wildcard.lower-getty.cloud

Issued by Amazon

About this certificate

This digital certificate with serial number 0f:59:f2:67:75:df:e5:57:a4:54:c8:18:89:aa:cc:b9 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=wildcard.lower-getty.cloud

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:59:f2:67:75:df:e5:57:a4:54:c8:18:89:aa:cc:b9
Serial Number (int): 20405450897288580071469743683565964473
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f8:5e:bf:d8:f2:dd:9c:cb:0d:6b:49:79:74:5b:95:6c:7b:71:6b:e5
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 77:6e:27:2b:83:74:1f:f9:22:71:19:eb:53:0a:5a:ff:b1:0a:17:73
Fingerprint (sha256): 13:68:92:92:ac:f7:2d:ce:73:30:45:18:24:d0:9a:ab:73:2c:b5:4c:89:25:ce:74:ce:ec:46:a2:27:93:43:af

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate wildcard.lower-getty.cloud

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wildcard.lower-getty.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wildcard.lower-getty.cloud
*.lower-getty.cloud

Other certificates including the domain name lower-getty.cloud

(limited to 100 certificates)
lower-customcontent.stage-gettyimages.com
use1-unipassthru.lower-getty.cloud
wildcard.lower-getty.cloud
stg-mm.lower-getty.cloud
stg-in.lower-getty.cloud
usw2-unipassthru.lower-getty.cloud
wildcard.lower-getty.cloud
stg-in.lower-getty.cloud
wildcard.lower-getty.cloud
*.autocomplete.keywordservice.service.lower-getty.cloud
partnerportal.lower-getty.cloud
partnerportal.lower-getty.cloud
secondary-stg-mm.lower-getty.cloud
*.autocomplete.keywordservice.service.lower-getty.cloud
stg-in.lower-getty.cloud
metrics.usw2.lower-getty.cloud
wildcard.lower-getty.cloud
*.lower-getty.cloud
customcontent.lower-getty.cloud
stg-mm.lower-getty.cloud
usw2-stage-unipassthru.lower-getty.cloud
*.lower-getty.cloud
stg-in.lower-getty.cloud
stg-in.lower-getty.cloud
lower-customcontent.stage-gettyimages.com
stg-mm.lower-getty.cloud
wildcard.lower-getty.cloud
stg-mm.lower-getty.cloud
usw2-unipassthru.lower-getty.cloud
stg-mms-api.lower-getty.cloud
*.autocomplete.keywordservice.service.lower-getty.cloud
stg-in.lower-getty.cloud
secondary-stg-mm.lower-getty.cloud
*.lower-getty.cloud
wildcard.splunk.lower-getty.cloud
customcontent.lower-getty.cloud
stg-in.lower-getty.cloud
wildcard.lower-getty.cloud
appdev-platform.lower-getty.cloud
lower-customcontent.stage-gettyimages.com
lower-customcontent.stage-gettyimages.com
*.asset.lower-getty.cloud
*.asset.lower-getty.cloud
lower-customcontent.stage-gettyimages.com
customcontent.stage-gettyimages.com
lower-customcontent.stage-gettyimages.com
appdev-platform.lower-getty.cloud
stg-in.lower-getty.cloud
stg-mm.lower-getty.cloud
partnerportal.lower-getty.cloud
lower-customcontent.stage-gettyimages.com
stg-in.lower-getty.cloud
stg-mm.lower-getty.cloud
*.entapp-integr.lower-getty.cloud
stg-in.lower-getty.cloud
lower-customcontent.stage-gettyimages.com
stg-mm.lower-getty.cloud
customcontent.lower-getty.cloud
use1-unipassthru.lower-getty.cloud
*.asset.lower-getty.cloud
stg-mm.lower-getty.cloud
metrics.usw2.lower-getty.cloud
lower-customcontent.stage-gettyimages.com
stg-mm.lower-getty.cloud
lower-customcontent.stage-gettyimages.com
stg-mm.lower-getty.cloud
stg-mm.lower-getty.cloud
*.lower-getty.cloud
wildcard.lower-getty.cloud
lower-customcontent.stage-gettyimages.com
secondary-stg-in.lower-getty.cloud
stg-in.lower-getty.cloud
stg-mm.lower-getty.cloud
*.entapp-integr.lower-getty.cloud
stg-mm.lower-getty.cloud
lower-customcontent.stage-gettyimages.com
*.asset.lower-getty.cloud
splunk.lower-getty.cloud
wildcard.splunk.lower-getty.cloud
stg-mm.lower-getty.cloud
stg-mms-api.lower-getty.cloud
partnerportal.lower-getty.cloud
stg-mms-ws.lower-getty.cloud
*.lower-getty.cloud
stg-mm.lower-getty.cloud
stg-in.lower-getty.cloud
*.asset.lower-getty.cloud
*.entapp-integr.lower-getty.cloud

Certificate

The complete raw certificate details for wildcard.lower-getty.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCsXPTwyzVcjGntnDlfj
BkHTZp8+A6MMpJbFXXTmiOD/ZPn5YLVy05btiEAT8BKLXDx4YXSiMleeMkFkH9G5
QX7/hjSx/pGoTEDloyPqAA3MgzDrQavU+mMJHbrEV0HnqSKITMJfi3U5w55EbdCW
0avnq4xIFo6pYo4De7j0CA4EkRM4fKPDlBRZHgWAPQSu5j4bPCY2fUD4IH+GpP6C
i3AYfFrmVJyt1tNL4SLphHaDo4C4YL3fkuhONGIdpa6pLvWMjy3aJavvxdA4GoSM
an07ZT3MTRHglHwr9HvgX+Grsp25bM9hnbCmml/TwJkaltNsePj4PHUPxAPKULgk
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20405450897288580071469743683565964473
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wildcard.lower-getty.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23249096968403507394934805998961856503868653585978102367066587884616592684803356451886380792759486531419027764307113746699734023778629178625722276533411300273910569029654321781179737314827720727913132264317138838268095425788212665612193740097019447924410193242011656946518471514574451369861570376514049980969588718813297322482212006527513670243844206151149412403780649486020813756163354812280288372308293571790033533984781766694964329836691087242127380991715787210439433659876845370823171755514048173606764734671352231124471807023167897380053751379986242397892537710130930627446763378667315178987722565968416638248087
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f85ebfd8f2dd9ccb0d6b4979745b956c7b716be5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wildcard.lower-getty.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lower-getty.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001696a1e449b0000040300483046022100faaa8d5cbb8de7c97571364d366cb325e86e5abde5378bd36f681f20e6e7f115022100ae7db6a3e952498070c449843fad5df4d50fffbfd4994afc6a5409168b55241f0077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001696a1e45d90000040300483046022100834aa6dea7d4aa9e37f2bb9ac1723576449f6000f8ae0be5f7647b408c9b8f3602210097415c8c45799c8de81e6a84243cf1844e6b356efbad505586cc124251a94972
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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