dashboard.internal.queue-it.net

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:13:9f:81:dd:63:23:5c:23:ed:8b:d5:4e:b0:77:5a was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dashboard.internal.queue-it.net

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:13:9f:81:dd:63:23:5c:23:ed:8b:d5:4e:b0:77:5a
Serial Number (int): 18711080773376966710467678258710214490
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 37:27:54:c8:f4:9b:d3:45:b2:d3:87:c0:c0:3b:10:c6:99:47:37:f4
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): c8:78:84:35:28:52:f5:9e:07:01:de:73:e7:b3:72:5e:ae:8f:ba:33
Fingerprint (sha256): 10:42:41:fd:d1:fb:c3:b0:49:28:48:75:a1:9d:a5:d7:60:b5:6e:8d:ba:d1:2e:96:fb:7a:d4:81:be:0d:67:f3

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate dashboard.internal.queue-it.net

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dashboard.internal.queue-it.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dashboard.internal.queue-it.net
temdashboard.internal.queue-it.net
eu-west-1.temdashboard.internal.queue-it.net
eu-west-1.dashboard.internal.queue-it.net

Other certificates including the domain name queue-it.net

(limited to 100 certificates)
sslcertificate3.queue-it.net
*.test.queue-it.net
hd-dtc.com
dashboard.internal.queue-it.net
sslcertificate1.queue-it.net

sslcertificate1.queue-it.net
api2.test.queue-it.net
sslcertificate4.queue-it.net
sslcertificate4.queue-it.net
sslcertificate1.queue-it.net
go.test.queue-it.net
sslcertificate1.test.queue-it.net
tomo.okos.uno

sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sa-east-1-logging.test.queue-it.net
*.test.queue-it.net
*.queue-it.net
dashboard.internal.queue-it.net
*.queue-it.net

api2.queue-it.net
sslcertificate4.queue-it.net
sslcertificate2.queue-it.net

sslcertificate4.queue-it.net
*.test.queue-it.net
vpn.test.queue-it.net
sa-east-1-logging.test.queue-it.net
*.queue-it.net
*.queue-it.net
dashboard.internal.queue-it.net
*.queue-it.net
api2.test.queue-it.net
api2.test.queue-it.net
sslcertificate1.queue-it.net
www.queue-it.net
sslcertificate4.queue-it.net
sa-east-1-logging.test.queue-it.net
*.queue-it.net
electronicarts.queue-it.net
go.queue-it.net
sslcertificate4.queue-it.net
sslcertificate2.queue-it.net
sslcertificate1.queue-it.net
go.queue-it.net
*.queue-it.net
sslcertificate3.queue-it.net
go.test.queue-it.net
sslcertificate3.queue-it.net
portal.childrens-mercy.darivault.com
dashboard.internal.queue-it.net
sslcertificate1.queue-it.net
sslcertificate4.queue-it.net
*.queue-it.net
sslcertificate1.queue-it.net
*.queue-it.net
go.queue-it.net
api2.queue-it.net


sslcertificate2.queue-it.net
sslcertificate3.queue-it.net
*.test.queue-it.net
api2.queue-it.net
*.queue-it.net
sslcertificate3.queue-it.net
sslcertificate1.queue-it.net
sslcertificate5.queue-it.net
*.test.queue-it.net
api2.queue-it.net
sslcertificate2.queue-it.net
*.queue-it.net
cf.go.queue-it.net
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sslcertificate4.queue-it.net
vpn.test.queue-it.net
*.test.queue-it.net
sslcertificate1.test.queue-it.net
go.queue-it.net
*.queue-it.net
*.queue-it.net
sslcertificate3.queue-it.net
go.queue-it.net
sslcertificate2.queue-it.net
wazuh.internal.queue-it.net
api2.test.queue-it.net
herning.citytilbud.dk
sslcertificate5.queue-it.net
dashboard.internal.queue-it.net
sslcertificate1.queue-it.net
api2.test.queue-it.net
sslcertificate2.queue-it.net

api2.queue-it.net
sslcertificate2.queue-it.net
*.queue-it.net

Certificate

The complete raw certificate details for dashboard.internal.queue-it.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBBDnclp4mnifrUTzJZ2
fhUB3JqV3uLjk60d7TafO9W8sODHxU7nsZS8cVhOzyxvOXAX8Pv1LntX0+IpYGQj
039JJ2oGVyqIWDPo3995pLYscz9MM8rWetgFeFHbP6/AKdoZDBXsDG1GhHf6pD3L
EtC4oEpzj9qDD2cVJ39IvqVlECPQP0+7JjpLM1s1grofAksrzi7ivag7fA/buw0q
i0ofrVDiJdfCg7KR8o32QIMOR10uJ3t410ASdgIuyhjOoS7vNHxTD9sB1WE50GI3
hoTof4F+GUWCMJKAjuy/ccN6ZMpVAEvUDpYwbhmuQKdjer1N9EpxhEB3qxfZpzVB
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18711080773376966710467678258710214490
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dashboard.internal.queue-it.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21721008593797258540652661848386495567104354787216301544291153786517252768696549741444777020648187218421591458319396082697994925443941119040784317047595509593997674240107407571030187794747351054657710741461530623946294655413974098904091414443366884354614690422184707981586199142197710571584494619196693669504309337852852179852258609768886042451935792946414195596473051962469222235364024477665371890369275911678316034087179207886339942088140731871399246063394329907640529092996853040355180636154082756932792954812842027515416990356154059424178980195675530301404617570166373563432430510989589368970048851061506118599081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							372754c8f49bd345b2d387c0c03b10c6994737f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.internal.queue-it.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temdashboard.internal.queue-it.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu-west-1.temdashboard.internal.queue-it.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu-west-1.dashboard.internal.queue-it.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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