results.turningtechnologies.com

Issued by Amazon

About this certificate

This digital certificate with serial number 03:e5:c8:a8:95:db:9f:0f:63:1a:72:31:cf:80:0c:98 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=results.turningtechnologies.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e5:c8:a8:95:db:9f:0f:63:1a:72:31:cf:80:0c:98
Serial Number (int): 5180789806590028234127512131768159384
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 5a:75:64:51:e1:41:92:ab:7c:05:0f:53:a1:0d:f1:3b:9a:d1:be:44
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 11:aa:12:43:cb:05:6a:9c:71:74:38:d1:c7:46:d2:57:81:c7:75:b2
Fingerprint (sha256): 0d:96:29:43:db:ae:08:40:69:87:16:a4:ad:a3:75:ec:9c:07:8f:3f:c6:44:c4:a2:e4:14:57:bb:02:50:40:99

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate results.turningtechnologies.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for results.turningtechnologies.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

results.turningtechnologies.com

Other certificates including the domain name turningtechnologies.com

(limited to 100 certificates)
uwgb.turningtechnologies.com
polling.turningtechnologies.com
ithelpdesk.turningtechnologies.com
student.turningtechnologies.com
rebates.turningtechnologies.com
ucmercedtest.turningtechnologies.com
laurentian.turningtechnologies.com
jira-service-management.status.atlassian.com
utm.turningtechnologies.com
jira-service-management.status.atlassian.com
web-store-consumer.turningtechnologies.com
gradebook.dev.turningtechnologies.com
uww.turningtechnologies.com
account-api.turningtechnologies.com
devryu.turningtechnologies.com
rebates.turningtechnologies.com
signup.turningtechnologies.com
polling.turningtechnologies.com
jira-service-management.status.atlassian.com
polling.turningtechnologies.com
polling.turningtechnologies.com
kingstontest.turningtechnologies.com
jira-service-management.status.atlassian.com
content.turningtechnologies.com
auc.turningtechnologies.com
blinn.turningtechnologies.com
oregonstate.turningtechnologies.com
weatherfordtest.turningtechnologies.com
saintmarys.turningtechnologies.com
admin-dojo360.turningtechnologies.com
polling.turningtechnologies.com
jira-service-management.status.atlassian.com
api.turningtechnologies.com
jira-service-management.status.atlassian.com
student.turningtechnologies.com
lms-integration.turningtechnologies.com
wilkes.turningtechnologies.com
assets-dojo360.turningtechnologies.com
ursinus.turningtechnologies.com
store-api.turningtechnologies.com
store.turningtechnologies.com
villanova.turningtechnologies.com
www.turningtechnologies.com
kingstontest.turningtechnologies.com
bolt.turningtechnologies.com
sni.cloudflaressl.com
uthscsa.turningtechnologies.com
user-server-consumer.turningtechnologies.com
uga.turningtechnologies.com
account.turningtechnologies.com
pgnotification.turningtechnologies.com
calu.turningtechnologies.com
turningtechnologies.com
sakai.turningtechnologies.com
go.turningtechnologies.com
knowbly-main-api.turningtechnologies.com
esu.turningtechnologies.com
connect.turningtechnologies.com
briarcliff.turningtechnologies.com
npm.turningtechnologies.com
murraystate.turningtechnologies.com
dartmouth.turningtechnologies.com
www.turningtechnologies.com
content.turningtechnologies.com
admin.turningtechnologies.com
alfredu.turningtechnologies.com
polling.turningtechnologiessg.net
bscc.turningtechnologies.com
uw.turningtechnologies.com
msun.turningtechnologies.com
uncc.turningtechnologies.com
ucdenver.turningtechnologies.com
responseware.turningtechnologies.com
results.turningtechnologies.com
polling.turningtechnologies.com
csun.turningtechnologies.com
neo.turningtechnologies.com
iu.turningtechnologies.com
webreg.turningtechnologies.com
templeu.turningtechnologies.com
store.turningtechnologies.com
jira-service-management.status.atlassian.com
email.turningtechnologies.com
ttcu.turningtechnologies.com
jira-service-management.status.atlassian.com
sni.cloudflaressl.com
jira.turningtechnologies.com
scheduling.turningtechnologies.com
build.turningtechnologies.com
upenn.turningtechnologies.com
content.turningtechnologies.com
umc.turningtechnologies.com
uiowa.turningtechnologies.com
uga.turningtechnologies.com
turningtechnologies.com
sni.cloudflaressl.com
uwm.turningtechnologies.com
uakron.turningtechnologies.com
uiowa.turningtechnologies.com
rebates.turningtechnologies.com

Certificate

The complete raw certificate details for results.turningtechnologies.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7c+Y8x1ik2xVzwS6xb8
Mu3JE8v+KaXjAUKZVWZdrAPfbPquKCbC6r4DsdHM+Iudhn91fEKt9/fzPIluGGFW
0eIfhS4gvWr+JSIXcSH52zdWFoZAcuWVoouwn2018k/dGFKol34YJ2I86npSS89/
yxbShY6XamFlPiouYtOlwX8CmYmeag3dCXvNZQZ8sqlkqCTirVN1qaafpb2tbPuN
afLr8nmYK/0T2vyTUv6Paff6MJRwuX3xfQJhS45aFK9X7G3P2NLNavjeqRXS281w
Lv9M8N8ZEoGFHwEJuhC3geI7ciKSsZjRT3V6NMZN4KI6f2yocYdvxMiLLjFIKMyJ
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5180789806590028234127512131768159384
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-12 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'results.turningtechnologies.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21677110990543000653567328145844824189230217055986323921927108172990765666874133434592975132885688781232111766960463253767255754466426623918009706446560964594225503099670558385240547773337474958459009475782408344293419142559481021526033382064147350267787460797251890037222835360922396745097423267939720822573046933924828173255043518317438783171024960098244821093470496347089073131046572759508617820048398099213313524893150944908047242861327228581259897195426821028138042906940620792684170716231770002815540639430024395991517031213756027504089609224686820902895404301289886358862057212555948085685400523364217318574591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5a756451e14192ab7c050f53a10df13b9ad1be44
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'results.turningtechnologies.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000163f16b1f9a0000040300473045022100fb32b787304dedd1a8b3b4a647a7121c7023a8d20730027701a4914c955801830220437ed532c4f62c39c239beaf695974a9955244b3d88b14b2c5a152dd51c8735b0077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000163f16b1f950000040300483046022100f52fd3d114a96774b5bc5ebd47bcfe13c0f4347ce2e462ff90c7e22cf27eeaca0221009228a971248033be0a698542b7dabba8076b49e04c6f51a039d0c8b26c97eb01
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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