uat.getsmarter.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0f:fc:b8:66:95:8a:cd:7f:c6:f5:12:91:90:ee:48:df was issued on by Amazon.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=uat.getsmarter.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:fc:b8:66:95:8a:cd:7f:c6:f5:12:91:90:ee:48:df
Serial Number (int): 21250618836045231686956336924586821855
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 8a:f1:6c:68:ff:40:3d:b1:8b:89:1c:49:d5:c1:db:31:ef:4f:8d:fe
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 07:21:1d:9e:d5:42:6b:31:9a:fb:3f:a4:7c:f1:26:16:03:46:f6:cc
Fingerprint (sha256): 11:8a:f3:3b:11:09:0f:b6:aa:bb:af:d8:0d:3b:e0:a4:e0:6e:3a:c4:f7:46:54:51:f1:34:66:ce:b9:e0:4e:1f

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate uat.getsmarter.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uat.getsmarter.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uat.getsmarter.com
uat.getsmarter.ac
*.uat.getsmarter.ac
uat.getsmarter.co.za
*.uat.getsmarter.co.za
*.uat.getsmarter.com

Other certificates including the domain name getsmarter.com

(limited to 100 certificates)
www.statuscast.com
accredible.tutor.com
mfanyname.staging.getsmarter.com
badges.gmac.com
rhs.getsmarter.com
academy-achievements.gong.io
badges.acacamps.org
uct.getsmarter.com
achieve.escoffier.edu
badges.gmac.com
academy-achievements.gong.io
au.credential.getsmarter.com
mit.getsmarter.com
onlinecampus.dev.getsmarter.com
achieve.escoffier.edu
uct.getsmarter.com
academy-achievements.gong.io
badges.slackcertified.com
badges.gmac.com
gsb.onlinecampus.getsmarter.com
development.acumatica.getsmarter.com
*.uat.getsmarter.com
achieve.escoffier.edu
uct.getsmarter.com
aonhrlearningcenter.credentials.aon.com
phoenix.getsmarter.com
aonhrlearningcenter.credentials.aon.com
berkeley.getsmarter.com
www.credential.net
accredible.tutor.com
oxford.getsmarter.com
badges.actioncertification.org
achieve.escoffier.edu
academy-achievements.gong.io
uat.getsmarter.com
staging.phoenix.getsmarter.com
achieve.escoffier.edu
gs.getsmarter.com
onlinecampus.dev.getsmarter.com
support.getsmarter.com
accredible.tutor.com
uchicago.getsmarter.com
achieve.escoffier.edu
oxford.getsmarter.com
mfmicrosite.staging.getsmarter.com
achieve.escoffier.edu
staging.getsmarter.com
achieve.escoffier.edu
accredible.tutor.com
achieve.escoffier.edu
awards.administrativeassociation.com
badges.gmac.com
*.development.getsmarter.com
rhs.getsmarter.com
badges.gmac.com
usb-ed.getsmarter.com
partner.tableau.getsmarter.com
staging.getsmarter.com
corporate.getsmarter.com
achieve.escoffier.edu
badges.actioncertification.org
www.statuscast.com
badgecert.metlife.com
badges.gmac.com
achieve.escoffier.edu
accredible.tutor.com
uat.getsmarter.com
development.acumatica.getsmarter.com
wits.getsmarter.com
badgecert.metlife.com
lse.getsmarter.com
accredible.tutor.com
badges.actioncertification.org
awards.administrativeassociation.com
development.acumatica.getsmarter.com
staging.api.getsmarter.com
achieve.escoffier.edu
awards.administrativeassociation.com
badges.gmac.com
accredible.tutor.com
accredible.tutor.com
badges.cesarritzcolleges.edu
rhs.getsmarter.com
badges.gmac.com
au.credential.getsmarter.com
badges.gmac.com
badges.gmac.com
badges.actioncertification.org
phoenix.getsmarter.com
oxford.onlinecampus.getsmarter.com
content.onlinecampus.dev.getsmarter.com
staging.getsmarter.com
onlinecampus.getsmarter.com
accredible.tutor.com
badgecert.metlife.com
www.credential.net
wits.getsmarter.com
badges.actioncertification.org
staging.learninganalytics.getsmarter.com
lse.getsmarter.com

Certificate

The complete raw certificate details for uat.getsmarter.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDuZuIESwhuTIoRSzpEk
vSZw53Pm8Vc9z80UaDr4Y7xtPxltha37DZJbGVOJg7sGD7PAG1J64Dx01NDCMDH1
Z8tJBaorgQvuvEMthinj5GKYr7YWcUE/vOjVbzI8gQjok6OBG+oxze67wwIkL9kI
S1LpK7c2mqtrHDG4+EH9o79sw/IvTumZEc2DLvYRZQSvpFKMdjgcaT0rkRp/JaWb
PZIQApfID8fThK/QoVs8DH2MLm3qBu5iO2s895w/aV7Rg/p4JlIKHKKF3l11wvSO
6qCSpW63YWxniNJFCWDgY9ZpsbnSgO/ZY7XlS/Bm9lwYjsOlofXyJT6IxnMwGME4
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21250618836045231686956336924586821855
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uat.getsmarter.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20732472102343700539730580576367136639253802901373462157357165123278496957265205811787668291501627778722845045701236444751455612567351566403664236543325248156721207719501179620705311228362311534564440257310912931437780813672898590384141665792739812817491719726021478223012076887954017943272415082854392193295192939364671430608233797298968216675909239502762439549699284942272984820674735168804946800742521502938484930336653636391258211583133173166704204276927766607216605176588979403893756817906410650838747727119920838390602206036308571253770110885858407598057127790667332039890455431235900721143891132619451808168071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8af16c68ff403db18b891c49d5c1db31ef4f8dfe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.getsmarter.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.getsmarter.ac'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.getsmarter.ac'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.getsmarter.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.getsmarter.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.getsmarter.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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