nduseragentms-us-east-1.ndsopew.nudatasecurity.com

Issued by Amazon

About this certificate

This digital certificate with serial number 02:d5:58:c3:72:3d:4c:f0:e7:a1:19:c3:a5:b3:24:4c was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nduseragentms-us-east-1.ndsopew.nudatasecurity.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:d5:58:c3:72:3d:4c:f0:e7:a1:19:c3:a5:b3:24:4c
Serial Number (int): 3766215559329960597619503957579867212
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 5d:a5:2f:0d:f8:69:ee:5c:2a:b5:c2:e2:63:56:f4:96:82:a9:be:c5
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): fb:a6:72:8c:7a:f2:9c:7a:00:a9:7d:f0:8d:c8:bb:4f:53:81:1d:72
Fingerprint (sha256): 0d:08:5c:dd:f1:14:12:a5:10:f9:5e:11:5a:6b:17:40:33:4e:ab:ae:78:0e:6c:fe:ae:23:f6:7c:2c:99:00:34

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate nduseragentms-us-east-1.ndsopew.nudatasecurity.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nduseragentms-us-east-1.ndsopew.nudatasecurity.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nduseragentms-us-east-1.ndsopew.nudatasecurity.com

Other certificates including the domain name nudatasecurity.com

(limited to 100 certificates)
ndsdms-ecs.ndsprod.nudatasecurity.com
service-ice.idcx-qa-aion.nudatasecurity.com
api-us-east-1.nd.nudatasecurity.com
ndcdms-penetration-us-east-1.ndsdev.nudatasecurity.com
ndcdms-mtf-us-east-1.lpstg.nudatasecurity.com
ndelms-us-west-2.ndsuat.nudatasecurity.com
api-us-east-1.nd-mtf.nudatasecurity.com
sip.ca1.hostedlync.com
ssl003.insnw.net
sip.ca1.hostedlync.com
ndcdms-mtf-us-east-1.ndsprod.nudatasecurity.com
service-ops-us-east-1.aion-dev.nudatasecurity.com
beapi-eu-west-1.ndsopob.nudatasecurity.com
api.aion-dev.nudatasecurity.com
service-config-dev-us-east-1.p2.lpstg.nudatasecurity.com
ndsoa-us-east-1.ndsopew.nudatasecurity.com
jenkins-us-east-1.nucaptcha.nudatasecurity.com
dashboard-us-east-1.ndsopew.nudatasecurity.com
ssl003.insnw.net
api.td-dev-aion.nudatasecurity.com
api-wfc-stg-ga.nd.nudatasecurity.com
jenkins-us-west-2.ndsopck.nudatasecurity.com
beapi.us-east-1.ndsuat.nudatasecurity.com
service-demo-aion-yt.aion-dev.nudatasecurity.com
beapi-us-west-2.ndsopck.nudatasecurity.com
dashboard.us-east-2.ndcc123.ndsonica.nudatasecurity.com
ndapi-us-east-1.ndsprod.nudatasecurity.com
sip.ca1.hostedlync.com
ndsoa-us-east-1.ndsqa.nudatasecurity.com
*.nd.nudatasecurity.com
ndcounterms-us-west-2.ndsopck.nudatasecurity.com
ndsoa-us-east-1.ndsprod.nudatasecurity.com
ssl003.insnw.net
nduseragentms-us-east-1.ndsdev.nudatasecurity.com
api-eu-west-1.ato-dev-aion.nudatasecurity.com
saad3.us-east-2.ndcc123.ndsonica.nudatasecurity.com
mitsuo-iam-us-east-1.p2.lpstg.nudatasecurity.com
ndudidms-us-east-1.lpstg.nudatasecurity.com
bogdan-tst-service-demo.p2.lpstg.nudatasecurity.com
key1-us-east-1.ndcc123.ndsonica.nudatasecurity.com
api-ap-southeast-1.automation-dev-aion.nudatasecurity.com
service-ops.aion-dev.nudatasecurity.com
mitsuo-iam.p2.lpstg.nudatasecurity.com
nudevice-us-east-1.p2.lpstg.nudatasecurity.com
*.ndsopck.nudatasecurity.com
api-us-west-2.nd-mtf.lpstg.nudatasecurity.com
service-config-dev-test.p2.lpstg.nudatasecurity.com
nudevice-test.p2.lpstg.nudatasecurity.com
ssl003.insnw.net
sip.ca1.hostedlync.com
ndsessionms-us-east-1.ndsqa.nudatasecurity.com
dashboard-us-east-1.ndsopew.nudatasecurity.com
ssl003.insnw.net
*.nudatasecurity.com
key-internal-us-west-2.ndsprod.nudatasecurity.com
nduseragentms-eu-west-1.ndsopob.nudatasecurity.com
beapi-eu-west-1.nucaptcha.nudatasecurity.com
api.automation-dev-aion.nudatasecurity.com
console.aion.nudatasecurity.com
ssl003.insnw.net
ndcounterms-us-east-1.ndcc123.ndsonica.nudatasecurity.com
ndqa-us-east-1.ndsopew.nudatasecurity.com
beapi-ap-southeast-2.ndsprod.nudatasecurity.com
saad5.us-east-2.ndcc123.ndsonica.nudatasecurity.com
sun-serv-iam.p2.lpstg.nudatasecurity.com
nudevice.p2.lpstg.nudatasecurity.com
ndcdms-dev-us-east-1.lpstg.nudatasecurity.com
service-ice.idcx-qa-aion.nudatasecurity.com
*.nd.nudatasecurity.com
service-demo-aion-us-west-2.aion-dev.nudatasecurity.com
ndpe-01.nd.nudatasecurity.com
sip.ca1.hostedlync.com
api-us-east-1-us-east-1.aion-qa.nudatasecurity.com
ndsoa-us-east-1.lpstg.nudatasecurity.com
key-internal-us-east-1.lpstg.nudatasecurity.com
ndcaptchams-us-west-2.ndsuat.nudatasecurity.com
api.ato-dev-aion.nudatasecurity.com
ndqa-us-east-1.ndsuat.nudatasecurity.com
beapi-us-east-1.ndsopma.nudatasecurity.com
api-eu-west-1.td-dev-aion.nudatasecurity.com
jenkins.intra.nudatasecurity.com
ndcdms-dev-us-east-1.ndsqa.nudatasecurity.com
nnl-admin-us-east-1.fido-dev.nudatasecurity.com
ndpe-01.nd.nudatasecurity.com
api-us-east-1.nd.nudatasecurity.com
service-iam.p2.lpstg.nudatasecurity.com
ndsdms-ecs.ndsdev.nudatasecurity.com
duo.intra.nudatasecurity.com
ssl003.insnw.net
key1-us-west-2.ndcc123.ndsonica.nudatasecurity.com
service-config-dev-test.p2.lpstg.nudatasecurity.com
asgard.ndsopck.nudatasecurity.com
*.nd.nudatasecurity.com
jenkins-us-west-2.ndsopck.nudatasecurity.com
ssl003.insnw.net
saad800.us-east-2.ndcc123.ndsonica.nudatasecurity.com
ssl003.insnw.net
api-wfc.nd.nudatasecurity.com
ndapi-us-west-2.ndsprod.nudatasecurity.com
service-config-dev-test-us-east-1.p2.lpstg.nudatasecurity.com

Certificate

The complete raw certificate details for nduseragentms-us-east-1.ndsopew.nudatasecurity.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BQQeEXb0tkRTwENkEtn
a+cmNY21Kc3SPGZ0nqD13xVy+pAD1yw66/IRHDg7aji9nxDw39ikeQhzK0SqlIEb
MRuNMYRePVo9SB94Ie78Ugdp7/DSfe1K4FYS8uEn5dV3LU+4qwGy3zNIvIVv8gum
IVQL6uQXSrRcjXb4Q1xfuIBkp/DmwbdQdEZl9D5dLNWTvhw49fbNBrsqF3PM0YfL
R8eGnpGYPVpDMfxZZLiMjj4GPuz6tpxQilTJfrG1BmujOWdlD7FTh+kNeQcAnjmm
zkaf0E80b0EuoUemgX+SZh1amVqfa6033yFacfjsjDuAFjLWZ9b87fv9NjB8nM1K
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3766215559329960597619503957579867212
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nduseragentms-us-east-1.ndsopew.nudatasecurity.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26267461525394355747011539234839038288764930817082177058691893699095053891368321691281924611706155453267587187078706233079198233353361557230509914490188146121951640192328822887344237540681327764365922092465459179445868961590553855531844033299748585316976500333412145568522961979011146897609298135605082344761222441494574188965607649119732083738457030362458080899270569444755269031218683391007611101716862484758831363925610893081485802511945270058615946670774954535257623893998272118841635342689243458048744069944301129685188373653993148553360501548297704243594629902933018912256837186182797046532867599793949638478341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5da52f0df869ee5c2ab5c2e26356f49682a9bec5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nduseragentms-us-east-1.ndsopew.nudatasecurity.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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