dev.controlant.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0b:69:10:31:39:e1:3b:19:ab:91:0e:e4:91:65:2b:31 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dev.controlant.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:69:10:31:39:e1:3b:19:ab:91:0e:e4:91:65:2b:31
Serial Number (int): 15167027542426786091000635477717232433
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: df:42:9a:cc:83:ff:5d:3b:0c:e0:88:6d:c6:32:5f:ec:3e:19:5d:35
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): ff:db:9e:f5:82:7c:85:be:04:2a:ce:ce:68:b0:cb:64:03:c3:c0:58
Fingerprint (sha256): 19:46:94:15:08:56:02:12:e9:3d:03:bd:a1:3c:cb:7c:a9:e4:7d:36:3b:44:73:3c:b8:4b:29:77:c0:21:08:4c

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate dev.controlant.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev.controlant.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.controlant.com
*.development.controlant.com
*.dev.controlant.com
development.controlant.com

Other certificates including the domain name controlant.com

(limited to 100 certificates)
ult-mfe-stub-mr-mr-451.ult-sandbox.controlant.com
ult-host-mr-dg.ult-sandbox.controlant.com
private.zacharyhill.dev
ui-api-mr-mr-307.ult-sandbox.controlant.com
ult-host-mr-mr-302.ult-sandbox.controlant.com
ult-host-mr-mr-307.ult-sandbox.controlant.com
ult-mfe-stub-mr-mr-303.ult-sandbox.controlant.com
ult-mfe-mr-tz.ult-sandbox.controlant.com
ult-mfe-mr-mr-306.ult-sandbox.controlant.com
private.zacharyhill.dev
controlant.com
www.feriaganaderachile.cl
private.zacharyhill.dev
ult-host-mr-mr-284.ult-sandbox.controlant.com
sharing.controlant.com
private.zacharyhill.dev
status-pre.cardiff.ac.uk
private.zacharyhill.dev
private.zacharyhill.dev
private.zacharyhill.dev
api-mr-mr-303.ult-sandbox.controlant.com
ult-mfe-mr-mr-387.ult-sandbox.controlant.com
bob.controlant.com
sharing.controlant.com
*.audit-trail-mfe.sandbox.controlant.com
www.controlant.com
in.controlant.com
freebirdfindings.com
api-mr-mr-301.ult-sandbox.controlant.com
api-mr-mr-304.ult-sandbox.controlant.com
merck.bi.controlant.com
private.zacharyhill.dev
bi.test.controlant.com
modalforms.controlant.com
private.zacharyhill.dev
bi.live.controlant.com
ult-mfe-mr-dg.ult-sandbox.controlant.com
status-pre.cardiff.ac.uk
*.bi.dev.controlant.com
am-users.sandbox.controlant.com
api-mr-tz.ult-sandbox.controlant.com
private.zacharyhill.dev
testrail.controlant.com
private.zacharyhill.dev
testrail.controlant.com
api-mr-mr-296.ult-sandbox.controlant.com
private.zacharyhill.dev
private.zacharyhill.dev
ult-mfe-mr-dg.ult-sandbox.controlant.com
ult-mfe-mr-dg.ult-sandbox.controlant.com
private.zacharyhill.dev
ult-host-mr-mr-304.ult-sandbox.controlant.com
private.zacharyhill.dev
ult-mfe-mr-mr-311.ult-sandbox.controlant.com
ui-api-mr-mr-310.ult-sandbox.controlant.com
uat.controlant.com
confluence.controlant.com
ult-mfe-stub-mr-mr-311.ult-sandbox.controlant.com
registry-staging.tools.controlant.com
*.audit-trail-mfe.sandbox.controlant.com
private.zacharyhill.dev
private.zacharyhill.dev
dev.controlant.com
private.zacharyhill.dev
www.controlant.com
ult-mfe-stub-mr-tz.ult-sandbox.controlant.com
in.controlant.com
*.audit-trail-mfe.sandbox.controlant.com
ult-mfe-stub-mr-mr-301.ult-sandbox.controlant.com
ult-mfe-stub-mr-mr-310.ult-sandbox.controlant.com
in.controlant.com
flyingpaperclips.com
private.zacharyhill.dev
private.zacharyhill.dev
private.zacharyhill.dev
test.controlant.com
ult-mfe-mr-mr-310.ult-sandbox.controlant.com
private.zacharyhill.dev
private.zacharyhill.dev
testrail.controlant.com
pamacloud.auxswot.com
audit-trail-mfe.uat.controlant.com
staffmeeting.controlant.com
api-mr-mr-284.ult-sandbox.controlant.com
ult-mfe-mr-mr-385.ult-sandbox.controlant.com
test.controlant.com
private.zacharyhill.dev
search.gitlab.tools.controlant.com
ult-mfe-stub-mr-mr-389.ult-sandbox.controlant.com
confluence.controlant.com
private.zacharyhill.dev
private.zacharyhill.dev
ui-api-mr-mr-450.ult-sandbox.controlant.com
ult-mfe-mr-mr-389.ult-sandbox.controlant.com
controlant.com
private.zacharyhill.dev
ult-host-mr-mr-296.ult-sandbox.controlant.com
ult-mfe-mr-mr-450.ult-sandbox.controlant.com
ult-mfe-stub-mr-mr-390.ult-sandbox.controlant.com
ui-api-mr-mr-451.ult-sandbox.controlant.com

Certificate

The complete raw certificate details for dev.controlant.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwPXGaUR5cFkngw2kOKu
pGeHmohtmFEajM/ao/7YAnkqhSo+nsXz8lUlBc1DJr/3ClatYNvWDMTmIygagiME
rPwh9+N4eHpnSEmlsMNl2CXTrng8dgAt6UMlSgt36VSr9TXqXMiiqm0gCAMWAe+P
ekiALWzOBiQsLwzZor5mGhXKY1Rp5KBKiHobAwhMRdi7s7lmG3ELuRrwWrh2asGc
JRWhfv/dWpEY9h84W2xEBE1EQFGWIvMRYG5bNBinRCPJ6EVMFvhssnlv1kxvV5OQ
zaN56G/6jBeDbyEb8905gk+OfTHtbhUpigNk7mfxyU+YKpBVno5UP9SAQWgfM6Va
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15167027542426786091000635477717232433
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.controlant.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19568830960225322682993113682030945977284587195982403702082989699025692567691306155832064511646377272881166219031849550863444475044592625358356269760263991585777635054542695733947855533295208433061535956976723949990238998913932681066745251732101165853386381806920908786268648812128251543472670561446999848485518742094178253665374457429859518155001721893235337327942325653915462368734178490927318472648393136417772837244735392871638854967873277955941601461016476893827397505013424528333720123873311000543642034659167139923843382381693333671743646572112351328937945534959525283378963289458790222799808047086512388790791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							df429acc83ff5d3b0ce0886dc6325fec3e195d35
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.controlant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.development.controlant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.controlant.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'development.controlant.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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