*.joker.stage.mintpro.in

Issued by Amazon

About this certificate

This digital certificate with serial number 03:02:54:dc:35:e5:ff:d4:d7:cf:cb:91:7a:8e:58:8d was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.joker.stage.mintpro.in

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:02:54:dc:35:e5:ff:d4:d7:cf:cb:91:7a:8e:58:8d
Serial Number (int): 3999789750355034815375150295672576141
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 03:61:71:d1:41:51:05:1e:7e:fb:d8:26:59:bd:f9:f6:d2:a9:14:30
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 35:c8:05:cc:d3:f1:e6:5a:6f:e1:56:fb:53:91:5c:b8:37:42:a7:f0
Fingerprint (sha256): 0d:21:d2:4a:84:3d:fa:b2:7b:03:d2:c6:fb:af:eb:9a:46:c4:ae:92:c2:f2:7d:e7:f8:7a:45:30:87:f6:09:0d

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.joker.stage.mintpro.in

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.joker.stage.mintpro.in

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.joker.stage.mintpro.in

Other certificates including the domain name mintpro.in

(limited to 100 certificates)
*.axisbank.ct.stage.mintpro.in
*.axisbank.uatone.stage.mintpro.in
*.arrow.getquote.bajajcapitalinsurance.com
*.axisbank.ironman.stage.mintpro.in
*.kube.stage.mintpro.in
*.nova.stage.mintpro.in
*.thor.stage.mintpro.in
*.axisbank.bane.stage.mintpro.in
*.stagesecurity.stage.mintpro.in
*.sre.stage.mintpro.in
*.axisbank.leo.stage.mintpro.in
*.lifeuat.stage.mintpro.in
*.axisbank.leo.stage.mintpro.in
learning.mintpro.in
*.ajooba.stage.mintpro.in
*.broker.stage.mintpro.in
*.neon.stage.mintpro.in
*.groot.stage.mintpro.in
*.axisbank.procedure.stage.mintpro.in
www.mintpro.in
*.posp.stage.mintpro.in
*.spring.stage.mintpro.in
*.cyborg.stage.mintpro.in
*.golmaal.hdfcbankinsurance.mintpro.in
*.axisbank.spidy.stage.mintpro.in
*.axisbank.joker.stage.mintpro.in
*.axisbank.mocha.stage.mintpro.in
*.mintpro.in
*.axisbank.panther.stage.mintpro.in
*.axisbank.checkinst2.stage.mintpro.in
*.axisbank.yesbankuat.stage.mintpro.in
*.aquaman.stage.mintpro.in
*.mf.stage.mintpro.in
*.joker.stage.mintpro.in
*.axisbank.joy.stage.mintpro.in
hdfc.mintpro.in
*.axisbank.lifeuat.stage.mintpro.in
*.flash.hdfcbankinsurance.mintpro.in
*.hdfc.stage.mintpro.in
*.batman.stage.mintpro.in
*.devops.stage.mintpro.in
*.axisbank.mintpro.in
*.hawkeye.stage.mintpro.in
mintpro.in
*.axisbank.ironman.stage.mintpro.in
*.ronann.stage.mintpro.in
*.lifeuat.hdfcbankinsurance.mintpro.in
*.thor.stage.mintpro.in
*.panther.stage.mintpro.in
*.axisbank.joker.stage.mintpro.in
mintpro.in
*.albert.stage.mintpro.in
*.hdfcbankinsurance.mintpro.in
*.axisbank.sanity.stage.mintpro.in
*.batman.stage.mintpro.in
*.k8suat.mintpro.in
*.axisbank.preprod.stage.mintpro.in
*.wsa.planturtle.com
*.sanity.stage.mintpro.in
*.ajooba.getquote.bajajcapitalinsurance.com
*.thor.hdfcbankinsurance.mintpro.in
*.ironman.stage.mintpro.in
*.robin.stage.mintpro.in
*.aquaman.getquote.bajajcapitalinsurance.com
*.axisbank.spidy.stage.mintpro.in
*.axisbank.bank-uat.stage.mintpro.in
*.uri.hdfcbankinsurance.mintpro.in
*.mintpro.in
*.sanity.stage.mintpro.in
*.upgrade.stage.mintpro.in
*.hdfcbankinsurance.mintpro.in
*.axisbank.security.stage.mintpro.in
*.thanos.stage.mintpro.in
*.axisbank.korg.stage.mintpro.in
*.lifeuat.stage.mintpro.in
*.axisbank.ronan.stage.mintpro.in
*.flash.stage.mintpro.in
*.getquote.stage.mintpro.in
*.qacommon.stage.mintpro.in
*.pixel.stage.mintpro.in
*.prismd.stage.mintpro.in
*.axisbank.shazam.stage.mintpro.in
*.hdfcbank.k8suat.mintpro.in
api.learning.mintpro.in
*.axisbank.cd.stage.mintpro.in
*.sas.stage.mintpro.in
*.ironman.stage.mintpro.in
*.hdfcbank.k8suat.mintpro.in
*.aquaman.getquote.bajajcapitalinsurance.com
*.shazam.stage.mintpro.in
*.axisbank.brokertest.stage.mintpro.in
*.axisbank.ronann.stage.mintpro.in
*.mintpro.in
*.axisbank.ironman.stage.mintpro.in
*.shazam.stage.mintpro.in
*.bankuat.stage.mintpro.in
*.bandhanbank.mintpro.in
*.axisbank.pprod.stage.mintpro.in
*.axisbank.korg.stage.mintpro.in
*.mintpro.in

Certificate

The complete raw certificate details for *.joker.stage.mintpro.in in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeCGUuaCIi5x+xp6f4IV
C/fmb9KSRjcGUC0vado1ia9lVx+Dr3W2+ULhSVTE7yWqHzPb9ie1kvgu6rjCQbhz
+A8rgphvlYnISSDJNWcaxCIFhzrbWrXVNnQPiErnnVFsD5CSRDlNw5HN0WBFM9Qu
hrowCZM8RS4TO3gpy+tkwdp+wTSVwrNSOHRJdnwxsJJR0GLHl6nuqvMVVEGTcPfj
juW7/PQdEiMDjc8rHYPk3p3O4XZnTA59n/BZ+L3Pkn3wP/0K9hFjFnSQU2euGofF
gh0eAe3el9hXcWl4VOif/FutgP6IF9bwXxB3XnbrKRuAGe4ICB0oVqW2vbWbNDYc
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3999789750355034815375150295672576141
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.joker.stage.mintpro.in'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21444990796535656974741513953937633419973642625535801517412119031200424774602569864850180249232319232918768611808146195774850714381579648773357652007423103028700324903426373097428321898837497424220938976341031048457825184254564647188532486930461440422487038896303517074074779811766657000797436553048183296761884464581220356637697372645784982084551412522782016224688403955593564046899124112673944338589830895319524976878066688787451351636936983969548564437941106492328080233704282855217199329202137990761790963036906516598840407645557127395956316866591861286010972485291602171087190834208377621665354254963299900071043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							036171d14151051e7efbd82659bdf9f6d2a91430
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.joker.stage.mintpro.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016caf7bab670000040300473045022100c735f716c35efe2b7c48f3be95bfc10b85dcb10e96a162a8d96e0c19e5ca7ebe02200e105d99777baeca0aacc034d51b8df18df442dbc881eadf21641eba223d8eb60077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016caf7babb900000403004830460221008ad04f22d7b412eaf6b8ac5b6f531c73f41f462342a63457d2f82ab02ceb236d022100ff1b7504dac99993c289594c0a0f65b18a3ff2b748e3ec8d0e51d9f534c36f85
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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