cbe.accaglobal.com

Issued by Amazon

About this certificate

This digital certificate with serial number 09:6c:5e:d1:e1:91:64:2d:5c:e0:f5:88:b1:1d:7e:53 was issued on by Amazon.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cbe.accaglobal.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:6c:5e:d1:e1:91:64:2d:5c:e0:f5:88:b1:1d:7e:53
Serial Number (int): 12525743197784607505373116226953117267
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 93:dd:2f:c7:b0:ce:0f:ba:36:db:8e:11:16:11:5e:e0:d9:7d:3f:c0
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): d4:3b:c9:fa:ba:b2:a8:65:63:41:1d:a6:44:03:8c:74:f9:78:5e:68
Fingerprint (sha256): 08:3f:af:9f:47:89:38:31:76:db:e4:17:c5:b2:c2:9f:91:42:0f:36:6f:a0:52:65:4a:f0:16:ba:22:ab:88:5e

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate cbe.accaglobal.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cbe.accaglobal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cbe.accaglobal.com
*.cbe.accaglobal.com
cbeinternal.accaglobal.com
cbeservices.accaglobal.com
cbelicensing.accaglobal.com
cbefaq.accaglobal.com

Other certificates including the domain name accaglobal.com

(limited to 100 certificates)
www.pugpig.com
learningcommunity.accaglobal.com
rp01.accaglobal.com
dns-vetting1m.map.fastly.net
oat.soa.apps.accaglobal.com
practicetests.accaglobal.com
sso.accaglobal.com
council.accaglobal.com
accaglobal.com
www3.pugpig.com
portal.accaglobal.com
interview.accaglobal.com
abafrica.accaglobal.com
www.pugpig.com
www.pugpig.com
citrix.accaglobal.com
int.internal.exams.apps.accaglobal.com
soa.apps.accaglobal.com
events.accaglobal.com
soa.apps.accaglobal.com
tls.automattic.com
cbedr4.accaglobal.com
studygroups.accaglobal.com
owa.my.accaglobal.com
sso.accaglobal.com
interview.accaglobal.com
haproxy01a.prod01.iam.accaglobal.com
dns-vetting1k.map.fastly.net
studentvirtuallearn.accaglobal.com
tls.automattic.com
experience.accaglobal.com
api.cn.stage.accaglobal.com
dns-vetting1m.map.fastly.net
syscbe.accaglobal.com
cbe.accaglobal.com
uat-sec.soa.apps.accaglobal.com
cbe.accaglobal.com
studymaterials.accaglobal.com
dns-vetting1m.map.fastly.net
www.pugpig.com
www.pugpig.com
int.soa.apps.accaglobal.com
study-in-singapore.accaglobal.com
sys.reportengine.exams.apps.accaglobal.com
*.content.pugpig-dev.com
dns-vetting1m.map.fastly.net
tls.automattic.com
sys.reportengine.exams.apps.accaglobal.com
accaglobal.com
haproxy01a.oat01.iam.accaglobal.com
dns-vetting1m.map.fastly.net
Oatcbelicensing.accaglobal.com
cds3.cvent.com
uatcbe.accaglobal.com
tls.automattic.com
irelandbookings.accaglobal.com
login.ciam.accaglobal.com
int-sec.soa.apps.accaglobal.com
www.accacareers.com
aem-sso.accaglobal.com
studentvirtuallearn.accaglobal.com
practicetests.accaglobal.com
tls.automattic.com
www.pugpig.com
dns-vetting1m.map.fastly.net
council.accaglobal.com
sys.reportengine.exams.apps.accaglobal.com
pv-test.accaglobal.com
interview.accaglobal.com
*.iassess.accaglobal.com
accaglobal.com
www.pugpig.com
totalreward-system.accaglobal.com
dns-vetting1k.map.fastly.net
adfs.accaglobal.com
uat.exams.apps.accaglobal.com
dns-vetting1m.map.fastly.net
devcbe.accaglobal.com
exams.apps.accaglobal.com
uat-wssop.iam.accaglobal.com
diploma.accaglobal.com
*.content.pugpig-dev.com
oat.bi.apps.accaglobal.com
learningcommunity.accaglobal.com
tls.automattic.com
sys.ext.exams.apps.accaglobal.com
login.iam.accaglobal.com
www2.pugpig.com
www.pugpig.com
cbept.accaglobal.com
alljobs.accaglobal.com
dns-vetting1m.map.fastly.net
int.exams.apps.accaglobal.com
digitalhub.accaglobal.com
diploma.accaglobal.com
cds3.cvent.com
int.reportengine.exams.apps.accaglobal.com
soa-uat.accaglobal.com
studygroups.accaglobal.com
*.iassess.accaglobal.com

Certificate

The complete raw certificate details for cbe.accaglobal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEmVDtrFvzZvlZa7tceA
2ZbQCeMQRmlCjpZ2KJuXD1Sr8m2ckd/5g/X8HkyP0jnI4ZOFN+OWgm+GXk+eEzit
zE5SnuWj/Wybc/CyM/CSsAEp7hnyivPQoqMWKlOTrQX5KC4FLJmqV6WkZDRqFWyj
9gBlc6S9gushXk0NwX+z3VMDqETPW8C0Ov53Z0+EhGfbGxmjVN+baoLg6HF/7P9k
W8zwc0cXCBU/VZ3Tj5rmq16uNvzPXUSCllvNTRQC2Ma/hBu/VT5bdry4MdSR81SS
EJ/+yNBjIFKNOQjL/zYcgyZvzd0aVYT7RT8ietUiUKoFVpUcfgPZGI6OSu+Wq9ba
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12525743197784607505373116226953117267
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cbe.accaglobal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25788898976804474466594224004989456470297975078954902394120052976082888173087079735894533536790446376664627335607378868649065805274356956430900662383436536411649000293821632386596631023325807363113331800117181213101568382382550744424606777542981868007160354902122671922899620724230273042994688411187974921952676123834135185817975133563319115647932147110379994098601914823534905094902990059419836673902004072326755808095739059090481552349139193431282891678215893585512323932260850158247528594129919101972233731573652627054124842947522931843908930997732286395254982596464864562001609564264574673568666472487362818923111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							93dd2fc7b0ce0fba36db8e1116115ee0d97d3fc0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (153 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbe.accaglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbe.accaglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbeinternal.accaglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbeservices.accaglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbelicensing.accaglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbefaq.accaglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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