cglcloud.com

Issued by Amazon

About this certificate

This digital certificate with serial number 04:74:95:3b:7e:3c:ce:4e:93:04:bf:bd:53:54:87:ca was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cglcloud.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:74:95:3b:7e:3c:ce:4e:93:04:bf:bd:53:54:87:ca
Serial Number (int): 5922245211290856980615520324259448778
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 35:cd:88:7a:73:b4:44:e2:c5:0b:3f:82:be:48:0a:ce:d0:c2:2f:e1
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 96:0d:69:4f:f6:a0:5d:28:9e:a4:b1:a9:2a:f0:b7:57:57:99:21:cf
Fingerprint (sha256): 12:f0:d1:10:6c:30:50:93:f5:89:2b:50:1b:9e:ff:c7:34:17:fb:34:73:ee:7e:9e:bb:27:f0:17:11:6b:d8:1b

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate cglcloud.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cglcloud.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cglcloud.com
*.sharedservices.cglcloud.com
*.us-east-1.cglcloud.com
*.cglcloud.com

Other certificates including the domain name cglcloud.com

(limited to 100 certificates)
git-engineering.cglcloud.com
csbsui.cglcloud.com
*.refapps.cglcloud.com
cglcloud.com
git.cglcloud.com
*.cglcloud.com
*.git-engineering.cglcloud.com
*.cglcloud.com
sni.cloudflaressl.com
waffle.cglcloud.com
sni.cloudflaressl.com
git.cglcloud.com
*.cglcloud.com
cglcloud.com
csbsui.cglcloud.com
ilc.cglcloud.com
git.cglcloud.com
cglcloud.com
git-engineering.cglcloud.com
*.cglcloud.com
*.cglcloud.com
*.refapps.cglcloud.com
sni.cloudflaressl.com
*.cglcloud.com
*.cglcloud.com
*.refapps.cglcloud.com
cptnuswebsiteallmdcccxxxiv.cglcloud.com
*.cglcloud.com
flake-analyzer.cglcloud.com
git.cglcloud.com
*.git-engineering.cglcloud.com
waffle.cglcloud.com
git-engineering.cglcloud.com
git-engineering.cglcloud.com
*.cglcloud.com
waffle.cglcloud.com
cptnstaticadddnsmccclxxxv.cglcloud.com
git.cglcloud.com
git-engineering.cglcloud.com
wiki.cglcloud.com
*.refapps.cglcloud.com
wiki.cglcloud.com
git.cglcloud.com
cglcloud.com
git.cglcloud.com
waffle.cglcloud.com
alpha-demo.cglcloud.com
cglcloud.com
csbsui.cglcloud.com
git.cglcloud.com
git.cglcloud.com
git.cglcloud.com
cglcloud.com
cglcloud.com
xuntest-static.cglcloud.com
sni.cloudflaressl.com
*.cglcloud.com
ilc.cglcloud.com
*.cglcloud.com
csbsui.cglcloud.com
git.cglcloud.com
*.cglcloud.com
cglcloud.com
*.git-engineering.cglcloud.com
*.cglcloud.com
ccpcaptain.com
cglcloud.com
*.cglcloud.com
cptnuswebsiteallmccxcrcii.cglcloud.com
cglcloud.com
git-engineering.cglcloud.com

Certificate

The complete raw certificate details for cglcloud.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtn+moX9t9sMxkjUyAYi0
S/3PqJOLNpug/E7SNAEkeAL7wDm8bpllWPOZ4R9Cfm2mIAwymK5BgQjuCk8eDL+R
hvcbxQkbPnRws1ligTlrN3OrlIw/s87UpnGXTCXXwJ0R+77fXd+/Q+ogqoh+Icyw
B0FEjcsh8lId+FWXgjfgqaSet6QdPsbcWvrdtyUU9VrpwFZn45ERCsFBHMh+2/ha
zP3fiQOSYuzlDrny7Gj/ailj5LnnWkwm+UXlDxZ6Y83pUXlv11YkaeHc5nbuc2fL
q+b3xKRwMsc2Ap103yaz4rNY8xm82JEebBOLIYnUSubHzIteWpjylWVqa3FcsLtQ
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5922245211290856980615520324259448778
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cglcloud.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23038318509547770010505248757605590609227004480534889321504679505187274438373772190291568549675648872514417140363610161404291686298684163832275299846596892229610545072261165363773765170858798415770485456060805616077719966330576916227199036404442307707271555103700248663619549296316228212694920198353600923472268330556621412612461736714681960292893963204506046686842004747212469946139070494768572376278756617757828711764766343508456467451627297702577720623381840742436426768721463451546711158014706038169157447299490597382609909825261803201071873459847427471730062938049208277828278416819811954531898618934023398576241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							35cd887a73b444e2c50b3f82be480aced0c22fe1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cglcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sharedservices.cglcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-east-1.cglcloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cglcloud.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							0165007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018011b13e1300000403004630440220254165e57b81239306fbd606ae8a55de338a35e95e8f597ce64e5e08b0b5b32002202c90502b2ff195cb4f4284ba06bcf46a21678751f4bbcf587f891947f1d81efe00750035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c0000018011b13ddb00000403004630440220023f33cfe4eaa66f8bfaceca0c36eaf4805b8e8c8145252dcfc02c6fe2f62cfd0220787d7b16e762d4b81f4bfc89d63c31c34f2a64a1ee287a2bc996d582fc07cd1f007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000018011b13e1700000403004630440220092f503a409edc8f918edcf56e189644e307c22c72f4026fc5c4ca85f595bebb0220193df392b34e398de762686c5ffbc88d3c9a5626a9e7ae73950a6caa98c9fa11
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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