*.preprod.heavenhr.com

Issued by Amazon

About this certificate

This digital certificate with serial number 01:c1:6b:87:9d:59:86:44:99:0e:65:c5:7f:d5:0c:4d was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.preprod.heavenhr.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:c1:6b:87:9d:59:86:44:99:0e:65:c5:7f:d5:0c:4d
Serial Number (int): 2333522251809042762044174103592897613
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 5d:1a:bb:c6:04:97:54:74:d7:78:c3:16:0d:9e:38:55:a3:48:69:08
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): cd:c2:e5:f2:32:4d:26:b9:a4:27:b2:4c:81:c1:57:78:0a:db:83:bd
Fingerprint (sha256): 16:e3:fd:b5:f2:7a:be:ec:8f:11:1c:ff:b2:23:67:b4:64:2e:0c:ef:6e:12:23:c1:56:81:5e:f9:44:5f:89:6f

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.preprod.heavenhr.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.preprod.heavenhr.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.preprod.heavenhr.com
preprod.heavenhr.com
*.preprod.heavenhr.de
preprod.heavenhr.de

Other certificates including the domain name heavenhr.com

(limited to 100 certificates)
tls.automattic.com
tls.automattic.com
support.qualityspa.fr
*.staging.heavenhr.com
staff.ncchomelearning.co.uk
www.heavenhr.com
tls.automattic.com
help.morewithproject.com
*.heavenhr.com
*.preprod.heavenhr.com
www.heavenhr.com
www.heavenhr.com
www.heavenhr.com
tls.automattic.com
desk.heavenhr.de
*.heavenhr.com
www.heavenhr.com
incapsula.com
*.integration.heavenhr.com
www.heavenhr.com
www.heavenhr.com
tls.automattic.com
incapsula.com
support.xpence.uk
support.checkpointsolutions.co.uk
*.heavenhr.com
*.heavenhr.com
www.heavenhr.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
tls.automattic.com
*.integration.heavenhr.com
*.heavenhr.com
www.heavenhr.com
tls.automattic.com
*.staging.heavenhr.com
incapsula.com
tls.automattic.com
www.heavenhr.com
tls.automattic.com
support.xpence.uk
incapsula.com
tls.automattic.com
tls.automattic.com
www.heavenhr.com
tls.automattic.com
tls.automattic.com
support.wowing.io
*.heavenhr.com
tls.automattic.com
www.heavenhr.com
www.heavenhr.com
*.heavenhr.com
www.heavenhr.com
*.preprod.heavenhr.com
tls.automattic.com
tls.automattic.com
support-test.flocash.com
*.staging.heavenhr.com
lohngenau.heavenhr.com
tls.automattic.com
payment.heavenhr.com
support.xpence.uk
tls.automattic.com
*.heavenhr.com
www.heavenhr.com
incapsula.com
tls.automattic.com
tls.automattic.com
*.staging.heavenhr.com
www.heavenhr.com
*.heavenhr.com
tls.automattic.com
tls.automattic.com
porr.idealgrupa.pl
soporte.blancoseguros.es
tls.automattic.com

Certificate

The complete raw certificate details for *.preprod.heavenhr.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIExDCCA6ygAwIBAgIQAcFrh51ZhkSZDmXFf9UMTTANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTEyMDQwMDAwMDBaFw0yMTAxMDQx
MjAwMDBaMCExHzAdBgNVBAMMFioucHJlcHJvZC5oZWF2ZW5oci5jb20wggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKO8jCeBNqFgzMzFZ5OashgRyrhODR
u2SekajjDxWBCFjt5a9+hndmv0P//M5C7RuU1FA9CFTvIx9wZbCkYwp83FbZQuUT
Yl6lyi7ySHeA+AE7CRV6aQYWKEj3SBdaXRZZ3Tpc+iUKpKLXX9UW3kmYozA4pVSD
CugDVzUSWtssqKN2YyvXwDR4YEra18safL5nxibCsPNSIzTDt60I5i2fGltr20aa
agY0ZApdoLZv1t0DuLmQ9pwUo1FutX0al5K7krjxiymyrh6GoYsXQb+oQswFVte+
p1bwH3809/k9SjW9znRt04yfblW1D9SkGNXRGGf4UJpINob71Xe2qYYVAgMBAAGj
ggHRMIIBzTAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4E
FgQUXRq7xgSXVHTXeMMWDZ44VaNIaQgwYwYDVR0RBFwwWoIWKi5wcmVwcm9kLmhl
YXZlbmhyLmNvbYIUcHJlcHJvZC5oZWF2ZW5oci5jb22CFSoucHJlcHJvZC5oZWF2
ZW5oci5kZYITcHJlcHJvZC5oZWF2ZW5oci5kZTAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0
dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNVHSAE
GTAXMAsGCWCGSAGG/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsG
AQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYB
BQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNy
dDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEB
CwUAA4IBAQCOR0bfp8HFTFSmpjIs5HqSKQkWod40oa8k1xfqd+cDCPGdH6Jw+6ID
wH7BxtMu3sT6QVqQAy24haIl72vnQooc61qSD85CCPkgHn/Yt+/gw1LNr9BRZMD3
8ENVOnFlk8nuVB5VIP4OdAMMleJwQ0nBOQcmSh5WZYlziwL67IU3loFOInCTZ762
zycCzJUpCi1JF42DtDFLCfHC8YqTEc2I/eh6yLtWZECKdN5OUAP0Rtw5PWqsfIrv
h5WkYme3JaiGoa49lUb51lR0m3VFL4LSCFCRbjt4b4m9LfM4McjCZ0eERjQ+lai1
cuyvztfuG66KHgguqNGic96dQVIcT4YF
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjvIwngTahYMzMxWeTmr
IYEcq4Tg0btknpGo4w8VgQhY7eWvfoZ3Zr9D//zOQu0blNRQPQhU7yMfcGWwpGMK
fNxW2ULlE2Jepcou8kh3gPgBOwkVemkGFihI90gXWl0WWd06XPolCqSi11/VFt5J
mKMwOKVUgwroA1c1ElrbLKijdmMr18A0eGBK2tfLGny+Z8YmwrDzUiM0w7etCOYt
nxpba9tGmmoGNGQKXaC2b9bdA7i5kPacFKNRbrV9GpeSu5K48Yspsq4ehqGLF0G/
qELMBVbXvqdW8B9/NPf5PUo1vc50bdOMn25VtQ/UpBjV0Rhn+FCaSDaG+9V3tqmG
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2333522251809042762044174103592897613
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-04 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.preprod.heavenhr.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25529618299485720433463573225468521566593354296010485220310687736957413759081900050641461155493695025081763673052588793528031247363399961258644072362879301273187789584527284683716258628767202592776643622890184799972438742346218521733896483371836745070494766604979818415284614818940010059470023898546042186524557196595090606746498069109554961421285485435079247786710555381156187665655168427988775033399593636071325458317201436461129667453375096479288889636396447079985060790601032114289333739978101037954457287466681797974181669994870058434533575656909245904957272239860695357615227230978628416248999391266240346031637
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d1abbc604975474d778c3160d9e3855a3486908
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preprod.heavenhr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.heavenhr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preprod.heavenhr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.heavenhr.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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