b3woxlmkaojj.customers.simloud.be

Issued by Amazon

About this X.509 Certificate

This digital certificate with serial number 0f:69:bf:74:7b:03:db:d7:4b:a8:2f:97:88:1f:c5:a8 was issued on by Amazon.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This certificate has already expired and will cause a warning or error message in the browser. It's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate, they will be shown below. We hope this certificate review provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=b3woxlmkaojj.customers.simloud.be

Amazon

Organization: Amazon
Organizational unit: Server CA 1B
Country: US

This X.509 certificate expired on

Certificate Details

Serial Number (hex): 0f:69:bf:74:7b:03:db:d7:4b:a8:2f:97:88:1f:c5:a8
Serial Number (int): 20487494275692365273512614112197068200
Serial Number Length: 124 bits, 16 octets

Subject Key Identifier: 2b:7a:59:21:98:bb:68:a5:6f:de:a6:a0:d8:45:d1:a7:9f:80:79:8c
Authority Key Identifier: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (SHA-1): 60:d4:c8:9d:ce:1d:2e:1e:c3:ea:b5:d2:48:01:08:2c:d0:7f:9c:49
Fingerprint (SHA-256): 13:30:e9:00:d9:41:97:1c:c2:5a:d9:a5:c0:a5:bf:13:a5:6a:e5:8a:4f:47:51:d2:f8:59:c6:d8:bd:75:84:1e

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation Information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate b3woxlmkaojj.customers.simloud.be
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for b3woxlmkaojj.customers.simloud.be

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

b3woxlmkaojj.customers.simloud.be
*.b3woxlmkaojj.customers.simloud.be

Other certificates including the domain name simloud.be

(limited to 100 certificates)
2-1118-j-5.2.34-eks-1.23.customers.simloud.be
jc12xnomswul.customers.simloud.be
1-1245-j5.1.113-eks1.22.customers.simloud.be
pk3omufiwmqe.customers.simloud.be
c5c6mhvd47ts.customers.simloud.be
check-upgrade.customers.simloud.be
ba4sys0zf5a4.customers.simloud.be
nhmi1agbahoq.customers.simloud.be
testforjenkins.customers.simloud.be
125-cloud-1375.customers.simloud.be
ucopqshu082j.customers.simloud.be
dh6zb381q56h.customers.simloud.be
cloud-1371-sw.customers.simloud.be
mcpq5jh3s3e2.customers.simloud.be
dep-345663.customers.simloud.be
1cx7iy981kso.customers.simloud.be
7lzwxo6kluwh.customers.simloud.be
7lzwxo6kluwh.customers.simloud.be
jenk-5.2.34.customers.simloud.be
jenk5.1.138.customers.simloud.be
cons-vau.customers.simloud.be
xznwclfhzo4z.customers.simloud.be
b3woxlmkaojj.customers.simloud.be
54enbd1ohibo.customers.simloud.be
5-cloud-1257-eks1.22.customers.simloud.be
test-terraform-j5.1.134-eks1.23.customers.simloud.be
yg14kfh3350z.customers.simloud.be
eks-upgrade-23-1.customers.simloud.be
7-portal.customers.simloud.be
8-portal.customers.simloud.be
dep-435643.customers.simloud.be
3y4zhjeval2b.customers.simloud.be
cloud-1118-jen-5.2.33-eks1.22.customers.simloud.be
exldlmeefff2.customers.simloud.be
eks123fr03.customers.simloud.be
dep-1314.customers.simloud.be
test-vpn.customers.simloud.be
test51134.customers.simloud.be
125-cloud-1549.customers.simloud.be
dep-4563.customers.simloud.be
125-cloud-1072.customers.simloud.be
t122upp06.customers.simloud.be
password-change-test-artem.customers.simloud.be
test-13-12.customers.simloud.be
deb-051222.customers.simloud.be
iknj7uam4p90.customers.simloud.be
blablbla123.customers.simloud.be
3-cloud-1257-eks1.22.customers.simloud.be
dep-35342.customers.simloud.be
ce16i2og96ih.customers.simloud.be
d122eks02frq.customers.simloud.be
cloud-1535.customers.simloud.be
vpn-jenkins.customers.simloud.be
test.customers.simloud.be
57spkdsvm1by.customers.simloud.be
08qxs5t7vgmf.customers.simloud.be
cloud-1118-eks-1.23-j5.2.34.customers.simloud.be
dep-345674.customers.simloud.be
simloud-test-upg123.customers.simloud.be
teahysedrmgh.customers.simloud.be
test2.customers.simloud.be
8r41rvfmsbx4.customers.simloud.be
testcors.customers.simloud.be
ouh6bpfsm52w.customers.simloud.be
testforsimloudfile.customers.simloud.be
1-cloud1245-eks1.22-j5.1.113.customers.simloud.be
1-portal.customers.simloud.be
jc12xnomswul.customers.simloud.be
3-1245-j5.1.113-eks1.22.customers.simloud.be
t123upg2405cs129.customers.simloud.be
h4b4g5b0btr6.customers.simloud.be
alexandr-test-2022-12-13-001.customers.simloud.be
aqtestd2.customers.simloud.be
test-scheduler-dev.customers.simloud.be
test-5.2.34-eks1.22.customers.simloud.be
vsevolod-test-0505.customers.simloud.be
eks22test4.assaf.customers.simloud.be
cons-vau3.customers.simloud.be
cons-vau.customers.simloud.be
123-cloud-1539.customers.simloud.be
54enbd1ohibo.customers.simloud.be
2-1249-ha-eks-1.23.customers.simloud.be
4-cloud-1257-eks1.22.customers.simloud.be
itestd1.customers.simloud.be
5wcd8nghumn8.customers.simloud.be
3-cloud1245-eks1.22-j5.2.32.customers.simloud.be
for-andris.customers.simloud.be
otestd1.customers.simloud.be
check-upgrade3.customers.simloud.be
dep-1125.customers.simloud.be
4-cloud1245-eks1.22-j5.2.34.customers.simloud.be
dep-345675.customers.simloud.be
jenkins5.1.138---withoutservices.customers.simloud.be
sshctestffp.customers.simloud.be
aqtestd1.customers.simloud.be
1fihs5bmw1s2.customers.simloud.be
deb-071222.customers.simloud.be
125-cloud-1371.customers.simloud.be
4-1245-j5.2.34-eks1.22.customers.simloud.be
eks122fr04.customers.simloud.be

X.509 Certificate

The complete raw X.509 certificate details for b3woxlmkaojj.customers.simloud.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sBTGDDTgGOvE4ktqQw2
AHMGF4gkmby0D41I7mvSnqtL2Y6gqxt3rPmCLjPfUlMQlMFQgxTBWhVi53YZPvaB
QlqhuicabxY9FYcKQ2bH0mfLkL+kyaCiR2JMZTVgU8jM+wB4JFZgDnpuml7tc8Wa
NYP6uVDmk7tO5uyJQxK3xOwdzwBPaXZH7eERKNQKAa97Vfjla1AfQ6RU1/sgiZLx
Oe3D+nuZSBpRUyfB9slweYRVuSw9ovDCAAmcpoX1z5kGklhUeHXXHDOCdxOBg7XY
pPP4zxcXoZZidS5iRGEA/2WuKRV4tNgyZHXC+pbkw1clalbOcBt6JV6HuDy7eVvZ
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20487494275692365273512614112197068200
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'b3woxlmkaojj.customers.simloud.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29129648931162845039500298660340843297950827527879035458544950053620378805387918580248233486656160754520249142579073779125908107524771652210687697197737576437178779876093635458727753102869850018725645459211107234937305494944377082230610844909198845735761124562551254991037502820402337639834932284322815582475234085071867754308597808006712353974508124024499483451488966407328180163876630558740651856516206527756823792640242901838238892523875503943460253031543923040174382408430337479422481257146226938856379242072860665957214290083949989861164184994833491311804120885543450082478708453862434261111418018390829503863193
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2b7a592198bb68a56fdea6a0d845d1a79f80798c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b3woxlmkaojj.customers.simloud.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.b3woxlmkaojj.customers.simloud.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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