us-east-1.us1-secrets-prod.cloud.code42.com

Issued by Amazon

About this certificate

This digital certificate with serial number 07:47:3e:cd:a2:56:d7:4e:e9:56:85:b2:fd:b1:b1:94 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=us-east-1.us1-secrets-prod.cloud.code42.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:47:3e:cd:a2:56:d7:4e:e9:56:85:b2:fd:b1:b1:94
Serial Number (int): 9674522848860681675706193295573102996
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 1a:3d:c6:02:b9:0a:94:73:df:3d:db:21:ac:92:ce:15:61:af:a6:0a
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 45:11:d2:0d:ae:eb:29:4a:27:be:10:0b:db:23:e8:fd:1c:34:1a:a7
Fingerprint (sha256): 0f:47:c0:70:98:74:f2:0d:81:d7:89:31:2d:3d:69:05:ff:5f:0d:50:7a:ff:57:a3:32:f1:46:20:3a:69:2f:d7

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate us-east-1.us1-secrets-prod.cloud.code42.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for us-east-1.us1-secrets-prod.cloud.code42.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

us-east-1.us1-secrets-prod.cloud.code42.com
*.us-east-1.us1-secrets-prod.cloud.code42.com

Other certificates including the domain name code42.com

(limited to 100 certificates)
us-stage.code42.com
us-east-1.sandbox.devops.code42.com
statuspage.io
cloud-status.typesense.org
statuspage.io
spitz.s.code42.com
us-east-1.us-canary.code42.com
qafeature.devops.code42.com
statuspage.io
statuspage.io
statuspage.io
*.eudu.cloud.code42.com
statuspage.io
its.msudenverstatus.com
us-east-1.sandbox.devops.code42.com
statuspage.io
statuspage.io
akamaisecure.qualtrics.com
us-east-1.teleprod.cloud.code42.com
*.us1-akv-prod.code42.com
statuspage.io
statuspage.io
us-east-1.dadmta.cloud.code42.com
statuspage.io
statuspage.io
*.a.us2.code42.com
us-east-1.sso.test.core.cloud.code42.com
status.arseuslab.com
statuspage.io
statuspage.io
us-east-1.dev.cicd.cloud.code42.com
statuspage.io
*.k.code42.com
test.ham.us2.code42.com
core-int.cloud.code42.com
statuspage.io
success.code42.com
statuspage.io
statuspage.io
statuspage.io
*.us1-env-pool0.cloud.code42.com
*.us2.code42.com
statuspage.io
*.code42.com
statuspage.io
blog.code42.com
qafeature.devops.code42.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
my.code42.com
*.eu1-akv-prod.code42.com
global-svc-int.cloud.code42.com
akamaisecure.qualtrics.com
statuspage.io
*.sso.test.code42.com
statuspage.io
statuspage.io
us-stage.code42.com
secretserver.corp.code42.com
securemail.code42.com
teleprod.cloud.code42.com
its.msudenverstatus.com
its.msudenverstatus.com
statuspage.io
protex.corp.code42.com
dev.be.cloud.code42.com
sandbox.devops.code42.com
cloudvps-status.com
integrations.code42.com
its.msudenverstatus.com
store.dev-3.test.code42.com
*.us-canary.code42.com
statuspage.io
statuspage.io
cloudvps-status.com
its.msudenverstatus.com
statuspage.io
helpdesk.code42.com
statuspage.io
*.us1-akv-prod.code42.com
*.stage.core.us2.code42.com
infoblox-msp.code42.com
statuspage.io
statuspage.io
us-east-1.core-int.cloud.code42.com
statuspage.io
dev.ffs.cloud.code42.com
code42.com
statuspage.io
us-east-1.us1-dev-loadtest.cloud.code42.com
amis.devops.code42.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io

Certificate

The complete raw certificate details for us-east-1.us1-secrets-prod.cloud.code42.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyXNg9lTdxAhFJ1CybJQ
zrauJ0n5FtYYFeUZKcUuvUdFwGJauvk4xnxzIKdeH9Fnj4KmtQR6TwIMlr1nMQGA
mHAKn90w6xtuOBjWkh6YiucaWIZLpCu1YE4uBdcWyx8m1SNflAhg70xaFJoONtUD
sgY8yQtE796yG25NUjb1rCegOl7L72ERYTl6Aw5+d+hHWU677dhnbDi3WMFTnJoU
yWCMvkAgYPuWJrlcQIIApyEdX0+6G0tyaQQHE9cOGE6/yRSItLBDbYgDbTaToaz7
R2YLaSwaa9bOFktMUOkNzmEHbbZqlHwfmq6/zxx0vqC4UtUZLV4RubGq3O9Y0JjG
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9674522848860681675706193295573102996
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-27 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'us-east-1.us1-secrets-prod.cloud.code42.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21605391401245082455789112842200365461046456098876502301010272950738372998148967188541184673581553798230850831232528248722548727534202886511538647380509153009769289531620917788699952413693101375266228647226531179875981124967341593158800359742052008712547655577980458966147940025698184266910858569977835357163476981524452229915391680982447118995752773229044771608239709816544127122057301234629372615518909525145174016563225524807332737014596997105439640821614476555739579777069102206709237426351896418403208936587336341847160783545102520563807341804327655287627314357203815190214156885293232929473942890541444748592887
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1a3dc602b90a9473df3ddb21ac92ce1561afa60a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-east-1.us1-secrets-prod.cloud.code42.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-east-1.us1-secrets-prod.cloud.code42.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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