allocator.us-east-1.qa.cam.simplisafe.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0f:08:a8:12:89:63:cb:30:68:a6:67:37:1d:c6:9a:ec was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=allocator.us-east-1.qa.cam.simplisafe.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:08:a8:12:89:63:cb:30:68:a6:67:37:1d:c6:9a:ec
Serial Number (int): 19983367225082444987021338588972751596
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 57:7a:69:b7:27:3e:15:42:d9:9a:00:f5:3a:5c:62:f6:05:4f:21:e7
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): f8:77:f3:f0:5a:bd:fe:d8:ff:cc:79:d6:45:10:fc:35:bc:92:fd:a3
Fingerprint (sha256): 0c:82:65:cd:45:e9:07:ac:fd:6a:ee:09:76:1d:57:d6:b3:be:9c:f6:43:c7:83:2f:ab:23:18:ca:80:97:ad:3b

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate allocator.us-east-1.qa.cam.simplisafe.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for allocator.us-east-1.qa.cam.simplisafe.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

allocator.us-east-1.qa.cam.simplisafe.com

Other certificates including the domain name simplisafe.com

(limited to 100 certificates)
entrypoint-api.eks.ext.app.us-east-1.prd.platform.simplisafe.com
device-logs.metrics.simplisafe.com
temp.alarming.rrms-wholesale.proxy.stg.mon.simplisafe.com
simplisafe.com
mp.simplisafe.com
drupal-dev-k8s.simplisafe.com
otel-collector.eks.int.app.us-east-1.prd.platform.simplisafe.com
uk-top-funnel-8.qa.commerce.simplisafe.com
the-first-order.stg.simplisafe.com
simplisafe.com
wfu3-test.simplisafe.com
googlehome.simplisafe.com
temp.provisioning.rrms-wholesale.proxy.stg.mon.simplisafe.com
qa.simplisafe.com
us-midfunnel-7.qa.commerce.simplisafe.com
xwing.simplisafe.com
activation-prd.stg.webapps.simplisafe.com
payments.us-east-1.prd.commerce.simplisafe.com
provisioning.dev-eu-west-1-cops.proxy.qa.mon.simplisafe.com
entrypoint-api.eks.ext.app.us-east-1.qa.platform.simplisafe.com
dispatch-hub.us-east-1.stg.aser.simplisafe.com
dng.simplisafe.com
us-west-2.pr16.suspensions.qa.platform.simplisafe.com
chronicle.us-east-1.qa.cam.simplisafe.com
simplisafe.com
streamcast.prd.simplisafe.com
suspensions.stg.platform.simplisafe.com
pr85.sscr.qa.platform.simplisafe.com
provisioning.cops.proxy.prd.mon.simplisafe.com
auth.simplisafe.com
ecomm-users-api.eks.int.app.us-east-1.qa.commerce.simplisafe.com
campaign.simplisafe.com
beta.webapp.simplisafe.com
carrier-service.stg.simplisafe.com
lando-ecs.qa.simplisafe.com
global.login.qa.platform.simplisafe.com
mediator.prd.cam.simplisafe.com
support.simplisafe.com
allocator.us-east-1.qa.cam.simplisafe.com
pr91.login.qa.platform.simplisafe.com
consul.qa.simplisafe.com
media.simplisafe.com
ss-suspensions.eks.ext.app.us-east-1.prd.platform.simplisafe.com
speedometer.us-east-1.prd.cam.simplisafe.com
speedometer.us-east-1.qa.cam.simplisafe.com
app.simplisafe.com
stg.auth.simplisafe.com
gha-webhook.prd.devops.simplisafe.com
offers.us-east-1.qa.ops.simplisafe.com
api-alb-test.stg.simplisafe.com
jyn.us-east-1.prd.siren.simplisafe.com
whd.tools.simplisafe.com
go.dng.simplisafe.com
speedometer.eu-west-1.qa.cam.simplisafe.com
campaign.simplisafe.com
alarming.cops.proxy.stg.mon.simplisafe.com
mfa-prd-api.stg.simplisafe.com
promotions-internal.us-east-1.prd.commerce.simplisafe.com
alarm-history.eks.int.app.us-east-1.qa.intmon.simplisafe.com
media.simplisafe.com
comlink.us-east-1.qa.siren.simplisafe.com
simplisafe.com
bb8.dev.simplisafe.com
otel-collector.eks.int.app.us-east-1.prd.platform.simplisafe.com
mp.simplisafe.com
api.simplisafe.com
api.simplisafe.com
*.localdavep.sdc.bi.dev.simplisafe.com
simplisafe.com
temp.alarming.no-op.proxy.stg.mon.simplisafe.com
alarm-dev-pinkoa2.qa.mon.simplisafe.com
bees.simplisafe.com
leia.qa.simplisafe.com
webapp.simplisafe.com
the-first-order.us-east-1.stg.ops.simplisafe.com
cs-api.simplisafe.com
datadip.qa.simplisafe.com
alarm-dev-unkown-user.qa.mon.simplisafe.com
login.qa.platform.simplisafe.com
temp.provisioning.cops.proxy.stg.mon.simplisafe.com
ecomm-users-api.eks.int.app.us-east-1.qa.commerce.simplisafe.com
simplisafe.com
lando.qa.simplisafe.com
carts.us-east-1.stg.commerce.simplisafe.com
api.simplisafe.com
simplisafe.com
webapp.simplisafe.com
alexa.simplisafe.com
media.simplisafe.com
campaign.simplisafe.com
clicks.simplisafe.com
alarm-dev-us-east-1-samhutchinson.qa.mon.simplisafe.com
keymaster.stg.simplisafe.com
us-midfunnel-2.qa.commerce.simplisafe.com
support.simplisafe.com
leia.simplisafe.com
speedometer.eu-west-1.prd.cam.simplisafe.com
beta.webapp.simplisafe.com
stubhubconcourse.com
provisioning.securitas.proxy.stg.mon.simplisafe.com

Certificate

The complete raw certificate details for allocator.us-east-1.qa.cam.simplisafe.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07KbwmlJ2d8gbRwwd5JY
pLkx0hp/T0AczmJJupCjcRp/ZUKdKAgSHKEmUhOSlO71Bd5GvZEgo33xU9b5fJsl
LI7LVX27A1GOQrYQWHiJFsOcXsatmfovxQ8VRQTn2Om4pMBW1fsP+aXvFTXCV02j
uRauI2EQZNFN2TE9J4+EbUcbv40PyKh5qmrJqiCtIkveUR8PSoJbBNDXx7zLdE8h
ekiL2PggUi/Fq8JJe3iKsurtQkV1LfgA55zI/6z41ruYb18JsPv04BBWhfKQUb9j
t2GulP3L1tQqSZzidvr5FdOiLU+sKzLBfccCAKFmirSisPaSCw32i5GOwdxMXrbo
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19983367225082444987021338588972751596
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-21 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'allocator.us-east-1.qa.cam.simplisafe.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26724357449854663391277584030538385955673341887097326017346982824990826072497601564672371849666593176588281622722633908961175953563299522571157802906187333751819438892680548696500796138339671598085367554418932788528214107291396337702768415765304070861719599804807911225346771856402872621240957210732568473686909410444898320353682653240199013917438500225234831538258508939087949628582352821040806061033517560158488040479456996490347892886705590542457250761058508455285894362366870220056552817413582972591695494517537639030163053415492204256916126037168205038818451719730645511526596440138199345236789719648929318365203
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							577a69b7273e1542d99a00f53a5c62f6054f21e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allocator.us-east-1.qa.cam.simplisafe.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0000bc0fbf54f0baabd9d0a8d667b3b1159a421bbc3b2d569e6f69e616371249a30eb52b4437ad3c4c7818ae4dc5b154256054b19259b8eb1550545d0d26345073fc40e6ee39252f916d324aff9d77ecefe8c37dd31f377f1662aaa844ac9527772cfaff2f473493e674e19511777e0742b82e5f019a2000bf6dc3b8776e55f75331947e6d6a6800f641bd7a0a97b88440dae18b819927c69644b7dfd75507af0cea6424f6344dcc41bc8259746ac136381f294d1eeda0fb10661df3a6a4a994c923ea2c3ee61ad5132033e8767b21fe348dd2184046eb3f73bd400441e8e833de7da1c599debd24649f523a674a25433f4971a370aa330fa57ea59c71320cdef0