aga02-dev-football-api.awsdev.feeds.skybet.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0d:02:d9:86:99:61:72:85:9b:4e:fe:4e:cf:52:03:fa was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aga02-dev-football-api.awsdev.feeds.skybet.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:02:d9:86:99:61:72:85:9b:4e:fe:4e:cf:52:03:fa
Serial Number (int): 17294760485847758448465372090985481210
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 1c:57:12:46:ef:ea:46:05:ea:f0:71:a1:1d:34:58:c9:6c:56:6f:d6
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): ec:a8:10:d8:a0:ed:d2:e4:17:01:0a:50:7b:8a:9a:83:91:dd:63:1e
Fingerprint (sha256): 11:77:49:bc:37:a0:36:e5:91:c5:cc:1e:03:d3:7d:ec:0f:a6:a7:a6:c8:12:06:6e:04:e4:6c:25:e4:43:b1:de

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate aga02-dev-football-api.awsdev.feeds.skybet.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aga02-dev-football-api.awsdev.feeds.skybet.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aga02-dev-football-api.awsdev.feeds.skybet.com

Other certificates including the domain name skybet.com

(limited to 100 certificates)
affiliatehub.skybet.com
*.awsdev.feeds.skybet.com
test-abelson-feed-api.awsdev.feeds.skybet.com
www.skybet.com
txodds-stage.awsdev.feeds.skybet.com
st3.skybet.com
test.skybet.com
txodds-dev-crowthed.awsdev.feeds.skybet.com
support.skybet.com

ebm01.cheetahmail.com
txodds-dev-pjo01.awsdev.feeds.skybet.com
affiliatehub.skybet.com
m.skybet.com

players.runningball.aws.feeds.skybet.com
entity-management-test.awsdev.feeds.skybet.com

dsu01-dev-football-api.awsdev.feeds.skybet.com
f.chtah.com
txodds-dev-lse01.awsdev.feeds.skybet.com
txodds-stage.awsdev.feeds.skybet.com
ebm01.cheetahmail.com
txodds-dev-crowthed.awsdev.feeds.skybet.com
f.chtah.com
txodds-dev-uiq01.awsdev.feeds.skybet.com
*.awsdev.feeds.skybet.com
txodds-dev-lse01.awsdev.feeds.skybet.com
f.chtah.com
reporting.skybet.com
affiliatehub.skybet.com
push.skybet.com
stage-football-api.awsdev.feeds.skybet.com
management.test-football-api.awsdev.feeds.skybet.com
www.skybet.com
mft.skybet.com
st1.skybet.com
clearpass.skybettingandgaming.com
txodds.aws.feeds.skybet.com
push.skybet.com
push.skybet.com
eds.skybet.com
www.skybet.com
dev-football-api.awsdev.feeds.skybet.com
f.chtah.com
playerlinking-test.awsdev.feeds.skybet.com
perf-football-api.awsdev.feeds.skybet.com
st3.skybet.com
txodds-dev-jho04.awsdev.feeds.skybet.com
aga02-dev-football-api.awsdev.feeds.skybet.com
dev-football-api.awsdev.feeds.skybet.com
f.chtah.com
st1.skybet.com
secure.skybet.com
management.inttst-football-api.awsdev.feeds.skybet.com

inttst-football-api.awsdev.feeds.skybet.com
www.skybet.com

managementacademy.skybet.com
txodds-test.awsdev.feeds.skybet.com

txodds-test.awsdev.feeds.skybet.com
playerlinking-test.awsdev.feeds.skybet.com
f.chtah.com
*.awsdev.feeds.skybet.com
f.chtah.com
staging-abelson-feed-api.awsdev.feeds.skybet.com
txodds-stage.awsdev.feeds.skybet.com
skybetgroups.skybet.com
management.perf-football-api.awsdev.feeds.skybet.com
services.skybet.com
ebm01.cheetahmail.com
promocode.skybet.com
staging-abelson-feed-api.awsdev.feeds.skybet.com
txodds-dev-esp01.awsdev.feeds.skybet.com
f.chtah.com
txodds.aws.feeds.skybet.com
ccc.betfair.com
txodds-test.awsdev.feeds.skybet.com
txodds-dev-pjo01.awsdev.feeds.skybet.com
entity-management-test.awsdev.feeds.skybet.com
skybet.com
txodds-test.awsdev.feeds.skybet.com
txodds-dev-esp01.awsdev.feeds.skybet.com
txodds-test.awsdev.feeds.skybet.com
services.skybet.com
*.staging.sbgservices.com
secure.skybet.com
www.skybet.com
skybetgroups.skybet.com
test-abelson-feed-api.awsdev.feeds.skybet.com
skybet.com

f.chtah.com
nxa.skybet.com
opta.aws.feeds.skybet.com
ebm01.cheetahmail.com
txodds-dev-pjo01.awsdev.feeds.skybet.com
dev-abelson-feed-api.awsdev.feeds.skybet.com

Certificate

The complete raw certificate details for aga02-dev-football-api.awsdev.feeds.skybet.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpweClUlMJKu1g03Ue/Y
J/46rP3/VuiyOPx6FiEaOXFVPOqKIgxQp6vWEvP+x4DPK/O9ySxauzPwarwRW2Y4
AtBfx5a1iF3NtIJwgllRbgD9pdQQsyLm1zQkgTMcxS4P1XVGHEQCQhJrhR6jpfIE
7FyUCnFDUc5yOW9Jh8EGukQnKYrl16o4gTq2/aXamP8FdMYkDryzELknM3YYcOI9
EVBBRZcbkObOK0ljqfUA1EYD0mmfIRrFuZD68taSzglppvPS7mtH22pa0eEWGWFT
A78ltAn0dI68h1g+CZx2FICsG35GAbz5WUAqchasn3yOeOidWymBmwTgrMRnijF2
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17294760485847758448465372090985481210
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aga02-dev-football-api.awsdev.feeds.skybet.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21537496176375165804026439348312228564380049657189678090700029465051070234611642101510867926871194178988606526700998726126870779066347309798349874171108535246870480814489329431029863369221544937143014048554916205026916351381995243188400537239366346875897087061466310894987133578876546855130387761597319999619757653167945487699839035151572762378875932279933091676078622719410113111419348981094236576799371518452427147589413235189617337012838818785247794522146324105165534249785780308119444270303539513722708501751783631906980977538879265738852279520909136983260195038379968669638212471166135162792522591776819343619733
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1c571246efea4605eaf071a11d3458c96c566fd6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aga02-dev-football-api.awsdev.feeds.skybet.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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