static-vfp1.ott.kaltura.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0f:38:e9:04:ae:dc:39:dc:34:c2:05:1c:e9:f3:93:fa was issued on by Amazon.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=static-vfp1.ott.kaltura.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:38:e9:04:ae:dc:39:dc:34:c2:05:1c:e9:f3:93:fa
Serial Number (int): 20233914733318617963225030601989133306
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 67:79:50:42:85:b1:1f:f2:bd:a7:21:82:27:31:85:2c:9b:27:7d:60
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): a5:db:49:85:a9:02:a5:8c:e3:f8:41:1b:97:e7:9a:9a:d7:35:3c:50
Fingerprint (sha256): 09:14:1f:eb:85:00:7d:e4:df:0e:6b:ec:94:e2:93:eb:a8:1e:71:e9:ee:45:cb:41:bd:43:cf:0a:a1:36:76:0f

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate static-vfp1.ott.kaltura.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for static-vfp1.ott.kaltura.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

static-vfp1.ott.kaltura.com
222.static-vfp1.ott.kaltura.com
3035.static-vfp1.ott.kaltura.com
3038.static-vfp1.ott.kaltura.com
3041.static-vfp1.ott.kaltura.com
3044.static-vfp1.ott.kaltura.com
3047.static-vfp1.ott.kaltura.com
3062.static-vfp1.ott.kaltura.com
430.static-vfp1.ott.kaltura.com

Other certificates including the domain name kaltura.com

(limited to 100 certificates)
clarity.status.broadcom.com
nagra-drm-proxy-vpn-orp1.ott.kaltura.com
u2.shared.global.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
ez.fukuoka.status.ricoh.com
rest-vfs1.ott.kaltura.com
*.ott.kaltura.com
u2.shared.global.fastly.net
incapsula.com
cms-corp.kaltura.com
canada.status.coconutsoftware.com
newrelic.kstars.org
ez.fukuoka.status.ricoh.com
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
gij.gitkrakenstatus.com
images-nl.ott.kaltura.com
status.activtrak.com
u2.shared.global.fastly.net
u2.shared.global.fastly.net
rest-vfs1.ott.kaltura.com
u2.shared.global.fastly.net
us-east-1-san4.blackboard.com
u2.shared.global.fastly.net
impactstatus.validic.com
impactstatus.validic.com
canada.status.coconutsoftware.com
covid-19-status.anexia.com
u2.shared.global.fastly.net
newrelic.kstars.org
prospective.shared.global.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
apicdn.sg.kaltura.com
canada.status.coconutsoftware.com
university.kaltura.com
pingdom-check.acmeapi.co
incapsula.com
rest-vfp1.ott.kaltura.com
estado.medios.com.ar
u2.shared.global.fastly.net
vpaas.kaltura.com
*.ott.kaltura.com
estado.medios.com.ar
newrelic.kstars.org
u2.shared.global.fastly.net
u2.shared.global.fastly.net
canada.status.coconutsoftware.com
canada.status.coconutsoftware.com
*.eu.kaltura.com
impactstatus.validic.com
leapfrog-ssl-42.gcs-web.com
dns-vetting1-jeffg-noah.map.fastly.net
us-east-1-san4.blackboard.com
mediaspace.kaltura.com
chat.nvp1.ovp.kaltura.com
u2.shared.global.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
impactstatus.validic.com
u2.shared.global.fastly.net
canvas.kaltura.com
u2.shared.global.fastly.net
dev.mw.smart-integration.status.ricoh.com
*.here.tv
dns-vetting1-jeffg-noah.map.fastly.net
corp.kaltura.com
6bd21a3c.status.cleafy.cloud
drm-vfp1.ott.kaltura.com
u2.shared.global.fastly.net
prospective.shared.global.fastly.net
prospective.shared.global.fastly.net
u2.shared.global.fastly.net
ez.fukuoka.status.ricoh.com
prospective.shared.global.fastly.net
u2.shared.global.fastly.net
drm-vfp1.ott.kaltura.com
clarity.status.broadcom.com
*.ott.kaltura.com
canada.status.coconutsoftware.com
prospective.shared.global.fastly.net
connect.kaltura.com
impactstatus.validic.com
u2.shared.global.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
leapfrog-ssl-42.gcs-web.com
ez.fukuoka.status.ricoh.com
u2.shared.global.fastly.net
canada.status.coconutsoftware.com
static-vfp1.ott.kaltura.com
newrelic.kstars.org
drm-vfp1.ott.kaltura.com
prospective.shared.global.fastly.net
u2.shared.global.fastly.net
compass.status.atlassian.com
canada.status.coconutsoftware.com
estado.medios.com.ar
estado.medios.com.ar
statuspage.io
cms-corp.kaltura.com
tvpapi-vfp1.ott.kaltura.com
tvpapi-vfp1.ott.kaltura.com

Certificate

The complete raw certificate details for static-vfp1.ott.kaltura.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmzeObebOzt/MfeQnbQ/
peAERzwmt3m2s/Ga5LD5eISl3p7S5bVU8NewkDmbsMRtbrMRLQHdgc7zNHNqDwTm
hOqszc/uerIJh9B28qOvD11RRI76uxq6KwpAWgcehuogCyC9f/Lvq34IYWYJf9dp
z0OUi3qr0NuwlnjcPESxEzUAoTnltCqmKa0C0eRSVwrAOHxyf00Mz6SOs2/UMwil
ZZLSZMgGb5bIU38F5+cNTEZ6ZRzWtxCReKIow2S16W+gweeiUjXWOsv12Vx+VQ2j
GfdcDSQIrVGUpvvDUTUmYFZ8AAFZV5B7uWEVDO+U/Pv6RQ4SP38CLY8EphgTz7MO
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20233914733318617963225030601989133306
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'static-vfp1.ott.kaltura.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24038962788839563772549356802772511973360132352226703576104982239918255314512622747729481842309244562197348078330048355414222643812571455120826731767770954501118254187511673404397288799359406205902037441486743248242981204204119360526645339222002087694325635468280272081294563870552156034325454211497954274276044216717214364837916211173595738790812876311597238208907955086156483874664177860093226011114027153321446987213166810912724691041318519660166329080345082161062764513930086693105162459814797853632053395563237468069918347507234492312585243152034878090788861510218413837937759617211714276438972096600050616176251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6779504285b11ff2bda721822731852c9b277d60
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (303 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-vfp1.ott.kaltura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '222.static-vfp1.ott.kaltura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3035.static-vfp1.ott.kaltura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3038.static-vfp1.ott.kaltura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3041.static-vfp1.ott.kaltura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3044.static-vfp1.ott.kaltura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3047.static-vfp1.ott.kaltura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3062.static-vfp1.ott.kaltura.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '430.static-vfp1.ott.kaltura.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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