*.jazznetworks.com

Issued by Amazon

About this certificate

This digital certificate with serial number 03:3c:fb:12:a8:9e:af:67:a6:c4:65:67:56:ff:47:93 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.jazznetworks.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3c:fb:12:a8:9e:af:67:a6:c4:65:67:56:ff:47:93
Serial Number (int): 4304314161969599358108804340068075411
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: fc:85:29:31:d7:76:88:27:f2:84:a1:38:cc:10:bb:75:84:55:27:ad
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 80:c0:39:c8:19:8d:a7:1f:d2:31:f4:90:0f:b9:0e:78:c7:99:f4:50
Fingerprint (sha256): 0c:0d:5b:f5:48:0a:6e:ba:ef:3e:9d:d0:ae:c9:b5:6b:71:c4:65:f3:ff:2b:b3:52:86:f5:27:2c:a8:06:ef:2d

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.jazznetworks.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.jazznetworks.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.jazznetworks.com

Other certificates including the domain name jazznetworks.com

(limited to 100 certificates)
kvy-eu2-status.kinvey.com
*.dev.jazznetworks.com
overthebunker.com
reveal.avasecurity.com
reveal.avasecurity.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
www.cakeitawaymerrylands.com
jazznetworks.com
partner.jazznetworks.com
demo.jazznetworks.com
*.jazznetworks.com
kvy-eu2-status.kinvey.com
info.jazznetworks.com
kvy-eu2-status.kinvey.com
info.jazznetworks.com
kvy-eu2-status.kinvey.com
lambda.dev.jazznetworks.com
kvy-eu2-status.kinvey.com
www.swingdata.app
jazznetworks.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
100s.tv
support.jazznetworks.com
seeticketstatus.com
jazznetworks.com
cloud.jazznetworks.com
kvy-eu2-status.kinvey.com
support.jazznetworks.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
www.tuckermillerdev.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
support.ava.uk
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
federal.jazznetworks.com
info.jazznetworks.com
kvy-eu2-status.kinvey.com
support.jazznetworks.com
kvy-eu2-status.kinvey.com
demo.jazznetworks.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
cloud.jazznetworks.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
*.dev.jazznetworks.com
partner.jazznetworks.com
*.jazznetworks.com
stage.brv.dev
donedigital.com.au
kvy-eu2-status.kinvey.com
jazznetworks.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
events.jazznetworks.com
www.thebiermans.net
gcloud.jazznetworks.com
bignmore.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
www.casanova-ai.com
support.jazznetworks.com
*.ds.jazznetworks.com
lambda.dev.jazznetworks.com
bridge.skey.network
events.jazznetworks.com
kvy-eu2-status.kinvey.com
bridge.skey.network
kvy-eu2-status.kinvey.com
www.tuckermillerdev.com
kvy-eu2-status.kinvey.com
jchenderson.com
etos.management
*.cloud.jazznetworks.com
jsg.jazznetworks.com
support.jazznetworks.com
kvy-eu2-status.kinvey.com
demo.jazznetworks.com
cloud.jazznetworks.com
reveal.avasecurity.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
kvy-eu2-status.kinvey.com
partner.jazznetworks.com

Certificate

The complete raw certificate details for *.jazznetworks.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzAuS+7HKVZmluT2Md44
WWpkGbwVj7IP+qRL6n4zUEv/wBB2Zviddw4C5EP3tCdWL4jUhz5Tn0eGWRYlaptq
5g89Ud5+6xRx7NJ2JB4K8wN7ADuFskQq9IhLlKowsTGcDCVz2Wy4b3ne9Lo++fsY
EzK8ZuM91SU+eIG4qcgETONGdkqQZ9ToGeAsir9+KdKy+9KBLoc5MWUo7/tUQCVo
ByYh4y/uAQpX3cZUd59RlTBft7Yq1C40g09BRLmoWiREnVOE0s8LbgQY/VXWpR3d
mdaLwMgPukpacZeYRSYmkqcJ0YdfOMQZrn9eMfxKuYak4Ok4kqCYD3bK+e1L/Y9Z
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4304314161969599358108804340068075411
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.jazznetworks.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19085742910612070229005740989244576167160525564678701992724827742515131258173370211497252112144831152525566670243085262868143780048272657224731138047970616503921733714320828230806814393830159925941865545589350274864199090755640631612604102943730751864670514352717068089264662206964409096560645760589173686273581865417695173920730834915286058635062662795880866057467069829190160774808728481434678600551699893995193091092079507282891394990099578918871700924628036502177893409510046735901686769826448283007652910449133369681798383367712799409924519710483631056262220251504868114525319602523706623949652667459031937276223
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc852931d7768827f284a138cc10bb75845527ad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jazznetworks.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000169b506bf2e0000040300483046022100e976c29eaf3d99629ef8d9286e7af7904f0774a209914c5f3ad10de342def5da022100fefdf50abff34d0cdbdb3d8ea657da16a6fbcf1de602c195a544be047050ba180077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000169b506c0430000040300483046022100d7c0af7da8a32166b7594f13803d5073a0365f97826400e25c96a2c05239acd6022100cdf2a87e58494f46df248977ab997d0821dba67eb03ef34f35c6b6d76112f9b3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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