lb.karan.dev.neighbourly.co.nz

Issued by Amazon

About this certificate

This digital certificate with serial number 02:29:bb:7f:6d:39:6d:a9:d1:75:13:c9:e9:da:16:28 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lb.karan.dev.neighbourly.co.nz

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:29:bb:7f:6d:39:6d:a9:d1:75:13:c9:e9:da:16:28
Serial Number (int): 2875143069145574565301536072467617320
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 59:ac:8d:84:36:64:4b:4c:aa:d8:66:85:f4:78:96:3b:46:ee:70:46
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): f2:86:bb:82:ca:90:06:c3:db:3f:68:be:a5:03:a1:32:df:2c:9d:f2
Fingerprint (sha256): 1d:3b:b2:e4:7b:00:f2:25:d9:7a:ff:a8:a5:37:fe:34:3f:40:03:7e:fc:24:81:a1:32:e7:a9:c2:97:ef:69:b8

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate lb.karan.dev.neighbourly.co.nz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lb.karan.dev.neighbourly.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lb.karan.dev.neighbourly.co.nz

Other certificates including the domain name neighbourly.co.nz

(limited to 100 certificates)
cdn.nikolay.dev.neighbourly.co.nz
cdn.thai.dev.neighbourly.co.nz
kalamazooshopping.mlive.com
local.flamboroughreview.com
lb.preprod.dev.neighbourly.co.nz
local.theameryfreepress.com
local.panolawatchman.com
local.thefirsthundredmiles.com
*.neighbourly.co.nz
local.crestonnews.com
c3.shared.global.fastly.net
cdn.stuff-coupon.thai.dev.neighbourly.co.nz
c3.shared.global.fastly.net
lb.jimmy.dev.neighbourly.co.nz
cdn.inyoung.dev.neighbourly.co.nz
somni.neighbourly.co.nz
lb.oliver.dev.neighbourly.co.nz
local.thegazette.com
*.devint.neighbourly.co.nz
cdn.oliver.dev.neighbourly.co.nz
shop.neighbourly.co.nz
eastern-courier.origami.neighbourly.co.nz
local.dissexpress.co.uk
local.bensonnews-sun.com
cdn.stuff-coupon.thai.dev.neighbourly.co.nz
*.neighbourly.co.nz
cognito.dev.neighbourly.co.nz
lb.stuff-coupon.oliver.dev.neighbourly.co.nz
c3.shared.global.fastly.net
local.summitdaily.com
local.alexcityoutlook.com
local.wahpetondailynews.com
local.pilotweb.aero
local.daily-chronicle.com
conroe.communityimpact.com
nor-west-news.origami.neighbourly.co.nz
lb.stuff-coupon.thai.dev.neighbourly.co.nz
peterborough.mykawartha.com
neighbourly.co.nz
c3.shared.global.fastly.net
lb.staging5.dev.neighbourly.co.nz
lb.anil.dev.neighbourly.co.nz
somni.neighbourly.co.nz
local.airgunshooting.co.uk
lb.karan.dev.neighbourly.co.nz
c3.shared.global.fastly.net
lb.property-admin.dev.neighbourly.co.nz
auth.dev.neighbourly.co.nz
*.devint.neighbourly.co.nz
lb.stuff-coupon.staging.dev.neighbourly.co.nz
local.centraloregon.pamplinmedia.com
the-nelson-leader.origami.neighbourly.co.nz
cdn.oliver.dev.neighbourly.co.nz
local.news-banner.com
flintshopping.mlive.com
local.ftimes.com
*.neighbourly.co.nz
local.dglobe.com
lb.duong.dev.neighbourly.co.nz
c3.shared.global.fastly.net
c3.shared.global.fastly.net
*.neighbourly.co.nz
western-leader.origami.neighbourly.co.nz
lb.neighbourly-user-data.oliver.dev.neighbourly.co.nz
cdn.preprod.dev.neighbourly.co.nz
portperry.durhamregion.com
shop.neighbourly.co.nz
c3.shared.global.fastly.net
local.willcoxrangenews.com
tomball.communityimpact.com
*.neighbourly.co.nz
api.user-data.neighbourly.co.nz
cdn.stuff-coupon.staging.dev.neighbourly.co.nz
lb.oliver2.dev.neighbourly.co.nz
georgina.yorkregion.com
cdn.duong.dev.neighbourly.co.nz
c3.shared.global.fastly.net
local.ottawasun.com
shop.neighbourly.co.nz
newhomes.yorkregion.com
lb.jeremy.dev.neighbourly.co.nz
c3.shared.global.fastly.net
*.dev.neighbourly.co.nz
local.hertsad.co.uk
lb.shershad-property.dev.neighbourly.co.nz
c3.shared.global.fastly.net
*.neighbourly.co.nz
cdn.rafik.dev.neighbourly.co.nz
lb.oliver2.dev.neighbourly.co.nz
*.neighbourly.co.nz
lb.jennie.dev.neighbourly.co.nz
km.local.kentonline.co.uk
local.bemidjipioneer.com
local.cambstimes.co.uk
c3.shared.global.fastly.net
whangarei-leader.origami.neighbourly.co.nz
local.wisbechstandard.co.uk
somni.neighbourly.co.nz
cdn.staging4.dev.neighbourly.co.nz
local.moodycountyenterprise.com

Certificate

The complete raw certificate details for lb.karan.dev.neighbourly.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eQma5PC4B+G8SueYvV/
p+mANxmu34Y8QGOrz5cwsB2AXuekhRffvZSoKKUuRgTR/WseYPZHY/0Jxhgf7VRW
A4HBmlejw7DRhivbBS5ngYwpoQzpgSJDOlvF6kJkYi/Ka6PtbFmTTaxXuB5/s9+M
MqKhvtCEh9ALT9w+lQ8cfsUIm4H/7MzQ9dp6CFC0H9C1GFyBB3ohdW7Tm8e+3NMj
TU+ZpjXiKqGt2mzFJvcGSaLRJIpb0OKVXVPD7xhvQWAz2uAu0pesRPlw9MKmW2Hh
/EOTS17DypxpuScWtLgOzdX1CIlbswlph23R3zlgTURK2LbGJQ25nxsrmw7hHSpu
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2875143069145574565301536072467617320
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lb.karan.dev.neighbourly.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27001263954842909131144603821575245470065986497795454243987115405334586744108538878524894869555265573179699850896746543931217939166664251560266354502827819144212822177202452568082044832930738114414908033474144601539465470379587059146497901866188688873456182333164919724092525126087979915386959964092850974473904131630051175648629264837208988097190659260492282984813273251507462970467800411622180108398282633862022647290794835062427009985046164622967843355145239514676666213472400790714562854295396965949405760371260526846544103887044877535125612904421791892357231509876087055457133335068488952497753669353424145772257
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							59ac8d8436644b4caad86685f478963b46ee7046
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lb.karan.dev.neighbourly.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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