eu1.spi.psb.fsapi.com

Issued by Amazon

About this certificate

This digital certificate with serial number 05:dc:37:83:fe:06:ad:5d:45:a6:ed:df:4c:21:a8:0f was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=eu1.spi.psb.fsapi.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:dc:37:83:fe:06:ad:5d:45:a6:ed:df:4c:21:a8:0f
Serial Number (int): 7789571277836996392804317259723024399
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: cc:52:3b:ef:43:10:d9:95:cf:34:48:b3:90:dd:d1:4c:e9:df:6c:a1
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 78:9e:90:b7:c5:2d:80:78:f1:2e:93:ce:8a:97:b8:8f:bf:97:0f:f9
Fingerprint (sha256): 08:b4:b3:03:33:7b:c0:8a:f3:ac:01:15:e9:7f:9e:1c:31:b8:3f:bf:46:8e:ea:85:c8:52:d7:96:c7:7d:f8:4e

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate eu1.spi.psb.fsapi.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eu1.spi.psb.fsapi.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eu1.spi.psb.fsapi.com

Other certificates including the domain name fsapi.com

(limited to 100 certificates)
relay.stg.withsecure.com
us2.spi.psb.fsapi.com
lorsp.sc2.fsapi.com
*.sensesdk-ci.fsapi.com
lykaal-layer3.mind.pc-ci.fsapi.com
emea.psb-regional-gateway.psb.fsapi.com
psblive.reporting-service.internal.psb-stg.fsapi.com
bigdata-labs.ds.fsapi.com
stable.epp.elements-ci.fsapi.com
toucan.accounts-apac.fsapi.com
helrdomaster02.fi.f-secure.com
portal.radar.elements-stg.withsecure.com
gustvimaster.infra-dev-services.fsapi.com
ew1.doorman.ci.gw.fsapi.com
gustvi.infra-dev-services.fsapi.com
stable.psb-ci.fsapi.com
ew1-psb-ci-latest-ecs-internal.psb-ci.fsapi.com
public.prod.ane1.cosmos-prd.fsapi.com
eu1.psb.fsapi.com
update-karma.pc.fsapi.com
mobile-dl.sp.f-secure.com
*.accounts-emea-ci.fsapi.com
ddr-dev.sensesdk-ci.fsapi.com
accounts-stg.fsapi.com
latest.psb-regional-gateway.psb-ci.fsapi.com
jenkins-staging.fi.f-secure.com
eu1.reporting-service.internal.psb.fsapi.com
helcccpmaster01.fi.f-secure.com
guts2.sp.f-secure.com
jp3.psb.fsapi.com
influxdb-mindcontrol.pc-ci.fsapi.com
ulmaster01.internalsecure.com
famp-ci.fsapi.com
savaja-layer3.mind.pc-ci.fsapi.com
doorman.sp.f-secure.com
restmc.mind.sc2.fsapi.com
client-alb.musttu.guts2-ci.fsapi.com
alb.j4a.infra-dev-services.fsapi.com
api.prd.ew1.doorman.fsapi.com
ddr-dev2.sensesdk-ci.fsapi.com
token.accounts-apac-ci-integration.fsapi.com
obus.sc.fsapi.com
api.unstable.ew1.mes-ci.fsapi.com
client.sarkar.guts2-ci.fsapi.com
ntstr.pc.fsapi.com
psbtp.micro-cosmos.internal.psb-stg.fsapi.com
obus.eu-west-1.mind.pc-ci.fsapi.com
hydra.eu-west-1.mind.pc-ci.fsapi.com
ups.ups-prd.fsapi.com
lykaal-layer3.mind.pc-ci.fsapi.com
lorsp-karma.sc2.fsapi.com
eu1.spi.psb.fsapi.com
mind-bin-feature-ex.ap-southeast-1.mind.pc.fsapi.com
public.stable.ew1.cosmos-ci.fsapi.com
dds-dev3.sensesdk-ci.fsapi.com
alb.j4a.services-ci-infra-services.fsapi.com
bump.borgs-ci.fsapi.com
relay.withsecure.com
ddr-dev2.sensesdk-ci.fsapi.com
eu-smi-eu.spi.psb.fsapi.com
sandbox.dev-lehtjo.ci.gw.fsapi.com
dp-antial.ds-ci.fsapi.com
accounts-ci-integration.fsxt.net
sebe-lb-int.eu-west-1.ele.fsapi.com
famp.fsapi.com
staging.pete.ds.fsapi.com
psblive.psb-stg.fsapi.com
redirects.ele.fsapi.com
scanner.cloudprotection.fsapi.com
monitoring.savaja.sc.fsapi.com
ew1a-splunk-indexer.infra-dev-services.fsapi.com
alb.j4a.infra-dev-services.fsapi.com
ws-ci.fsapi.com
api.unstable.ew1.mes-ci.fsapi.com
sarkar.guts2-ci.fsapi.com
cpa.ci.ew1.entitlements-ci.fsapi.com
doorman.sp.f-secure.com
ntstr.eu-west-1.mind.pc-stg.fsapi.com
doorman-beta.sp.f-secure.com
salmi-s3-api.eu-west-1.sc-ci.fsapi.com
staging.pete.ds.fsapi.com
toucan.accounts-emea-ci-integration.fsapi.com
infra-auth-proxy.ds-ci.fsapi.com
token.accounts-emea.fsapi.com
ew1b-splunk-indexer.ci-infra-services.fsapi.com
influxdb-mindcontrol-lykaal.pc-ci.fsapi.com
toucan.accounts-apac-stg.fsapi.com
api.unstable.ew1.mes-ci.fsapi.com
push-na.fsapi.com
api.int.ci.ew1.entitlements-ci.fsapi.com
accounts-ci-integration.fsxt.net
atlas.ci.fsapi.com
admin.guts2-prd.fsapi.com
psb3.batch-password-protection.internal.psb.fsapi.com
jenkins-elements02.internalsecure.com
emea4.psb.fsapi.com
rexex.kaleeri.fsapi.com
sebe-tp.fsapi.com
stable.psb-ci.fsapi.com
admin.int.ci.ew1.guts2-ci.fsapi.com

Certificate

The complete raw certificate details for eu1.spi.psb.fsapi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WVpfKb4b9yi4ox1sOzh
oj9gGRvt44PRAH2APx1QlPV0g4GL50d0EMShUj1UeyHz19Uy3GL5gYx4fO8DcozF
wp6R3BkzVkbRlrZLRkbqPq/Cys/bivEaavkni9RHsTqhxS0zDsaqbOTXCdBmL0ce
Pgp7pgJ8VELlpf/rySMiJ9UN0u50NPFDsqsFH+IjEOmB2ycH2irMTO/AXAdZGpDl
vKllmjqupjuzVDGetjhw9Dcmvf4v5wEl+hx/YKlrRYg/7BCENcbScU16epjyevIN
61rRf9tznDh0VwyVFCVjUXNH0gwmv2AzTV5Dd0G2M2y6IJRG/bQ0m2mWXNdGbAuN
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7789571277836996392804317259723024399
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-30 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eu1.spi.psb.fsapi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26938767107543567002401504146952878608001732611620295137939589467607782316238813792083369631081352943422964941771890546366172084041067702174265255863897213539049797361551674291773291081059128272840903535743923887862350535010360963279512087215246600455575628427440847120991011183653245454580752291146434050275833977281948322523336954219776081370240741965451842869319835016411371019613791813939067005861407129443354008088210261418524090087987493838744549132391388868829565920592165807814100565077240976632362749548745914021729603566894619877858216245972053540102149564968482239702052189394146082515382680567054728924489
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc523bef4310d995cf3448b390ddd14ce9df6ca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu1.spi.psb.fsapi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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