tm1sales.tmaws.io

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:d8:0d:bb:b1:ea:5c:9d:91:b3:97:57:b3:ec:9d:c4 was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tm1sales.tmaws.io

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:d8:0d:bb:b1:ea:5c:9d:91:b3:97:57:b3:ec:9d:c4
Serial Number (int): 17072550612915923626276958767655198148
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 03:99:4f:59:24:0c:3c:8f:b3:d0:d6:2e:cf:21:39:32:e4:6e:05:55
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 61:0e:fd:69:e9:31:a1:79:3d:df:b0:cd:6c:51:47:81:f8:b6:b0:fd
Fingerprint (sha256): 16:3f:75:a1:ad:a5:e0:1b:17:e5:8b:e7:6f:62:de:f5:6d:9a:d4:b3:f9:82:0f:bb:74:84:99:00:1d:2e:33:e8

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate tm1sales.tmaws.io

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tm1sales.tmaws.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tm1sales.tmaws.io
*.tm1sales.pub-tmaws.io
*.tm1sales.tmaws.io

Other certificates including the domain name tmaws.io

(limited to 100 certificates)
web.ismct.prd947.preprod1.us-east-1.tmaws.io
presence.tmaws.io
sales-api3.tmaws.io
adfseu.pci-tmaws.io
git.beta-dr.tmaws.io
presence.tmaws.io
ismqatool.preprod1.us-east-1.tmaws.io
tm1sales.tmaws.io
presence.preprod.pub-tmaws.io
adfseast.pci-tmaws.io
credtool.tmaws.io
adfseast.tmaws.io
plensvc.tmaws.io
git.beta.tmaws.io
git.tmaws.io
plensvc.preprod1.tmaws.io
ccm.preprod1.us-east-1.prod-tmaws.io
maps.tmaws.io
adfswest.pci-tmaws.io
grts.tmaws.io
presence.tmaws.io
nexus.tmaws.io
sonar.tmaws.io
ismqatool.preprod1.us-east-1.tmaws.io
presence.tmaws.io
tm-bb-api.pub.tmaws.io
ccm.prod1.us-east-1.prod-tmaws.io
git.tmaws.io
*.git.beta.tmaws.io
presence.tmaws.io
presence.prod.us-east-1.pub-tmaws.io
grafana.tmaws.io
presence.tmaws.io
git.beta.tmaws.io
presence.preprod.us-west-2.pub-tmaws.io
plensvc.tmaws.io
presence.preprod.pub-tmaws.io
presence.prod.us-west-2.pub-tmaws.io
inventory.tmaws.io
git.tmaws.io
ismqatool.prod1.us-west-2.tmaws.io
presence.tmaws.io
presence.preprod.pub-tmaws.io
tinyurl.tmaws.io
sales-api3.ppub-tmaws.io
grts.beta.tmaws.io
*.pim.tmaws.io
inventory-critical.tmaws.io
adfswest.pci-tmaws.io
adfsau.pci-tmaws.io
sdr-proxy.nonprod-tmaws.io
kube-ssl-test-nonprod.tmaws.io
presence.tmaws.io
presence.prod.us-west-2.pub-tmaws.io
web.ismct.prd947.preprod1.us-east-1.tmaws.io
presence.preprod.us-west-2.pub-tmaws.io
tm1print.tmaws.io
presence.tmaws.io
sales-api1.tmaws.io
git.critical-dr.tmaws.io
preprod1.sonar.tmaws.io
ismqatool.prod1.us-east-1.tmaws.io
adfswest.tmaws.io
pim.tmaws.io
*.pim.tmaws.io
grafana.tmaws.io
pim.tmaws.io
plensvc.preprod1.tmaws.io
adfseast.tmaws.io
console.tmaws.io
testcreation.tmaws.io
sonar.tmaws.io
presence.prod.us-east-1.pub-tmaws.io
ccm.preprod1.us-west-2.prod-tmaws.io
entry.tmaws.io
onboarding.tmaws.io
presence.tmaws.io
presence.preprod.pub-tmaws.io
presence.preprod.us-west-2.pub-tmaws.io
*.git.beta-dr.tmaws.io
presence.tmaws.io
ccm.prod1.us-west-2.prod-tmaws.io
adfseast.pci-tmaws.io
plensvc.tmaws.io
git.beta.tmaws.io
presence.prod.us-west-2.pub-tmaws.io
adfseast-preprod.tmaws.io
adfswest.pci-tmaws.io
tm-bb-api-preprod.pub.tmaws.io
presence.tmaws.io
presence.tmaws.io
adfseast.pci-tmaws.io
git.beta.tmaws.io
presence.preprod.us-west-2.pub-tmaws.io
ccm.prod1.us-west-2.prod-tmaws.io
adfseast.pci-tmaws.io
sales-api1.ppub-tmaws.io
presence.tmaws.io
adfseast.pci-tmaws.io
presence.tmaws.io

Certificate

The complete raw certificate details for tm1sales.tmaws.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpIdwHn9I3ylEltXQvxU
rqemXd5gaMn27HCF7MwixA/kx1KOq9KjibuOvKxroGfjlaCOgTkygAVET4SDp377
Odh5XNMPjvoaM8XaTsdeefEEyStWPrJ1N9xIsM03s2gmSMptaMkuoO1kQDOV7pAw
EWs7d+GItv3zNIpcQ8bxi/Rv4z8kivCXBrX7Wzko/RTR96HeytF57rKI/M7lTbWd
Qc8MMTyE843vv5FPv4cdHItuWDJ3WKsfrDHDgFgQRdHzh7aJ9YGh+tCgB+tD0s2W
xCX6xtX14/j/W2AJt5Xwtc011hPx/CkwLey17/JTRLLHETqylTZxOXzEJ9pHgKlb
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17072550612915923626276958767655198148
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tm1sales.tmaws.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23047424096458233592485542907701593005078357030680499812549102831646823607022317335214505606028296297401420074198190800677382289442996547189861574814841419908130131838825320170371002682188393695539961825611263355053500693314205721307461545823996162834861071313947116874810223206820859782066828254544985989513715386840681423304162412073361018354309655967216777797641870230304928529098378744030172533896030173090800427178654771048790268731668156902775630174641651989645670013756168416540775900357788379611574188309811996961356533659616930105031425881703990709260494338737603803676357075618175349814918337157062139140887
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							03994f59240c3c8fb3d0d62ecf213932e46e0555
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tm1sales.tmaws.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tm1sales.pub-tmaws.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tm1sales.tmaws.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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