unai-test-dev.nonprod.my.oldmutual.co.za

Issued by Amazon

About this certificate

This digital certificate with serial number 07:d5:40:03:57:0b:dc:62:e6:4c:e1:f5:44:40:da:a3 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=unai-test-dev.nonprod.my.oldmutual.co.za

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:d5:40:03:57:0b:dc:62:e6:4c:e1:f5:44:40:da:a3
Serial Number (int): 10411853540200985428378610160743013027
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: e7:0f:01:3d:71:14:7c:57:2c:7f:f4:50:ca:1d:76:e0:f3:27:80:6d
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): d7:49:67:c4:07:54:2b:bb:f8:ef:85:dd:75:51:a0:65:77:e2:fa:33
Fingerprint (sha256): 0c:a0:80:f2:ba:0a:e0:3d:43:ee:df:f7:4a:b8:d8:7f:7f:65:26:c1:ea:d6:68:b4:6d:0b:9e:9f:76:82:c1:0f

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate unai-test-dev.nonprod.my.oldmutual.co.za

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for unai-test-dev.nonprod.my.oldmutual.co.za

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

unai-test-dev.nonprod.my.oldmutual.co.za

Other certificates including the domain name oldmutual.co.za

(limited to 100 certificates)
unai-test.nonprod.my.oldmutual.co.za
secure.finrisc.oldmutual.co.za
static-dev.nonprod.my.oldmutual.co.za
*.extranet.oldmutual.co.za
secure.mycorporatebusiness.oldmutual.co.za
static-dev.nonprod.my.oldmutual.co.za
momapi.dev.digital.oldmutual.co.za
secure.rfa.oldmutual.co.za
secure.fsa.oldmutual.co.za
secure.gsservice.oldmutual.co.za
*.demo.nonprod.my.oldmutual.co.za
www.sander-catering.cateringportal.io
nomtxt.com
npw-auto-test-qa.nonprod.digitalplatform.oldmutual.co.za
secure.cis.oldmutual.co.za
*.extranet.oldmutual.co.za
*.nonprod.my.oldmutual.co.za
pdrest.oldmutual.co.za
unai-test-east.nonprod.my.oldmutual.co.za
unai-test.nonprod.my.oldmutual.co.za
am.pp.oldmutual.co.za
secure.eb.oldmutual.co.za
secure.dcc.oldmutual.co.za
secure.fc.oldmutual.co.za
secure.channelbiuportal.oldmutual.co.za
dev.contrastpharma.com
secure.omkonecttraining.oldmutual.co.za
unai-test.nonprod.my.oldmutual.co.za
secure.eb.oldmutual.co.za
secure.myclient.oldmutual.co.za
pizza.notprometey.pro
*.extranet.oldmutual.co.za
vacancies.oldmutual.co.za
sts.oldmutual.co.za
my.qa.oldmutual.co.za
secure.dcc.oldmutual.co.za
sso.dev.oldmutual.co.za
secure.adviserweb.training.oldmutual.co.za
secure.productsolutions.oldmutual.co.za
secure.adviserweb.pp.oldmutual.co.za
secure.rewards.oldmutual.co.za
secure.myportfolio.oldmutual.co.za
secure.fc.oldmutual.co.za
sftpweb.oldmutual.co.za
secure.myportfolio.oldmutual.co.za
secure.dcc.oldmutual.co.za
www.nanoelectricim.com
secure.rumba.oldmutual.co.za
iopservices.oldmutual.co.za
secure.omkonect.training.oldmutual.co.za
secure.omkonect.oldmutual.co.za
secure.omem.oldmutual.co.za
rms.oldmutual.co.za
static.my.oldmutual.co.za
api.p1l.oldmutual.co.za
secure.omkonect.oldmutual.co.za
secure.pfmisportal.pp.oldmutual.co.za
secure.finrisc.oldmutual.co.za
iwyze.oldmutual.co.za
unai-test-dev.nonprod.my.oldmutual.co.za
secure.rocs.oldmutual.co.za
frontoffice.oldmutual.co.za
roombooking.oldmutual.co.za
momapi.digital.oldmutual.co.za
Secure.mycorporatebusiness.qa.oldmutual.co.za
secure.fsa.oldmutual.co.za
secure.unittrusts.oldmutual.co.za
secure.gateway.oldmutual.co.za
secsftp.oldmutual.co.za
secure.unittrusts.oldmutual.co.za
secure.omem.oldmutual.co.za
secure.rafpfops.oldmutual.co.za
secure.isc.oldmutual.co.za
secure.omkonecttraining.oldmutual.co.za
secure.rocs.oldmutual.co.za
*.crm.oldmutual.co.za
secure.hrms.oldmutual.co.za
api.magnify.qa.oldmutual.co.za
sftp.oldmutual.co.za
secure.finrisc.oldmutual.co.za
calculators.nonprod.my.oldmutual.co.za
secure.productsolutions.oldmutual.co.za
secure.isc.oldmutual.co.za
secure.fc.oldmutual.co.za
secure.mfc.oldmutual.co.za
new-public-web-qa.nonprod.digitalplatform.oldmutual.co.za
portal.oldmutual.co.za
new-public-web-anch.digitalplatform.oldmutual.co.za
secure.mfc.oldmutual.co.za
secure.omut.oldmutual.co.za
secure.mfc.oldmutual.co.za
test.oldmutual.co.za
opensearch.digital.oldmutual.co.za
secure.adviserweb.oldmutual.co.za
iopservices.oldmutual.co.za
Secure.omwealth.oldmutual.co.za
secure.myservice.oldmutual.co.za
assets-qa.nonprod.my.oldmutual.co.za
*.nonprod.my.oldmutual.co.za
api.mfcwizzit.qa.oldmutual.co.za

Certificate

The complete raw certificate details for unai-test-dev.nonprod.my.oldmutual.co.za in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6grg4+0ge8wC5tmRs77o
aEFn26JYmzHxPFwG7owU6uQKTHq1W1Vzm9yMlIz2qA55vGuy7mBcxXPdPEEvHbIW
BARV1qbTTK3njoIIJD+r5bOKzBm3diKFLT+d/QuANIGlZn5Ivw1N9EXzSDDtQczo
ir8HhiLahUEvgNJoRrgbdLpFym8FBxAA8432Yr3rf3mhEKbHEhr6xdrnwEqjTX9n
RPuxcS+LHJUpqJbLZbqlu9vGlRkGDcmYQr8vjD3D0X0oBYNRof29jsVJDsJr8hhH
Vo4m4J41BhJmg2JNosG0e4wj15bqCNGVKHfqBUYEgBJ46N1vFSbVRhYEfazWfUK1
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10411853540200985428378610160743013027
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-28 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'unai-test-dev.nonprod.my.oldmutual.co.za'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29545127739432926000721101267506044450942998502526913096852502347254465150501163667722590151768856116715773693207692732846738824849327578194933875131209190147789011760990254638753617443044914992697753910653555634826656848290212188605194780139832786642197264967794202625631945692626465278944623487685773334985799607297025781136074722499013406506102277471299242490008291778725984463354384804446710961897634813594686625620987302170497133911894443772940382008259808738504344606786157054830745361283219319001056601874569316567108039324296049575550568790065668132970355246465972803088912365916057145222785935893046021502387
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e70f013d71147c572c7ff450ca1d76e0f327806d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'unai-test-dev.nonprod.my.oldmutual.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00160e096ae7f7815f262020ff11d1226be8f5dae382dbc0fd2cedf6000297c22d4aa78a34731d0069ee852d9896385c6cb4b384f4399cdec5d75e1275e4c84963bf10e04d028a01b4e2db7f8a207b1da4c48098f39ba3d5df4f5123ca2bc99b49e87ee900e2e08f96d187666a3076752e94bfc33ae4a8602db42ee93cbc1191c97791a367fe3349fba7bd166cd1cae27e66ce25e7bd4c95d24063c0c72aa992356d76a39280034efe07ef9ff229662e9464dd4b39b9b23c4f20ae893b8be71b4ef789e7357f8f6ac35ac7dae033f00669fcd125903284b5cf61b8f5ed7ae6d116459ff1eea9090fbc7edd96f94639de137f8286abcbb19a52cdda6ef2b29674af