+8Va
VkL6bN/rRXtiB1magbYMOBpzZozd3wJxxMh5UAVGECLgPTarqCE+CH5eCM+8oG/g
bx+MA+S9ziXu09w7njmUrn/+BmZ8zlpfRI9rYJ7hetVm5TCF2x8cwjBKD0iPzD1L
l+UW5QZPO8tAgHjppKjbruLxtBjDk98CijVmN8Z6kQg+DSIUkT17J77VvPZNu2Fd
JwcGt0bFLCYqgiSOJHbUzZ6tEvVx1vOG7G5VfzNVnXW8czvf4FY7Elofs7acHOWG
8Jc0OYcasS3KkLlgj91x1Nqdak47pvmXRRotcDVP70/NdBQghnaWdfAIbn5ji9yW
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15151055966805422164380458599327696086
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'atlarge.cdn.icann.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23390276779714252845560117737867968380393112813410522216716991289242363051213882003404983847178026740778180086890968141210418076120526969067998556258225552934766093425441496726643363479577450461939773155618255575457908193863361462303831929804742849028895656655279768727182167171353446550221175050109767991939677548326584686363217368573823735853457887986609172611982479236549226751118730097772923981121342705502830904416990551681779397502104642618113942449417535013280533447213384394145765837726151390723829612536043302119950923213201881854229206873154632877366556676781195700638330382197841516934076034918589621114509
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5abf6c192f5f8ad301e05b644f5642d0149e6110
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlarge.cdn.icann.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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