feat-org-ev-local.regional-stats.horizondev.cloud

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:83:e8:2e:50:b2:25:71:3c:b9:1c:ee:ed:bf:ed:30 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=feat-org-ev-local.regional-stats.horizondev.cloud

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:83:e8:2e:50:b2:25:71:3c:b9:1c:ee:ed:bf:ed:30
Serial Number (int): 16635636026384742135897581130428181808
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 4e:b6:63:1e:06:9d:86:75:23:2f:62:5e:49:13:60:de:3e:63:3e:e0
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 24:10:f4:41:d0:ac:dc:63:5c:46:e6:bd:38:bd:c5:ca:4f:1f:0c:e4
Fingerprint (sha256): 13:27:bd:c1:f5:6c:7c:c5:cc:22:9b:9a:b9:fc:9f:9b:64:23:18:78:4c:8f:90:65:bd:88:ba:fe:41:c9:9f:50

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate feat-org-ev-local.regional-stats.horizondev.cloud

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for feat-org-ev-local.regional-stats.horizondev.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

feat-org-ev-local.regional-stats.horizondev.cloud

Other certificates including the domain name horizondev.cloud

(limited to 100 certificates)
fgeks-qatest.qa.horizondev.cloud
feat-device-local.regional-stats.horizondev.cloud
prom.dev-v1-0-2.qa.horizondev.cloud
feat-nb-dev-local.regional-stats.horizondev.cloud
z003zmzv-local-om.boic.horizondev.cloud
hedge.horizondev.cloud
regional-stats.horizondev.cloud
z004np6z-ingest.point.horizondev.cloud
feat-device-local.regional-stats.horizondev.cloud
feat-224222-local-om.boic.horizondev.cloud
device.horizondev.cloud
fix-sonar-issues-ws-om.boic.horizondev.cloud
one-local.aods.horizondev.cloud
markuswsl-local.aods.horizondev.cloud
nb-cetapi.cerberus.horizondev.cloud
ent-local.regional-stats.horizondev.cloud
device.horizondev.cloud
*.device.horizondev.cloud
*.local-app-reference.apps.horizondev.cloud
*.dummytest.apps.horizondev.cloud
*.alarm.apps.horizondev.cloud
*.dummytest.apps.horizondev.cloud
feat-nb-dev-local.regional-stats.horizondev.cloud
arag5b.aods.horizondev.cloud
ita48361-local-om.boic.horizondev.cloud
chore-logging-improvements-local.aods.horizondev.cloud
fix-sec-headers-local.aods.horizondev.cloud
dwg-asset-extractor.cerberus.horizondev.cloud
engineering.horizondev.cloud
user.horizondev.cloud
z004np6z-ingest.point.horizondev.cloud
aods.geometry.horizondev.cloud
main-local.regional-stats.horizondev.cloud
z000jc4t.engineering.horizondev.cloud
ent-local.regional-stats.horizondev.cloud
fix-shift-mt-local.aods.horizondev.cloud
*.horizondev.cloud
fix-sonar-issues-ws-om.boic.horizondev.cloud
*.local-app.apps.horizondev.cloud
fix-delete--local-om.boic.horizondev.cloud
feat-org-ev-local.regional-stats.horizondev.cloud
ecoview.horizondev.cloud
feat-new-po-local-om.boic.horizondev.cloud
*.local-app-reference.apps.horizondev.cloud
engineering.horizondev.cloud
feat-device-local.regional-stats.horizondev.cloud
hangman.engineering.horizondev.cloud
fix-me-permissions-local.aods.horizondev.cloud
user.horizondev.cloud
feat-device-local.regional-stats.horizondev.cloud
prom-dev-main.qa.horizondev.cloud
user.horizondev.cloud
logs.hedge.horizondev.cloud
*.pen-dummy-test.apps.horizondev.cloud
kl13mt.aods.horizondev.cloud
nvajgf.aods.horizondev.cloud
xdg2lr.aods.horizondev.cloud
cetapi.cerberus.horizondev.cloud
feat-nb-dev-local.regional-stats.horizondev.cloud
*.support.apps.horizondev.cloud
covfefe.engineering.horizondev.cloud
z00466za-ingest.point.horizondev.cloud
reference.horizondev.cloud
fix-sonar-i-local-om.boic.horizondev.cloud
fix-sonar-i-local-ws-om.boic.horizondev.cloud
*.point.horizondev.cloud
feat-new-po-local-om.boic.horizondev.cloud
device.horizondev.cloud
*.point-local.horizondev.cloud
engineering.horizondev.cloud
xymejt.aods.horizondev.cloud
feat-device-local.regional-stats.horizondev.cloud
fix-sonar-i-local-ws-om.boic.horizondev.cloud
*.local-app-reference.apps.horizondev.cloud
*.device.horizondev.cloud
device.horizondev.cloud
ent-local.regional-stats.horizondev.cloud
regional-stats.horizondev.cloud
markuswsl-local.aods.horizondev.cloud
fix-kms-policy-local.aods.horizondev.cloud
main-local.regional-stats.horizondev.cloud
*.horizondev.cloud
prbypf.aods.horizondev.cloud
feat-device-local.regional-stats.horizondev.cloud
h70see.aods.horizondev.cloud
feat-nor-de-local.regional-stats.horizondev.cloud
ent-local.regional-stats.horizondev.cloud
fl1iln.aods.horizondev.cloud
fgeks-teratest.qa.horizondev.cloud
fix-kms-policy.aods.horizondev.cloud
regional-stats.horizondev.cloud
chore-improve-coverage-local.aods.horizondev.cloud
feat-device-local.regional-stats.horizondev.cloud
fix-me-permissions.aods.horizondev.cloud
chore-improve-coverage-local.aods.horizondev.cloud
*.accountmanager.apps.horizondev.cloud
feat-device-local.regional-stats.horizondev.cloud
locations.horizondev.cloud
feat-nb-dev-local.regional-stats.horizondev.cloud
license.horizondev.cloud

Certificate

The complete raw certificate details for feat-org-ev-local.regional-stats.horizondev.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhGrkYt8w8hnmu16aXGn
5JoBHf3sUjjh4YeWmytFIcaIk+zF2oyvhz+/P7QEPduJ4svuk53jS9MJgLa/vWfx
Wu2U6VdlN01TgLJ7L8kkGiP2O27sBqbKdG6bLrW3hE1ruAHHGmL4iFIuawWPZQH7
ZVNjKmF5P99dHIRw5MjRq5GhfMFOmE1bPzZUaZvSnV9bmBDccLhrzqQ7mAs68CPk
tVXcbav/90YKlTk4hZhDYU/pzP9iexh8dIH39Q4ey6kK5mTLChLQSYbadqgjywC5
h1s7pNdZ4OzVnhrf19Q8zxtGO6Z4Jei8oXozpk2JpDgfE3pVspaM/QQ3bjjhYVjp
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16635636026384742135897581130428181808
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'feat-org-ev-local.regional-stats.horizondev.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21469225339472474541256588871223212568445159270525898535389383684506510635003398916035676621482893188127847302754004008916525553525030733164773298756208032260872516094339974531124602951946161419543144537811261536164813273704940750075930344184763660367606429515582069266651318862425796188715974251811912981567748941454303675556235921117125441918236224465420922078810403431501987157138635343672279901261027503898566564470125108901261335724872511194552355314287347304138644403810401503005695857676622544521689561869745461748334417751532031966904980514680374566929670157929959683619269685662758771220795947675767453313303
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4eb6631e069d8675232f625e491360de3e633ee0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feat-org-ev-local.regional-stats.horizondev.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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