ics-aco-tst.effisoft.cloud

Issued by Amazon

About this certificate

This digital certificate with serial number 01:36:fb:94:33:df:f7:05:2a:6e:fb:30:04:8d:8b:98 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ics-aco-tst.effisoft.cloud

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:36:fb:94:33:df:f7:05:2a:6e:fb:30:04:8d:8b:98
Serial Number (int): 1614714652778857723718135829159054232
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 03:fc:38:cb:5c:d7:20:09:06:1b:f5:88:d0:06:b4:4b:7c:be:75:ca
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): fe:27:20:26:20:75:47:0a:ce:ef:70:86:a8:b1:ab:cf:e7:0a:ca:04
Fingerprint (sha256): 09:14:5d:f0:ab:04:d8:c4:5f:0f:0f:29:0b:37:4c:4d:f0:cb:b8:26:2d:d0:17:c7:a0:e0:a1:f8:d3:3b:df:69

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate ics-aco-tst.effisoft.cloud

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ics-aco-tst.effisoft.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ics-aco-tst.effisoft.cloud

Other certificates including the domain name effisoft.cloud

(limited to 100 certificates)
wst-wxl-ppd.effisoft.cloud
qbe-bo-dev.effisoft.cloud
enc-wxl-prd.effisoft.cloud
qbe-wxl-uat.effisoft.cloud
ars-aco-prd.effisoft.cloud
efi-tst.effisoft.cloud
ci-pxl-915a.effisoft.cloud
qbe-bastion-tbm.effisoft.cloud
deb2-qlf2.effisoft.cloud
pen-tst.effisoft.cloud
sta-wxl-tst.effisoft.cloud
ics-wxl-ada.effisoft.cloud
qbebusinessobjectsdev.effisoft.cloud
its-jasper-tst916.effisoft.cloud
wxl1.effisoft.cloud
ics-aco-tst.effisoft.cloud
aco.effisoft.cloud
qlf-dev.effisoft.cloud
qbe-bastion-tbl.effisoft.cloud
kbc-wxl-tst.effisoft.cloud
ics-wxl-ada.effisoft.cloud
qbe-wxl-ppd.effisoft.cloud
qbe-uat.effisoft.cloud
ics-aco-tst.effisoft.cloud
test3.effisoft.cloud
deb3-qlf3.effisoft.cloud
ras-wxl-tst.effisoft.cloud
ics-wxl-tst.effisoft.cloud
qbe-bastion-tbl.effisoft.cloud
ics-jasper-tst.effisoft.cloud
advens-sec.effisoft.cloud
qbe-bo-tbl.effisoft.cloud
sra-tst.effisoft.cloud
qbe-wxl-tbl.effisoft.cloud
jbg-dev.effisoft.cloud
efi-tst.effisoft.cloud
ics-wxl-ada.effisoft.cloud
qbebusinessobjectsdev.effisoft.cloud
debian-qualif.effisoft.cloud
sso-auth-tst.effisoft.cloud
qbe-wxl-tbl.effisoft.cloud
boe-bo-tst.effisoft.cloud
qbe-wxl-tbl.effisoft.cloud
qbe-bastion-tbl.effisoft.cloud
ics-wxl-ada.effisoft.cloud
jb-dev.effisoft.cloud
qbe-wxl-ubn.effisoft.cloud
jbg-dev.effisoft.cloud
test3.effisoft.cloud
ics-aco-tst.effisoft.cloud
kbc-bastion-prd.effisoft.cloud
wst-bo-prd.effisoft.cloud
qbe-tbl.effisoft.cloud
qbe-wxl-tbl.effisoft.cloud
ics-aco-tst.effisoft.cloud
qbe-bo-uat.effisoft.cloud
qbe-bo-tbl.effisoft.cloud
ars-aco-prd.effisoft.cloud
wst-wxl-ppd.effisoft.cloud
efi-dev.effisoft.cloud
qbe-env-status.effisoft.cloud
wst-wxl-dev.effisoft.cloud
ics-aco-tst.effisoft.cloud
eflb-wxl-dev.effisoft.cloud
mbo-tst.effisoft.cloud
sra-tst.effisoft.cloud
qbe-bo-dev.effisoft.cloud
ci-pxl-917a.effisoft.cloud
ics-wxl-ada.effisoft.cloud
mkm-tst.effisoft.cloud
ics-jasper-tst.effisoft.cloud
qbe-wxl-dbn.effisoft.cloud
qbe-bastion-uat.effisoft.cloud
ics-wxl-ada.effisoft.cloud
jb-dev.effisoft.cloud
demo1-tst.effisoft.cloud
efi-dev.effisoft.cloud
wxl2.effisoft.cloud
qa2.effisoft.cloud
jb-dev.effisoft.cloud
qbe-auth-tbl.effisoft.cloud
qbe-wxl-tbm.effisoft.cloud
qbe-bo-ppd.effisoft.cloud
for-wxl-prd.effisoft.cloud
qbe-auth-tbl.effisoft.cloud
ics-wxl-rpa.effisoft.cloud
qbe-wxl-tbl.effisoft.cloud
ics-aco-tst.effisoft.cloud
ics-jasper-tst.effisoft.cloud
ci-jasper-pxl-915a.effisoft.cloud
mfp-aco-tbl.effisoft.cloud
jenkins-legacy.effisoft.cloud
sso-wxl-tst.effisoft.cloud
qbe-bastion-dbl.effisoft.cloud
qbe-wxl-dev.effisoft.cloud
qbe-dev.effisoft.cloud
debian-qualif.effisoft.cloud
enc-auth-prd.effisoft.cloud
qbe-bo-tbl.effisoft.cloud
wst-wxl-prd.effisoft.cloud

Certificate

The complete raw certificate details for ics-aco-tst.effisoft.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoybeTdJB9S9ad4slg619
B22ia2lg0BMBaNhHZ94yA3h0sVtMxdWUqqy8uYiB7gGsPs5JZK8lO7rjY+JAtvh3
tmWmuK1tGKzU74cT98YqR6myCBfE/fKphylaZOE8is8Cuh5b4AuSAVn0J7xnHR1m
YmU+XHrRcM3BUP4cD1wAE9kWJ8HXJAYBqbJjWvFJxQKC06GwD0NvGPjnesjiSngc
eGI/fPgaBpRPb0zAB9YKfSJZSy3mEmUG1SZtue86cgv6lwErWncuHLvNq6rVptPa
YbQp/kj5SDux9oBlbwDzEojqL6+ko4PSprzl8ZxX6ERUy7crxC7jxAmzeoAr0fdv
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1614714652778857723718135829159054232
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ics-aco-tst.effisoft.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20596010419512948965675331694178356195491187131552893900192098394792975355986291787706273508689122912715850304793396286378358374418419432032846335324064580186328377367430262686312060418571200326208146081255971207329956532935687072030174303355945672650788122982080012043680014480123704138659920147492788677761525113810240485536604137724765220112869814355527900515455388262758830167750175049877278927240605932154638077544563296346657080581868570860328602933948130218234709472905284908232572051864577760509282772378401897301664749753825556694412747829221433637709936803634280688810111794210820842692648452213495238717239
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							03fc38cb5cd72009061bf588d006b44b7cbe75ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ics-aco-tst.effisoft.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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