jry-255.stage.yo.pa

Issued by Amazon

About this certificate

This digital certificate with serial number 08:45:84:1f:74:36:6e:50:e3:bf:af:6a:e3:ee:3d:ee was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jry-255.stage.yo.pa

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:45:84:1f:74:36:6e:50:e3:bf:af:6a:e3:ee:3d:ee
Serial Number (int): 10994772219625014138288375112024341998
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 1c:6d:31:ca:ee:57:08:2a:36:91:49:c6:1f:56:19:2f:b9:60:a2:72
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 4f:19:19:b6:f5:2f:fb:86:24:b6:02:db:eb:ce:e5:9f:f2:cb:e1:24
Fingerprint (sha256): 09:83:08:e0:32:76:01:d5:c3:22:19:c3:2d:2e:59:41:96:f7:f9:13:20:7b:ee:c4:d3:19:52:b9:00:1e:61:6d

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate jry-255.stage.yo.pa

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jry-255.stage.yo.pa

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jry-255.stage.yo.pa
*.jry-255.stage.yo.pa

Other certificates including the domain name yo.pa

(limited to 100 certificates)
nvn111.stage.yo.pa
jry-237.stage.yo.pa
ng2.stage.yo.pa
jenkins.yo.pa
fezal.stage.yo.pa
nvn-93-z.stage.yo.pa.stage.yo.pa
jry-259.stage.yo.pa
jry-258.stage.yo.pa
rmb-513-v2.stage.yo.pa
feature-rmb-520.stage.yo.pa
jry-284.stage.yo.pa
jry-240.stage.yo.pa
jry-259.stage.yo.pa
jry-165.stage.yo.pa
jry-144.stage.yo.pa
feddy.stage.yo.pa
world.stage.yo.pa
jry-123.stage.yo.pa
jry-237.stage.yo.pa
jenkins.yo.pa
frontendzaleniumtest.stage.yo.pa
nvn93d.stage.yo.pa
nvn226.stage.yo.pa
zero.stage.yo.pa
jry-208.stage.yo.pa
rmb-519.stage.yo.pa
jry-162.stage.yo.pa
nvn-93-z.stage.yo.pa
zalenium.stage.yo.pa
jry-190.stage.yo.pa
jry-153.stage.yo.pa
kkzalenium.stage.yo.pa
jry-96.stage.yo.pa
jry-255.stage.yo.pa
jry-113.stage.yo.pa
jry-100.stage.yo.pa
nvn120.stage.yo.pa
jry-145.stage.yo.pa
nvn149.stage.yo.pa
jry-184.stage.yo.pa
zal.stage.yo.pa
rlsrls.stage.yo.pa
marcis.stage.yo.pa
jry-256.stage.yo.pa
jry-69-alt.stage.yo.pa
zerohoh.stage.yo.pa
nvn105.stage.yo.pa
kmd-1217.stage.yo.pa
rmb-522.stage.yo.pa
jry-186.stage.yo.pa
feature-rmb-523.stage.yo.pa
jry-208.stage.yo.pa
rmb-470.stage.yo.pa
marcis.stage.yo.pa
jry-268.stage.yo.pa
test-build-with-api.stage.yo.pa
zalenium.stage.yo.pa
jry-202.stage.yo.pa
master.stage.yo.pa
yo.pa
dan.stage.yo.pa
nvn-185.stage.yo.pa
jry-194.stage.yo.pa
salesforce.stage.yo.pa
filippo.stage.yo.pa
feature-rmb-523.stage.yo.pa
jry-181.stage.yo.pa
jenkins.yo.pa
master.stage.yo.pa
jry-172.stage.yo.pa
jry-270.stage.yo.pa
jry-258.stage.yo.pa
rmb-507.stage.yo.pa
jry-106.stage.yo.pa
test-filippo.stage.yo.pa
jry-1337-1.stage.yo.pa
jry-181.stage.yo.pa
kmd1202.stage.yo.pa
jry-145.stage.yo.pa
jry-266.stage.yo.pa
jry-263.stage.yo.pa
nvcn120.stage.yo.pa
zalenium.stage.yo.pa
test.stage.yo.pa
subsub.stage.yo.pa
test-release.stage.yo.pa
jry-172.stage.yo.pa
jry-224.stage.yo.pa
jry-128.stage.yo.pa
jry-109.stage.yo.pa
jry-266.stage.yo.pa
jry-234.stage.yo.pa
jry-73.stage.yo.pa
jry-216.stage.yo.pa
jenkins.yo.pa
alex.stage.yo.pa
jry-208-kimi.stage.yo.pa
jry-138.stage.yo.pa
master.stage.yo.pa
jry-141.stage.yo.pa

Certificate

The complete raw certificate details for jry-255.stage.yo.pa in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlAb5O+4E0v0W9UoEUEqv
SwP9ShgUee4amGKOaGm7WHEY8s+FH5xTqRao1q8eDwqPa3K/4yZ15cNXjaFzvU2A
f2UQ/lU+JNZrubLlcWEZwBnncNfKZY5aWbf6nnrdmo1tTbkOuXK4XblgyRRsNdU/
wSt1BYvn5XKyr5qUf3FYqB3gALJz5YAqBFzvfvBbJrsENj348t3qM955Tkp8Cf/O
DBFSkQPM3kb2eLaq51SlZcD2xnIW9jy1Ey0v7FozX89g002I71TEjVnH0oNld5is
EuuOvmhp2qG4CCuouCBYByZBj4BIB9GdEM0ZHsLz+AULc3uaTwfolb5qWOBm49nr
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10994772219625014138288375112024341998
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-07 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jry-255.stage.yo.pa'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18686707930857276895578301949270303429701834375759129277644717865274584298484466577215519126764907508122056347922836228649226482849972450837441402330742025128546779158981567051231947128189689282265447321518286487484572606978096115581240022835549539530926452250251494648897490013323947603328704858044992716146594264677622801688264326800566072522892148750198922880280487181855282728420966061735242747265606742072087555914552758612425944992551208789281767317806180091513926818707222365886969498946626439830539161402174115298519475053240535354608995603196754212907754495125328354563645021391330501644024944100960303180733
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1c6d31caee57082a369149c61f56192fb960a272
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jry-255.stage.yo.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jry-255.stage.yo.pa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001715412b98b000004030048304602210089578202f438e13912886b46971b20a00f330cdc6906de48a0cdb85c8c178d6b022100bf4fa24b2ce94cd9a9fd8e4476a4a07958326d24425d651559398f62e5c59c650077005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca000001715412b9b50000040300483046022100e091f25a61e1e74871c3df8fb9bf9baa0d550a3a7f48b8000a9d14a2a9d94ca9022100ad1c0882f0ef8e4bb7cbe09e28c12dd3643a09f01af861a6084affabb49fbf18
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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