dev.amp.sparkswebapps.com

Issued by Amazon

About this certificate

This digital certificate with serial number 09:61:84:73:83:cd:48:bc:d6:5e:fe:69:f4:5f:b3:d8 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dev.amp.sparkswebapps.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:61:84:73:83:cd:48:bc:d6:5e:fe:69:f4:5f:b3:d8
Serial Number (int): 12469391187439201870435424939745981400
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7d:2b:4c:12:aa:7f:f2:52:ab:97:5d:1b:ec:a9:ca:a8:d9:c0:4b:0e
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 15:02:2b:35:b6:d5:88:a2:22:eb:66:06:f1:e2:4b:05:72:c2:17:74
Fingerprint (sha256): 11:31:30:16:bc:f0:92:9a:da:5d:14:ef:47:9a:63:39:86:0f:1c:e7:2f:cd:b4:fa:73:b1:fd:18:e6:ec:6c:c6

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate dev.amp.sparkswebapps.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev.amp.sparkswebapps.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.amp.sparkswebapps.com

Other certificates including the domain name sparkswebapps.com

(limited to 100 certificates)
helpdesk.fintonhouse.org.uk
*.sparkswebapps.com
helpdesk.fintonhouse.org.uk
uat.ims.sparkswebapps.com
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
*.sparkswebapps.com
helpdesk.fintonhouse.org.uk
timezone.sparkswebapps.com
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
*.sparkswebapps.com
dev.amp.sparkswebapps.com
helpdesk.fintonhouse.org.uk
uat.amp.sparkswebapps.com
*.sparkswebapps.com
imsapp.sparkswebapps.com
servicedesk.energyexemplar.com
tickets.andirect.org
uatamp.sparkswebapps.com
support.mastercardfdn.org
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
*.prod.sparkswebapps.com
uatamp.sparkswebapps.com
qa.imsapp.sparkswebapps.com
helpdesk.fintonhouse.org.uk
imsapi.sparkswebapps.com
assetmgmt.jennycraig.com
helpdesk.fintonhouse.org.uk
qa.ims.sparkswebapps.com
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
uat.ims.sparkswebapps.com
uat.imsapp.sparkswebapps.com
www.sparkswebapps.com
helpdesk.fintonhouse.org.uk
applicationsupport.fqml.com
*.sparkswebapps.com
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
servicedesk.odc.co.bw
servicedesk.gmhec.org
helpdesk.mvplaw.com
uat.timezone.sparkswebapps.com
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
servicedesk.projecthope.org
helpdesk.secureauth.com
helpline.petron.com
helpdesk.fintonhouse.org.uk
qa.imsapp.sparkswebapps.com
servicedesk.digicelgroup.com
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpline.petron.com
servicedesk.kings.edu.au
timezone.sparkswebapps.com
helpdesk.fintonhouse.org.uk
helpdesk.neopharm.ca
helpdesk.utimco.org
helpdesk.sparkswebapps.com
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
uat.timezone.sparkswebapps.com
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
support.embelton.com
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
ithelpdesk.optomed.com
ims.sparkswebapps.com
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.dbsupply.com
amp.sparkswebapps.com
dev.imsapp.sparkswebapps.com
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
blueprint.sparkswebapps.com
helpdesk.fintonhouse.org.uk
*.sparkswebapps.com
timezone.sparkswebapps.com
helpdesk.fintonhouse.org.uk
ithelp.dreamliveprosper.com

Certificate

The complete raw certificate details for dev.amp.sparkswebapps.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmPgxPU2k3xbQNBhv17F
hWCuYS8NaLiU9fTgLwcTPd1RGjbs92ixm/IFfZY+lLAN8I3nmKEAh+0eGr/KiRbB
ro7Ezyu5NGGbJySok+01S3hzr4Pm73sDfsXsu7jHZdHaNYm6eaJi2XZrj3gjl/hp
mA4ONwsz+fZVhnaKgc7GaBHzDNZhpWUY2ZrAG3lSiBfAL0xFQgZ3M2qdta5fLbLe
BLuVaHzUa1zieyCV05XguOS1pahu67k+q2VaIVhA2hFmujRMunxCupsmxOP/XXt1
7PyQOnHkwm1t2t5/dzVE2EMBK0ilwzwLJN7oiGIIVkFw3fSQJgi/KKBH+KUECBPC
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12469391187439201870435424939745981400
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-07 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.amp.sparkswebapps.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21509763524297635110509388218126629019159049195713937197770768038617493820647048830089768673306829488877423449406890608481103544595881102847011216048437031721093082964141734521678353534948231056106031981453091858042011896384843716080149196817165876627669866241679538895423885870454004579420198270540285011938259843100684030871474870870598362540827295389507572745329184772274218967001804088538362731912943205959362120868759941048777514943808537080505944645204620421703978749743789851484801179870697396836933670437142394822187230882530823150274852066553882852866332742980057596096138989840480589879650468700517569905329
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7d2b4c12aa7ff252ab975d1beca9caa8d9c04b0e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.amp.sparkswebapps.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0009b5bd0b69d31f5fc96839ce7cb231284762a759bd678f1e946abb90fc0cf3bf1a45ed683258394ec0c8e9e5a6eacccb868dee7456c4ea038a01d04d1665a9426dc86a2bfe60ef55bb335ec8db495193445ef03eb18a90517b865b922a79ac877d7379e21e91a14693cd26d33ec699d3e43f68f14c88b6cfc63d3753a3b5263745e0d25246461e542948100f8f623c391d71612bdc2a7b5e0d89fd2353b90fcafbbedc84dd6ef6e8a1fcf2fa13c562e92e0063d4e541547e151e28f05656822dcb888fcf7b22fa7f88b8812b81bdaa830030ae08de90805e66bc9b5c2b49525eb16cc4e449daa896c94d074d323416509529f19eeff7ed9b93d8520b4e7ef90d