ui.ama04-1.dev.messaging.sbgservices.com

Issued by Amazon

About this certificate

This digital certificate with serial number 08:28:2f:e6:d5:71:3d:d9:4e:34:6e:ed:3b:ad:68:9e was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ui.ama04-1.dev.messaging.sbgservices.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:28:2f:e6:d5:71:3d:d9:4e:34:6e:ed:3b:ad:68:9e
Serial Number (int): 10842487402406677780176371148716337310
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 22:c4:3e:de:ed:a7:87:98:dd:5f:9a:d0:82:22:d5:95:22:f0:53:0b
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 90:f2:c7:af:de:2a:66:c6:d8:5e:0e:78:9d:c4:f4:53:22:88:ee:70
Fingerprint (sha256): 0b:00:26:38:a1:50:49:68:f7:e0:0c:6b:ee:df:ab:c9:a6:59:ca:10:08:93:ed:4a:cc:55:b8:23:27:82:df:16

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate ui.ama04-1.dev.messaging.sbgservices.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ui.ama04-1.dev.messaging.sbgservices.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ui.ama04-1.dev.messaging.sbgservices.com

Other certificates including the domain name sbgservices.com

(limited to 100 certificates)
ui.browser-test.leahyc-2.dev.messaging.sbgservices.com
ui.browser-test.ama04-1.dev.messaging.sbgservices.com
ui.leahyc-2.dev.messaging.sbgservices.com
oauth.test.sweeps.sbgservices.com
ui.browser-test.asi11-1.dev.messaging.sbgservices.com
ui.browser-test.dev.messaging.sbgservices.com
oauth.sweeps.sbgservices.com
*.test.ff.sbgservices.com
ui.browser-test.cbe01-1.dev.messaging.sbgservices.com
assetstore.test.gs.sbgservices.com
ui.asi11-1.dev.messaging.sbgservices.com
publicgateway.test.gs.sbgservices.com
promotions-spin-service.promotions.sbgservices.com
*.ff.sbgservices.com
oauth.autotest.sweeps.sbgservices.com
api.messaging.sbgservices.com
test.feedback.s6.sbgservices.com
ui.browser-test.preenn-1.dev.messaging.sbgservices.com
rcs.sbgservices.com
ui.ama04-1.dev.messaging.sbgservices.com
rc.ges.sbgservices.com
*.dev.ff.sbgservices.com
push.staging.gamingservices.sbgservices.com
push.gs.sbgservices.com
ui.preenn1.dev.messaging.sbgservices.com
ui.ama04-1.dev.messaging.sbgservices.com
oauth.autotest.sweeps.sbgservices.com
ui.preenn-1.dev.messaging.sbgservices.com
ui.test.messaging.sbgservices.com
ui.jamesr-1.dev.messaging.sbgservices.com
api.messaging.sbgservices.com
push.gamingservices.sbgservices.com
ui.leahyc-1.dev.messaging.sbgservices.com
minigames.ges.sbgservices.com
clearpass.skybettingandgaming.com
feedback.s6.sbgservices.com
ui.am04-1.dev.messaging.sbgservices.com
ui.messaging.sbgservices.com
ui.browser-test.ama04-1.dev.messaging.sbgservices.com
*.test.sweeps.sbgservices.com
ui.browser-test.leahyc-1.dev.messaging.sbgservices.com
demo-portal.test.ges.sbgservices.com
ui.leahyc-2.dev.messaging.sbgservices.com
rcs.sbgservices.com
push.gamingservices.sbgservices.com
ui.browser-test.leahyc-2.dev.messaging.sbgservices.com
ui.leahyc-1.dev.messaging.sbgservices.com
ui.ama04-1.dev.messaging.sbgservices.com
demo-portal.test.ges.sbgservices.com
push.test.gamingservices.sbgservices.com
demo-portal.test.ges.sbgservices.com
promotions-spin-service.promotions.sbgservices.com
ui.browser-test.asi11-1.dev.messaging.sbgservices.com
api.test.s6.sbgservices.com
promotions-spin-service.promotions.stage.sbgservices.com
ci.api.ff.sbgservices.com
ui.leahyc-2.dev.messaging.sbgservices.com
*.staging.sbgservices.com
*.loadtest.sweeps.sbgservices.com
rcs.ges.sbgservices.com
ui.jamesr-1.dev.messaging.sbgservices.com
ui.browser-test.asi11-1.dev.messaging.sbgservices.com
chris.test.s6.sbgservices.com
ui.ama04-1.dev.messaging.sbgservices.com
ui.messaging.sbgservices.com
oauth.test.sweeps.sbgservices.com
ui.browser-test.ama04-1.dev.messaging.sbgservices.com
*.prod.sweeps.sbgservices.com
push.gs.sbgservices.com
rc.ges.sbgservices.com
gate.sbgservices.com
ui.iba01-2.dev.messaging.sbgservices.com
api.staging.skysportsquiz.com
*.staging.sbgservices.com
ui.leahyc-2.dev.messaging.sbgservices.com
ui.asi11-1.dev.messaging.sbgservices.com
ui.test.messaging.sbgservices.com
*.test.s6.sbgservices.com
promotions-spin-service.promotions.stage.sbgservices.com
*.prod.itv7.sbgservices.com
oauth.autotest.sweeps.sbgservices.com
oauth.loadtest.sweeps.sbgservices.com
ui.ama04-1.dev.messaging.sbgservices.com
skyvegas.com
ui.iba01-1.dev.messaging.sbgservices.com
oauth.sweeps.sbgservices.com
promotions-spin-service.promotions.sbgservices.com
*.ff.sbgservices.com
api.s6.sbgservices.com
ui.browser-test.iba01-1.dev.messaging.sbgservices.com
promotions-spin-service.promotions.sbgservices.com
rcs.sbgservices.com
demo-portal.test.ges.sbgservices.com
ui.preenn1.dev.messaging.sbgservices.com
promotions-spin-service.promotions.stage.sbgservices.com
sbgservices.com
*.staging.ff.sbgservices.com
ui.leahyc-1.dev.messaging.sbgservices.com
publicgateway.gs.sbgservices.com
ui.messaging.sbgservices.com

Certificate

The complete raw certificate details for ui.ama04-1.dev.messaging.sbgservices.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/ZjDHPC1xKQFv+cQiMY
9NJANcHXewk5KMqvFLxL5kQWJvXYADvNyXbRz0B4G38ytxJqmpzx/+je6SwB81sw
ISSvSK9DCMyqeLO7BMlUcz2tirCn0Cy214x7ZM2mp0ZHWzMgkxj6vQhW3EoMBjTy
usQ6oTEfj1qtBfk3bvo1G8RNB4mJe3tg/ozWMiB4se4TlCGGUw24dn35DXKghdxw
WM1hTz89eJWz2X0tDobHtTkKpJ4opA8XA6Kmv0N4ESty2T4BHs1cRCZLu6jQdMKX
G5sNx8ccY7WClRwIHFAwlak9PFPwnGzhO8dXoLio1/rr1ASu4KmbzqRyoDp2rR/0
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10842487402406677780176371148716337310
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ui.ama04-1.dev.messaging.sbgservices.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19688435182735588642307203864038876175796670068263132450262560197163658886885280511758332399949985729981078499887813347400650163441385573710401644903185241424324277715859558452599609108010652838652812961315803368872833457230171277176649693372854235453480166118840405680401984577523695822039998414719792370466230911835803898379486560676198845232264293846817201101869153122585462222911355479347466886498208598258314160507206971532054987194391322483842150123135116950977854091556626285419582153308167931535677230155393902710514481293739903104988332993767478534246389838528481277295179240703509311678855403625536198538313
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							22c43edeeda78798dd5f9ad08222d59522f0530b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ui.ama04-1.dev.messaging.sbgservices.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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