neo.turningtechnologies.com

Issued by Amazon

About this certificate

This digital certificate with serial number 05:19:00:81:8c:e7:43:89:82:47:5b:eb:f4:b8:a4:ff was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=neo.turningtechnologies.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:19:00:81:8c:e7:43:89:82:47:5b:eb:f4:b8:a4:ff
Serial Number (int): 6775957664428396569796999619324454143
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: f7:2e:64:2b:c8:ea:cd:75:5e:f5:53:6f:89:65:0c:1d:b4:37:54:21
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 82:ee:f2:e0:07:51:05:34:4c:fa:27:92:d7:76:67:14:3e:bc:73:47
Fingerprint (sha256): 0d:cd:fb:01:b5:01:29:dc:36:45:1b:78:93:cb:78:37:35:a4:cf:5c:79:eb:81:35:21:46:7d:58:a2:b3:49:4e

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate neo.turningtechnologies.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for neo.turningtechnologies.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

neo.turningtechnologies.com

Other certificates including the domain name turningtechnologies.com

(limited to 100 certificates)
uwgb.turningtechnologies.com
polling.turningtechnologies.com
ithelpdesk.turningtechnologies.com
student.turningtechnologies.com
rebates.turningtechnologies.com
ucmercedtest.turningtechnologies.com
laurentian.turningtechnologies.com
jira-service-management.status.atlassian.com
utm.turningtechnologies.com
jira-service-management.status.atlassian.com
web-store-consumer.turningtechnologies.com
gradebook.dev.turningtechnologies.com
uww.turningtechnologies.com
account-api.turningtechnologies.com
devryu.turningtechnologies.com
rebates.turningtechnologies.com
signup.turningtechnologies.com
polling.turningtechnologies.com
jira-service-management.status.atlassian.com
polling.turningtechnologies.com
polling.turningtechnologies.com
kingstontest.turningtechnologies.com
jira-service-management.status.atlassian.com
content.turningtechnologies.com
auc.turningtechnologies.com
blinn.turningtechnologies.com
oregonstate.turningtechnologies.com
weatherfordtest.turningtechnologies.com
saintmarys.turningtechnologies.com
admin-dojo360.turningtechnologies.com
polling.turningtechnologies.com
jira-service-management.status.atlassian.com
api.turningtechnologies.com
jira-service-management.status.atlassian.com
student.turningtechnologies.com
lms-integration.turningtechnologies.com
wilkes.turningtechnologies.com
assets-dojo360.turningtechnologies.com
ursinus.turningtechnologies.com
store-api.turningtechnologies.com
store.turningtechnologies.com
villanova.turningtechnologies.com
www.turningtechnologies.com
kingstontest.turningtechnologies.com
bolt.turningtechnologies.com
sni.cloudflaressl.com
uthscsa.turningtechnologies.com
user-server-consumer.turningtechnologies.com
uga.turningtechnologies.com
account.turningtechnologies.com
pgnotification.turningtechnologies.com
calu.turningtechnologies.com
turningtechnologies.com
sakai.turningtechnologies.com
go.turningtechnologies.com
knowbly-main-api.turningtechnologies.com
esu.turningtechnologies.com
connect.turningtechnologies.com
briarcliff.turningtechnologies.com
npm.turningtechnologies.com
murraystate.turningtechnologies.com
dartmouth.turningtechnologies.com
www.turningtechnologies.com
content.turningtechnologies.com
admin.turningtechnologies.com
alfredu.turningtechnologies.com
polling.turningtechnologiessg.net
bscc.turningtechnologies.com
uw.turningtechnologies.com
msun.turningtechnologies.com
uncc.turningtechnologies.com
ucdenver.turningtechnologies.com
responseware.turningtechnologies.com
results.turningtechnologies.com
polling.turningtechnologies.com
csun.turningtechnologies.com
neo.turningtechnologies.com
iu.turningtechnologies.com
webreg.turningtechnologies.com
templeu.turningtechnologies.com
store.turningtechnologies.com
jira-service-management.status.atlassian.com
email.turningtechnologies.com
ttcu.turningtechnologies.com
jira-service-management.status.atlassian.com
sni.cloudflaressl.com
jira.turningtechnologies.com
scheduling.turningtechnologies.com
build.turningtechnologies.com
upenn.turningtechnologies.com
content.turningtechnologies.com
umc.turningtechnologies.com
uiowa.turningtechnologies.com
uga.turningtechnologies.com
turningtechnologies.com
sni.cloudflaressl.com
uwm.turningtechnologies.com
uakron.turningtechnologies.com
uiowa.turningtechnologies.com
rebates.turningtechnologies.com

Certificate

The complete raw certificate details for neo.turningtechnologies.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7vo+2iasDtsx2ratClpJ
PxOylkndFBdvZolJmwQfwZwJqOYcyFm3HwvWS2WorYKODUdzPN+A0OgjEmeJpF+m
gRm9QoVr9rqR/nOwfj7IrRXwJC+jyHYrbAUAx+jjsqhgHm4GVFO+2FsULBct+0Hb
Ucvvzo0L/QVy2QYefb3eilxx2NVafU+7O571XHxz0iHVGO/iCId6Q9xtnyriBde4
lk6G7fjNm7Yv9hJL4X8/Ldz51scIT6xGwDsJrTTK7xOkyJhAXeWzMFj++YRWgnhx
UzFP+cZ2Jro1ttj5VE6MEYy8On2Otqp6lP3WejSZ2CJINCbkC4HfoayzJiImktC4
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6775957664428396569796999619324454143
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-30 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'neo.turningtechnologies.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30168117245176256773475830390817977237034877016030825736110406800418621893537210966991468444661181252863827377144750647263840440653316598287078138686275880348074641052462032149432071014761438508847095416642591031804923520939484436197492880399079587485185036929123752670547095951875694085172595695541374824225906716817356290600003438992433407356563190903058953180898875119641890222386138944936392992526990349952737574681065919525813629142080787344299897060778930375839282653582284736502366918334011597083491223761066494858629999001660706107921396791901918040456831217654327961875205597876733864337633467273590990747691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f72e642bc8eacd755ef5536f89650c1db4375421
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neo.turningtechnologies.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001ff9868c4353d3ce2500c8e3aa5301c083edf80f4376d1ae75247b68b0b76a8cbcca037b3d25ce9f8c7578016fbf33e3a9c5b0664c3ac2af99711d60947c66bae668d8703612cc21bfa029a9f11373395f8f02e0be8643772eb5bdebeca05fa376d4c5ed4643399e0e006cc979206f7023543be7d8407633b8a2eaa57b6824c159608a0deb3e10f73f0126ca5f7b43c31375a93ad5ec9783c919dfad6941542c2aa1551d20d34be8fc9356509b59d5ae43ae7268fbda08d5cf0f48c5bdb99659109def1d9d15e8d5e7ab15efdc4d422aa15b66e20812c837d81b3e15756477a0149036d81f1ac8b55173c6006264688f5c885d6afb09b37d6ea119e3fe052e62