tisnational.prod.doha.dxau.digital

Issued by Amazon

About this certificate

This digital certificate with serial number 03:0c:86:dc:6c:e5:ec:3b:3b:1a:2a:25:7f:0b:12:49 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tisnational.prod.doha.dxau.digital

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0c:86:dc:6c:e5:ec:3b:3b:1a:2a:25:7f:0b:12:49
Serial Number (int): 4052726856442148656748504474716934729
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 29:59:e5:c1:0a:6c:ad:bd:aa:79:50:46:a6:fb:3a:e9:d9:02:c1:0a
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 71:d2:58:1b:28:9a:20:0c:d2:7b:4e:17:99:39:7e:e2:4a:7b:ad:d8
Fingerprint (sha256): 0d:fe:6e:a3:81:b5:5a:7d:06:4d:da:3f:02:97:6d:17:22:b5:36:fb:be:5c:5e:26:38:cb:8d:dd:3c:cf:f5:ec

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate tisnational.prod.doha.dxau.digital

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tisnational.prod.doha.dxau.digital

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tisnational.prod.doha.dxau.digital
tisonline.prod.doha.dxau.digital
*.tisnational.prod.doha.dxau.digital
elearning.prod.doha.dxau.digital

Other certificates including the domain name dxau.digital

(limited to 100 certificates)
status.pipeimob.com.br
status.markiiieb.com
status.ngxnetworks.com
shw.rmt.status.descartes.com
shw.rmt.status.descartes.com
iq.syncd.tech
status.us.premium.salusconnect.io
disponibilidade.activecorp.com.br
shw.rmt.status.descartes.com
status.quarklink.io
status.5starcoms.net
shw.rmt.status.descartes.com
status.anywhere.asolvi.app
pvt.tisonline.prod.doha.dxau.digital
tisnational.prod.doha.dxau.digital
tisnational.prod.doha.dxau.digital
status.mapworks.io
shw.rmt.status.descartes.com
status.pipeimob.com.br
status.doccle.be
status.lenderdock.com
shw.rmt.status.descartes.com
status.dxau.digital
shw.rmt.status.descartes.com
iq.syncd.tech
status.nwtc.edu
api.uat.doha.dxau.digital
osb.prod.doha.dxau.digital
status.5starcoms.net
iq.syncd.tech
shw.rmt.status.descartes.com
status.prokurio.com
status.rapidsos.com
status.whatgoesaroundnyc.com
status.bozic.io
status.buyerlink.com
status.dayonebio.com
status.prokurio.com
status.zeasn.io
*.dxau.digital
status.dealerexpert.ca
tisnational.prod.doha.dxau.digital
status.ssw.edu
hahttpstatus.myvfirst.com
status.zeasn.io
status.naviscloudops.com
disponibilidade.activecorp.com.br
status.orangecityfl.gov
shw.rmt.status.descartes.com
status.us.premium.salusconnect.io
status.rapidsos.com
shw.rmt.status.descartes.com
tisnational.prod.doha.dxau.digital
status.cubiksonline.com
disponibilidade.activecorp.com.br
shw.rmt.status.descartes.com
shw.rmt.status.descartes.com
status.us.premium.salusconnect.io
status.5starcoms.net
shw.rmt.status.descartes.com
status.us.premium.salusconnect.io
shw.rmt.status.descartes.com
status.anywhere.asolvi.app
status.whatgoesaroundnyc.com
status.intellecommerce.com
status.prokurio.com
status.intellecommerce.com
status.anywhere.asolvi.app
disponibilidade.activecorp.com.br
shw.rmt.status.descartes.com
status.nwtc.edu
shw.rmt.status.descartes.com
iq.syncd.tech
status.mapworks.io
shw.rmt.status.descartes.com
status.lenderdock.com
shw.rmt.status.descartes.com
status.facm.cl
shw.rmt.status.descartes.com
status.ngxnetworks.com
status.dayonebio.com
status.apptrana.com
status.tronixtrm.com
shw.rmt.status.descartes.com
iq.syncd.tech
status.apptrana.com
api.uat.doha.dxau.digital
shw.rmt.status.descartes.com
shw.rmt.status.descartes.com
hahttpstatus.myvfirst.com
status.canadianblackbook.com
shw.rmt.status.descartes.com
tisonline.uat.doha.dxau.digital
console.uat.doha.dxau.digital
status.zeasn.io
shw.rmt.status.descartes.com
disponibilidade.activecorp.com.br
status.anywhere.asolvi.app
shw.rmt.status.descartes.com
status.chekk.me

Certificate

The complete raw certificate details for tisnational.prod.doha.dxau.digital in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAxlMvAn++IWKP0ubS3M
3qhOFDK36DOApXRTW5b6onma7s2T1+ZURXV+MzlLzX0IgqGl+sD9qw2YF2PAhYlc
y3QWLEIi9abdEeziXTAWGNjUKCj4JZ5fH+Q3uN3qGbjQHnZipuhtZEqFw66rXFKf
aEoNrAeJYTzkAp+3EsnGVpxoRpe/BKlwwL/+aMtN3xlaYv+e4qLaTCUbyB6ginJ+
zrWhntgMrplGZ28OKVFo8gYfukGJ7pvyFyCWj9NHmLL2NaUIMpCBys/llQriIMyj
ldiuAiV1V1g46G0GF2XcBWpqh6XNpyM6VrIr2JNhM0+pfk6/uS/Ss19rfR38furu
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4052726856442148656748504474716934729
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tisnational.prod.doha.dxau.digital'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21214147588731679982775655424676431517970703203344020197334475401581226794842751468888506709185180232676507165801500876048093176857795496691417032046021148484711322306054303484041229611991044460666296726504543963533303233648311525171016965767424345326731468304594370712865736058587469673547033335010889877132171812034394182679402552859995580550542017877223184032558138990569360428331312654751175165965366269727393783588162417873415082985780191124605229851121081026739028607959239493451307503872612693267852388741646040698349502350996905868120074342961493005942494505321784727723310949224040839165711124124164885769757
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2959e5c10a6cadbdaa795046a6fb3ae9d902c10a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tisnational.prod.doha.dxau.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tisonline.prod.doha.dxau.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tisnational.prod.doha.dxau.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elearning.prod.doha.dxau.digital'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016a47ecdcab0000040300483046022100f8bffc0f2127a537e201c80fd7ba1188735bdfb9860272f0a2d66a9a312c5999022100928e5f60971474b4c75336028d0cf3bfbf5ef00c29e5d7f19a0f7f57016a617e0077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016a47ecddcd0000040300483046022100e2b02ea641eec5ea7b05aa9d11d29991055202fbcc0e5b45650dc3b1b4e851e9022100e5154ca97d69730f89e5f5582e6b8f88bc86ed0f53f73beebe5f0ec395288ee1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00ac7192d98044dede2abc517329b45b553b9a2a1b20552790d4c4d2c6af02a7b6c136b5d01248c7e43417055f4856d58a8c4f4004be62fc6e08112ad4e1df7eeb580eed1a7db65ff0b398abce272385ab94a021978b20720923cac4ab6c9d9adc9d78edd590904e20901fd1e7a1ae1752ef61ced11cca51c8564d0f72deb4fb23aef1982abb39d84c950226010c5432edc0263a7e89f65cd0683a532ef1750efe0e31d37ceaa64b4ff973ad6f1654d642909e97e104cd488912d8c42c424811f8d526817f083aef20ab860ebf111751722164cf2c03f7e19df6bc31ba8c7396ba33f6109af1ca865c31d461dcf7826e3c0be11afcc6a1a8461b630f0e5e76fcbf