dev.geocoder.spsc.io

Issued by Amazon

About this certificate

This digital certificate with serial number 05:a1:5d:72:34:4b:d9:41:f6:95:5e:3d:a3:56:2b:c3 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dev.geocoder.spsc.io

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:a1:5d:72:34:4b:d9:41:f6:95:5e:3d:a3:56:2b:c3
Serial Number (int): 7483995085437268761710757758396410819
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 05:af:74:96:43:ea:16:80:07:2f:72:c4:57:69:6c:ac:25:79:14:3d
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 80:fc:ea:59:f7:a3:78:15:92:8b:7f:42:25:46:0a:d7:7f:99:41:76
Fingerprint (sha256): 0d:eb:d8:98:19:da:65:33:19:b8:b3:f7:c4:8d:92:f9:74:f6:b0:7f:5b:f2:70:64:83:65:7b:c4:77:67:48:e0

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate dev.geocoder.spsc.io

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev.geocoder.spsc.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.geocoder.spsc.io

Other certificates including the domain name spsc.io

(limited to 100 certificates)
*.prod.spsc.io
cdn.prod.spsc.io
stage.annotation.spsc.io
api.pa-supplier-configuration.spsapps.net
locales.spsc.io
*.dev.spsc.io
test.id.spsc.io
*.sourcing.prod.spsc.io
*.location.spsc.io
*.xtl.compilation.spsc.io
cdn.dev.spsc.io
auth.spsc.io
*.item.spsc.io
script-service-config-api.spsc.io
dev.devcenter.spsc.io
cdn.stage.spsc.io
routing-api.test.spsc.io
stage.notify.spsc.io
routing-api.spsc.io
labelui.spsc.io
filebroker-config-api.preprod.spsc.io
apiv2.fulfillment.spsc.io
id.spsc.io
s3-outbound-service-api.dev.spsc.io
cdn.test.spsc.io
stage.labelui.spsc.io
*.stage.spsc.io
*.test.spsc.io
geocoder.spsc.io
cdn.prod.spsc.io
*.fulfillment.spsc.io
*.test.spsc.io
*.fulfillment.spsc.io
intercom.spsc.io
filebroker-config-api.preprod.spsc.io
dev.geocoder.spsc.io
*.notify.spsc.io
test.devcenter.spsc.io
labelui.spsc.io
*.location.spsc.io
apiv2.fulfillment.spsc.io
otm.api.spsc.io
dev.geocoder.spsc.io
stage.notify.spsc.io
*.preprod.spsc.io
form-presets.test.spsc.io
label.spsc.io
*.prod.spsc.io
*.stage.spsc.io
api.profile-service.stage.spsc.io
s3-outbound-service-api.test.spsc.io
*.prod.spsc.io
catalog-gateway.service.test.spsapps.net
script-service-config-api.spsc.io
tnc.spsc.io
*.fulfillment.spsc.io
*.id.spsc.io
*.fulfillment.spsc.io
cdk-hackathon-api.service.test.spsapps.net
route-registry-api.dev.spsc.io
test.id.spsc.io
s3-outbound-service-api.test.spsc.io
*.location.spsc.io
stage.analytics-monitor.spsc.io
dev.devcenter.spsc.io
routing-api.test.spsc.io
dev.label.spsc.io
*.location.spsc.io
fulfillment.spsc.io
label.spsc.io
*.dev.spsc.io
*.profile-service.stage.spsc.io
api.data-engine-command-center.spsapps.net
corp-analytics.spsc.io
sentry.spsc.io
analytics-monitor.spsc.io
annotation.spsc.io
*.sourcing.stage.spsc.io
*.location.spsc.io
test.geocoder.spsc.io
notify.spsc.io
intercom.spsc.io
routing-api.spsc.io
script-service-api.spsc.io
routing-api.spsc.io
dev.id.spsc.io
locales.dev.spsc.io
tnc-bridge.spsc.io
service-registry-api.spsc.io
devcenter.spsc.io
1screen-prospace-converter.service.prod.spsapps.net
service-registry-api.spsc.io
api.template.test.spsapps.net
cdn.stage.spsc.io
*.item.spsc.io
*.sourcing.stage.spsc.io
annotation.spsc.io
service-registry-api.dev.spsc.io
cdn.prod.spsc.io
script-service-api.test.spsc.io

Certificate

The complete raw certificate details for dev.geocoder.spsc.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmhzweFoe8sIZ3dLTBLl
oCJkyltH32sGS470F9knMx+SWfnnAD9Ag8ZTVJwh41rhaRQ/TYDheqX0gJ8W9xwX
j2mB9s+0D/hDntkgK3bJFZsdm+jRy9nWEPVw4JD8+H7VGDkIuGi8dXZMVyD9ZEjX
K0NlkZoRqG+JZDnVmo2eUvqcA/U/+PEbMTrEghshchU0W6kdUSF6cL9tpskd29WQ
feM0VdzkuKiY3Xle/e7DT5Uo1B/LNLekXA6X+Paq0uN0GvCBbb41N9vjEzmQkfG5
ggjeaUzteRXhBqlyBfCa09aulyO3qxGifibrNww4e89iJ/LicOJBNvqANXTtpgHT
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7483995085437268761710757758396410819
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.geocoder.spsc.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19492206253019572399450732765179972305968874598670238549496950366183928446019243904396012567852363489697488790772107805714055105000379685157523044149045992872138038171182276383221595542309475900039485779253616506767728234634775193888961518479735559966517248372915628321710392141452487674260291278772560893633088598809448131163157597380304409870640301028571982780678160435515541487477042080928269764820435008625624362300628591192884723805267186677177961258057539920668784920186260718053050329564403353497297948085128221049538649865444562756179685680914394119975536359665360398075962699340605332125905263123084458709871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							05af749643ea1680072f72c457696cac2579143d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.geocoder.spsc.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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