canvas-stage.adtech.com

- ADTECH AG -

Issued by AOL Member CA

About this certificate

This digital certificate with serial number a7:82:1e:7c:25:95:a3:17:5e:0b:3d:79:44:45:a9:bc was issued on by America Online Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

ADTECH AG

Organization: ADTECH AG
State / Province: Hessen
Locality: Frankfurt
Country: DE

America Online Inc.

Organization: America Online Inc.
State / Province: Virginia
Locality: Dulles
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a7:82:1e:7c:25:95:a3:17:5e:0b:3d:79:44:45:a9:bc
Serial Number (int): 222656692195902585172836069999297014204
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 24:7a:2a:2e:1d:c0:b8:af:81:e3:f4:01:87:18:5a:76:ba:b1:30:a2
AuthorityKeyId: 61:a6:99:6d:24:9f:0e:11:88:e6:39:e0:fe:74:d1:05:69:52:a9:43

Fingerprint (sha1): 7d:53:ee:ff:6a:66:37:df:5f:7d:5c:1d:6a:7a:ad:27:b0:b3:24:37
Fingerprint (sha256): 19:d6:a9:0f:0e:35:6c:b3:24:b0:af:7e:df:3c:0c:3d:76:20:30:22:6a:0f:3e:3a:3a:5b:68:ae:6b:85:73:80


Revocation information

OCSP Server: http://ocsp.web.aol.com/ocsp
CRL Distribution Point: http://crl.aol.com/AOLMSPKI/aolServerCert.crl

Check the revocation status for certificate canvas-stage.adtech.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for canvas-stage.adtech.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

canvas-stage.adtech.com

Other certificates including the domain name adtech.com

(limited to 100 certificates)
onebyaol.com
spacewalk.prod.adtech.aolcloud.net
spacewalk.eu-fra.adtech.com
dev-scheduler001.eu-fra.adtech.com
jenkins001.us-ec.adtech.com
zenoss.adtech.com
api.canvas-qa.adtech.com
jira.adtech.com
canvas-qa.adtech.com
canvas-stage.adtech.com
newfront.aol.com
scheduler003.us-ec.adtech.com
research.adtech.com
canvas-stage.adtech.com
canvas.adtech.com
spacewalk.prod.adtech.aolcloud.net
spacewalk.prod.adtech.aolcloud.net
spacewalk-proxy001.eu-fra.adtech.com
spacewalk.eu-fra.adtech.com
spacewalk.us-ec.adtech.com
api.canvas.adtech.com
wdm.adtech.com
build-cpp.eu-fra.adtech.com
spacewalk.adtech.com
spacewalk.prod.adtech.aolcloud.net
spacewalk.prod.adtech.aolcloud.net
qa-scheduler003.eu-fra.adtech.com
scheduler003.us-ec.adtech.com
spacewalk.prod.adtech.aolcloud.net
qaa-scheduler003.eu-fra.adtech.com
cstest.adtech.com
*.eu-fra.adtech.com
cstest.adtech.com
ansible-jenkins001.us-ec.adtech.com
api.canvas-stage.adtech.com
spacewalk.scd.us.adtech.com
spacewalk.toy.as.adtech.com
spacewalk.prod.adtech.aolcloud.net
spacewalk.eu-amt.adtech.com
canvas.adtech.com
ansible-jenkins002.us-ec.adtech.com
qa-scheduler003.eu-fra.adtech.com
scheduler001.eu-fra.adtech.com
ersa-api.us-ec.adtech.com
onebyaol.com
*.eu-fra.adtech.com
spacewalk.us-ec.adtech.com
svn.adtech.de
spacewalk.prod.adtech.aolcloud.net
classic-aerospike.us-ec.adtech.com
dev-scheduler003.eu-fra.adtech.com
mail.advertising.com
intranet.adtech.com
api.canvas.adtech.com

Certificate

The complete raw certificate details for canvas-stage.adtech.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzkTfHks5aQY+oUAo8zk2
4xzv1HJRp5/rpN3/tVm+ro0fsTQ7pOoCJhevjKq+iFE9ryKoehLWcYS5uv8GEMFG
hnzpyEA8HdiupQYJD2m9k4kUZaIiGZ3bWHMOtlqSBSTGiOLxSetDJxk7wKodR2yU
GhePGhtImJSwiOz51QxVRkI5N6lnMnJMD69SQihSY6FhEC7dLl42X2p+iuBrjsOA
IupeCDsqB2MntqxUg1zTUItFvp3AQX2CBAM+cSUW/aNL+u3Qr4zO8HH3ie+We6NY
Z/PR/RHAzq4ACcXtmmjJK0JtpI/dIV/gVDIP6JrX19wsM/WH/I0chNXr5GBB+PqB
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 222656692195902585172836069999297014204
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dulles'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'America Online Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AOL Member CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-11-19 16:59:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-19 16:59:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Frankfurt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ADTECH AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'canvas-stage.adtech.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26039052653045127500989258155133173574017159180549065420578548138389993858452058403870669986922473561505815535492506743948652976885717065997140021623706186236911101321323496937940057630540621302796544990967323430979193917166877873772875954589605416278745762152148954217145174121270551022957064898105644812376738168365598234785911719779562165864811022914670300651459555659688179125667594478731312882490333583845023935294611297005061993240365532066471761366034243987311067556588007146365246569848024365662353690125387883656698896328748463929134170513116703168237006105498674518777846559196275597033926104911843786654101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 61a6996d249f0e1188e639e0fe74d1056952a943
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.aol.com/AOLMSPKI/aolServerCert.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.web.aol.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canvas-stage.adtech.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.1066.1.1000.1.0.2.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://pki-info.aol.com/AOLMSPKI/index.html'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							247a2a2e1dc0b8af81e3f40187185a76bab130a2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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