*.tmone.pub-tmaws.io

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:2e:48:b1:04:11:b8:1a:80:59:ee:4f:f0:ae:e4:8a was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.tmone.pub-tmaws.io

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:2e:48:b1:04:11:b8:1a:80:59:ee:4f:f0:ae:e4:8a
Serial Number (int): 16191055963047181673332074052806698122
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 56:8c:80:4c:38:12:48:d7:66:0c:f8:30:9c:03:a3:ac:c0:83:1f:7c
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 04:2a:f1:07:2a:68:99:4a:c5:6d:97:14:8c:3a:a3:f7:bd:77:5f:0d
Fingerprint (sha256): 08:19:c3:00:55:07:15:34:fa:3e:3d:76:f8:0d:c8:57:77:de:5a:c3:0d:99:5d:d2:04:f2:a2:a4:e6:e8:02:4f

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.tmone.pub-tmaws.io

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.tmone.pub-tmaws.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.tmone.pub-tmaws.io
*.tmone.prod-tmaws.io

Other certificates including the domain name pub-tmaws.io

(limited to 100 certificates)
*.preprod.cdneng.pub-tmaws.io
paymentwebhook-preprod.pub-tmaws.io
preprod-us-east-1.checkout.pub-tmaws.io
hobbes2385-preprod.pub-tmaws.io
dns-vetting1-marita-ardnek.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
*.identity.pub-tmaws.io
fee-adapter.prod1.ismds.pub-tmaws.io
maps.pub-tmaws.io
lightstep.pub-tmaws.io
dns-vetting1-marita-ardnek.map.fastly.net
app.privacy-core.prod.us-east-1.pub-tmaws.io
privacy-core.prod.us-east-1.pub-tmaws.io
dns-vetting1-marita-ardnek.map.fastly.net
ticketmaster5.map.fastly.net
preprode1-us-east-1-kinesis-proxy.checkout.pub-tmaws.io
ticketmaster.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
*.tmone.pub-tmaws.io
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
dc-redeem-staging.pub-tmaws.io
dns-vetting1-marita-ardnek.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
presence.tmaws.io
stagee1-us-east-1-kinesis-proxy.checkout.pub-tmaws.io
ticketmaster5.map.fastly.net
presence.preprod.pub-tmaws.io
*.accounts.pub-tmaws.io
fee-adapter.prod1.ismds.pub-tmaws.io
apis.blox.preprod9.us-east-1.pub-tktm.io
supermaps.preprod.us-east-1.pub-tmaws.io
dns-vetting1-marita-ardnek.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
*.comedystophelsinki.fi
app.rt.us-east-1.preprod.pub-tmaws.io
socketspxy.tmone.pub-tmaws.io
supermaps.prod.us-east-1.pub-tmaws.io
ism.ticketmaster.com
dns-vetting1-marita-ardnek.map.fastly.net
*.accounts.pub-tmaws.io
privacy-core.preprod.us-east-1.pub-tmaws.io
ticketmaster5.map.fastly.net
ticketmaster5.map.fastly.net
app.ism.rt.us-east-1.preprod.pub-tmaws.io
titan.pub-tmaws.io
app.ism.rt.us-east-1.pub-tmaws.io
pxy.tmx.prod.pub-tmaws.io
dias.pub-tmaws.io
availability-staging.prod-tmaws.io
presence.tmaws.io
prod1-us-east-1.purchase-api.pub-tmaws.io
ticketmaster.map.fastly.net
prd2524.pay-with-points-widget.prod1.pub-tmaws.io
tm1sales.tmaws.io
presence.preprod.pub-tmaws.io
dns-vetting1-marita-ardnek.map.fastly.net
ls.collector.pub-tmaws.io
presto.prod1.pub-tmaws.io
*.identity.pub-tmaws.io
davettest35.pub-tmaws.io
pxy.tmx.preprod.pub-tmaws.io
dns-vetting1-marita-ardnek.map.fastly.net
dcgsp-booking.prod1.prod-tmaws.io
pxy.tmx.preprod.pub-tmaws.io
ticketmaster5.map.fastly.net
*.accounts.pub-tmaws.io
*.io-media.com
ticketmaster5.map.fastly.net
*.tmone.pub-tmaws.io
fb.pub-tmaws.io
storage.prod.pub-tmaws.io
privacy-core.dev.prd2293.us-east-1.pub-tmaws.io
*.accounts.pub-tmaws.io
dns-vetting1-marita-ardnek.map.fastly.net
dcgsp-booking.preprod1.pub-tmaws.io
anthonyfermin.com
ticketmaster5.map.fastly.net
presence.preprod.us-east-1.pub-tmaws.io
dc-redeem-prod.pub-tmaws.io
titan.pub-tmaws.io
us-east-1.prod.openticketing.pub-tmaws.io
ticketmaster5.map.fastly.net
api.preprod.pub-tmaws.io
dns-vetting1-marita-ardnek.map.fastly.net
cs-tools.pub-tmaws.io
api.pub-tmaws.io
onboarding.pub-tmaws.io
engagement.ticketmaster.com
dns-vetting1-marita-ardnek.map.fastly.net
privacy-core.qa.us-east-1.pub-tmaws.io
partner-onboarding.tmdc.us
fee-adapter.prod1.ismds.pub-tmaws.io
dcfd-preprod.pub-tmaws.io
stagee1-us-east-1.checkout.pub-tmaws.io
ism.ticketmaster.com
dcfd-preprod.prod-tmaws.io
presence.tmaws.io
clientapptct.ticketmaster.com
dns-vetting1-marita-ardnek.map.fastly.net

Certificate

The complete raw certificate details for *.tmone.pub-tmaws.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ00c3HLSYBYpN7px/Vh
F1COEKkA7LWdN8T01NKhUN+0uBZ0jnj7IZlf8gvU058dMfIi46ZpnnGAhXhloQxC
DcP4dKlEb4gexmv1qoXw7vHYQqlIYGHbDP+sMw/Ib3HUNabnNKi2TbGCCohXT4ab
WSuHnht5bMhGiVZPFpC4OGvOVUPoT0zw0mHSBZEFNptCOWRPaUgjnHlw5JTbABM4
h/HeXjPGFU07TQOeotGRrwIERbwAkj5l3I2tRjupjwmBf24wC00YWOCcPNrRRqny
UX4WZ+Dfehn31+lStVhzcFPw/EccGyFCDvDDXaF+VHazkKy26bGTlEV+qcTASpZf
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16191055963047181673332074052806698122
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.tmone.pub-tmaws.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23810321952406599843001431341472957580602029937904297357116489255885354377662990433789301519181097902895633586748840841539110223645099404603386552816367951170610845308447461120496100240733560896240387014087557585506242373170624839962128376119140965403601004861114314380798683638942466574840187335021445189430924430992629468286903916534294876420885378754233968970706803990513114562845168782348425857515964561238269385164968975660497027897623066358479034123257766776107619888671845535080165739822563649659112336077704876020628982995661915219189538150990150620364448655702011616474239340804832378223310864556008517558139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							568c804c381248d7660cf8309c03a3acc0831f7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tmone.pub-tmaws.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tmone.prod-tmaws.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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