customer-master-dev.datalake-sandbox.lfscnp.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0b:4d:71:52:82:16:63:df:a0:ef:b8:c0:d3:51:f5:e3 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=customer-master-dev.datalake-sandbox.lfscnp.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:4d:71:52:82:16:63:df:a0:ef:b8:c0:d3:51:f5:e3
Serial Number (int): 15023613260995914422081118602425136611
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 85:c1:3d:42:2a:bd:87:0b:d2:19:a8:41:f8:13:c4:6d:f0:be:64:39
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 7d:36:d3:f6:ce:5b:4b:9d:e3:85:2b:16:47:ec:d1:08:ed:68:58:f7
Fingerprint (sha256): 15:6b:9b:c0:e1:10:52:3b:a3:1a:39:bf:90:e5:9e:28:ef:c2:b1:47:94:3a:48:da:6d:30:d7:25:bf:38:9e:9e

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate customer-master-dev.datalake-sandbox.lfscnp.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for customer-master-dev.datalake-sandbox.lfscnp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

customer-master-dev.datalake-sandbox.lfscnp.com

Other certificates including the domain name lfscnp.com

(limited to 100 certificates)
lpay-fraud-mock-test-stub.test.lpay-np.lfscnp.com
37degress.digitalweb.lfscnp.com
lpay-monolith-admin-dev.dev.lpayapp-sandbox.lfscnp.com
ach-details.originations-np.lfscnp.com
go-api-chaos-eng-dev.002.mytest2.sandbox.lfscnp.com
consumer-fraud-service.sandbox.o10s.lfscnp.com
service-accounts-test.new.01.test.eapi-np.lfscnp.com
imperva.com
ecs-demo-cnp-dev.002.mytest2.sandbox.lfscnp.com
lpay-app-originations-dev-au.dev.lpayapp-sandbox.lfscnp.com
pl-service.01.prod.eapi-pci.lfscnp.com
dnb-test2.001.development.odds-np.lfscnp.com
genoapay-api-test.np.o10s.lfscnp.com
70e8843709e812f7ca0d9.prod.merchant-integration-bnpl.lfscnp.com
appsec-helloworld-dev.security-sandbox.lfscnp.com
motorapp-prod.001.production.odds.lfscnp.com
customer-master-prod.datalake-prod.lfscnp.com
genoapay.admin.dx-prod.lfscnp.com
039004c7f9672353f72.001.development.datalake-sandbox.lfscnp.com
kong-service-test.test.se-platform-np.lfscnp.com
test.001.testapp.sandbox.lfscnp.com
0d8ba5758bf1f14a2776681d43b3f8a53.01.test.eapi-pcinp.lfscnp.com
pin-change-service-test.01.test.eapi-pcinp.lfscnp.com
auth.dev.se-platform-np.lfscnp.com
test.001.testapp.sandbox.lfscnp.com
buildkite-webhook-datadog-event-dev.01.dev.eapi-np.lfscnp.com
62df4d98fe86184a5c9f8e006e715bd8.collections-sandbox.lfscnp.com
imperva.com
staging.wetcms.digitalweb-np.lfscnp.com
notification-service-test.01.test.eapi-pcinp.lfscnp.com
lpay-service-equifax-dev4-au.dev.lpayapp-dev4.lfscnp.com
customer-support-service-dev.sandbox.eapi.lfscnp.com
cnp-ecs-demo-dev.002.mytest2.sandbox.lfscnp.com
cards-visioncics-adapter-dev.01.dev.eapi-pcinp.lfscnp.com
react-ts-admin-test.test.sandbox.lfscnp.com
imperva.com
latitudefinancial-co-nz.digitalweb-np.lfscnp.com
*.okta-custom.dev.se-platform-np.lfscnp.com
responsysassets.prod.digitalweb.lfscnp.com
imperva.com
imperva.com
evolve-dev2.001.development.odds-np.lfscnp.com
6e1ef36f1003de406a7b68ef.001.development.data-cde-np.lfscnp.com
coreapi-dev2.001.development.odds-np.lfscnp.com
accounts-link-unlinked.001.production.eapi.lfscnp.com
staging.lowratemastercard-com-au.digitalweb-np.lfscnp.com
cf-mobile-config.mobile.lfscnp.com
lpay-service-consumer-dev2.dev.lpayapp-dev2.lfscnp.com
odds-authentications.test.odds-np.lfscnp.com
vision-haproxy-prod.dx-cde-prod.lfscnp.com
vision-adapter-dev.new.01.dev.eapi-pcinp.lfscnp.com
7d5265b7789f253ebc3.001.development.datalake-sandbox.lfscnp.com
doc-upload.originations-np.lfscnp.com
staging.latitudefinancial.digitalweb-np.lfscnp.com
oscar.nonprod.digitalservicing-np.lfscnp.com
soft-quote-proxy-test.np.o10s.lfscnp.com
apply-mock-response-dev.merchant-services-sandbox.lfscnp.com
*.staging.gomastercard.com.digitalweb-np.lfscnp.com
034ac86c3ec7e392b5acf71a0f55b8fb750.dev.lpayapp-dev1.lfscnp.com
cnp-socket-mode-slackbot-starter-test.test.sandbox.lfscnp.com
staging.umiloans.digitalweb-np.lfscnp.com
*.staging.28degreescard.digitalweb-np.lfscnp.com
consumer-risk-service-dev.sandbox.o10s.lfscnp.com
coreapi-prod.001.production.odds.lfscnp.com
appsec-dojo-prod.security.lfscnp.com
instinct-prod.dx-cde-prod.lfscnp.com
cnp-access-manager-prod.prod.auth.lfscnp.com
*.okta-custom.prod.se-platform.lfscnp.com
appsecd-github-webhook-test.security-test.lfscnp.com
imperva.com
12b20401b771de810734b8938349.001.development.odds-np.lfscnp.com
staging.buyersedge.digitalweb-np.lfscnp.com
service-products.01.prod.eapi.lfscnp.com
account-linking-v2-prod.new.01.prod.eapi-pci.lfscnp.com
api.lfscnp.com
lpay-service-account-dev.dev.lpayapp-sandbox.lfscnp.com
temenos-service-poc-dev.sandbox.eapi.lfscnp.com
imperva.com
customer-master-dev.datalake-sandbox.lfscnp.com
servicing-customer-master-dev.sandbox.eapi.lfscnp.com
lpay-service-dowjones-sandbox.sandbox.lpay-sandbox.lfscnp.com
*.37degress.digitalweb-np.lfscnp.com
collections-pcc-service-test.collections-nonprod.lfscnp.com
collections-pcc-service-dev.collections-nonprod.lfscnp.com
applybuy-vision-bridge.prod.merchant-wallet.lfscnp.com
wetcms.prod.digitalweb.lfscnp.com
appsec-web-ui-prod.security-sandbox.lfscnp.com
lpay-app-originations-dev2-au.dev.lpayapp-dev2.lfscnp.com
poi-service-prod.prod.o10s.lfscnp.com
appsec-github-dev.security-sandbox.lfscnp.com
832c9417d0aaa792294e4dd7d3c698a.new.01.prod.eapi-pci.lfscnp.com
tcs-bancs-service-prod.new.01.prod.eapi.lfscnp.com
documents-service-dev.01.dev.eapi-pcinp.lfscnp.com
nz-apply-merchant-redirect.originations-np.lfscnp.com
lpay-service-mail-api-dev.dev.lpayapp-sandbox.lfscnp.com
www.tmpkong.apigateway-sandbox.lfscnp.com
13790fed5a068feda1caf0e50145.001.development.odds-np.lfscnp.com
lpay-app-originations-test-nz.test.lpay-np.lfscnp.com
lfs-ui.digitalservicing-np.lfscnp.com
8e062ea304a968893b3fc8edd7e4.001.development.odds-np.lfscnp.com

Certificate

The complete raw certificate details for customer-master-dev.datalake-sandbox.lfscnp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvViCkcVjgVs/3/4ER87l
KP8dBLl4QTgTrd9vpQ3rO3Hdy1ZRQvlrcmtg5q/rCHVxEE5XcRlxNv+QmhbmUAEz
9ylC8tcbp5RnV07Wv5rF440IQ9LfakPE7eYIucBtO3ayz50EwGQWAAxdBo7aS3uu
y1KQPrTUE16HUxtG0K78vb8+9pJogoHWURZfkzjEAqxETP9jE0VI09UOqlM9cj2e
WqOedVm00XvXWVtjnG3v59wCSfFwDdi+HonXOOFtJpdINzP1xTTi+AIHhoe8OtUe
YhT6MXQ98upB3o+rC2IDdC1n1RXZPQZ0FTpgwhV8YtruE+HFKPjvPNej/pkmU4pE
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15023613260995914422081118602425136611
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-04 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'customer-master-dev.datalake-sandbox.lfscnp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23902685564432012553482604057238648122900564102983727223769328482600125706156652345716080751739492490126085354548354636924517323092183700020798240496967756428392383319993915982358807232456170365139037290116254301679665876401654353818426798230501947969640049143680240728850673225767215208945024273440778505153563499987671438597040721427450918652156849841168791780602285734317859484300304347048844972233198680228112542770698868885286141104776698144328959385169408374253582446326501571729964127069017787045543626215242100273260536828689938581954896338815897436952500730681062671822612411423296948875328870818593922237549
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							85c13d422abd870bd219a841f813c46df0be6439
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer-master-dev.datalake-sandbox.lfscnp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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