*.onepassport.test2.alpiq.io

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:64:27:40:c9:5e:6b:3f:75:69:f1:e2:ee:6c:66:d3 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.onepassport.test2.alpiq.io

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:64:27:40:c9:5e:6b:3f:75:69:f1:e2:ee:6c:66:d3
Serial Number (int): 16470761782170049030716111269699282643
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c6:ff:f3:8a:60:7c:c8:60:d7:43:d8:63:a1:14:f0:d6:e5:6d:4a:09
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): ad:6f:3e:e7:3e:97:cb:29:37:fa:14:93:21:8f:e5:7b:3b:be:57:34
Fingerprint (sha256): 1d:bd:ed:2c:77:6b:cb:ad:17:f3:d7:4b:e0:e7:24:b9:2c:57:97:ba:35:28:35:05:06:09:23:e1:63:14:74:7a

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.onepassport.test2.alpiq.io

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.onepassport.test2.alpiq.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.onepassport.test2.alpiq.io

Other certificates including the domain name alpiq.io

(limited to 100 certificates)
onepassport.test2.alpiq.io
api.settlement.dev.settlement.alpiq.io
api.test.pooling.alpiq.io
api.devops.dev.phoenix.alpiq.io
dl-api.iot.alpiq.io
contract-management-backend-dev.alpiq.io
webbidding.dev.internal.alpiq.io
api.customers.dev.ems.alpiq.io
*.onepassport.onepassport-new.dev.alpiq.io
onepassport-dev.dev.alpiq.io
www.test.ems.alpiq.io
api.test.pooling.alpiq.io
console.dev.iot.alpiq.io
dl-api.iot.alpiq.io
www.ems.dev.alpiq.io
ac-api.iot.alpiq.io
api.dev.middleware.alpiq.io
api.settlement.alpiq.io
vetrocom-ui.dev.vetrocom.alpiq.io
dev.mdr.dev2.alpiq.io
api.devops.test.phoenix.alpiq.io
logging.ems.alpiq.io
api.fullsupply.test.internal.alpiq.io
api.test.internal.alpiq.io
api.ops.support.dev.backoffice.alpiq.io
api.dev.batterysimulator.alpiq.io
*.dev.plt.alpiq.io
*.link.dev.alpiq.io
api.dev.middleware.alpiq.io
api.internalbit.alpiq.io
api.internal.alpiq.io
dh-api.test.iot.alpiq.io
adminportal.api.customers.dev.ems.alpiq.io
api.customers.dev.ems.alpiq.io
am-api.dev.iot.alpiq.io
ac-api.dev.iot.alpiq.io
login.alpiq.io
calendar.dev.res.alpiq.io
api.internalbit.alpiq.io
datacatalog-ui.test.alpiq.io
erv.dev.phoenix.alpiq.io
api.preprod.ems.alpiq.io
api.dev.internal.alpiq.io
contract-management-backend-devfk.alpiq.io
manifold.dev.ds.alpiq.io
command-api.test.pooling.alpiq.io
provisioning-api.iot.alpiq.io
contract-management.test.alpiq.io
api.preprod.customers.alpiq.io
devops.dev.phoenix.alpiq.io
api.middleware.alpiq.io
pip.dev.alpiq.io
calendar.alpiq.io
contract-management-backend-devfk.alpiq.io
ppa-service.dev.pooling.alpiq.io
edge-api.dev.iot.alpiq.io
api.customers.dev.ems.alpiq.io
website-test.dev.phoenix.alpiq.io
api.ppa-service.dev.pooling.alpiq.io
customerportal.dev.ems.alpiq.io
contract-management-backend-dev.alpiq.io
about-dti-api.dev.iot.alpiq.io
api.data-catalogue.dev.alpiq.io
api.test.vetrocom.alpiq.io
onepassport.dev2.alpiq.io
api.dev.batterysimulator.alpiq.io
tsviz.test2.alpiq.io
contract-management-backend.dev.alpiq.io
pip.dev.alpiq.io
api.devops.dev.phoenix.alpiq.io
epexdev.dev.ds.alpiq.io
mdr-feature.dev2.alpiq.io
portal.dev.alpiq.io
*.onepassport.test2.alpiq.io
*.onepassport.dev.alpiq.io
*.dev.trading.alpiq.io
command-api.dev.pooling.alpiq.io
onepassport-ui-dev.alpiq.io
maven.dev.alpiq.io
*.onepassport.dev.alpiq.io
contract-management-backend-devfk.alpiq.io
*.onepassport.dev2.alpiq.io
*.onepassport.dev2.alpiq.io
contract-management-devfk.alpiq.io
mdr-feature.dev2.alpiq.io
logging.test.ems.alpiq.io
api.dataops.test.phoenix.alpiq.io
*.api.alpiq.io
onepassport.dev2.alpiq.io
*.onepassport.dev2.alpiq.io
mdr.dev2.alpiq.io
datacatalogue.alpiq.io
contract-management.dev.alpiq.io
provisioning-api.iot.alpiq.io
*.onepassport.dev.alpiq.io
assets.learn.dev.alpiq.io
contract-management-devfk.alpiq.io
api.middleware.alpiq.io
webbidding.test.internal.alpiq.io
omu-api.iot.alpiq.io

Certificate

The complete raw certificate details for *.onepassport.test2.alpiq.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7mgfGUybTTqNJPx0S7E6
Yebu+CU0kEm6owXtNKhoi/NBOmbs+2+a2Tzed+eltK2Yj/AT/XeF5mhAy/Yx62s+
pGnGB6TmyXi+UbdqB3htTf4iLN+EUIUUfJc+zcVTCW1O++Aj2ONfdxFXCEUUs2E8
aqj6xeDgEkZnCq8HTDV1eSVedQQOFwLVGN+g+lS1SQyCQKcairhTs1XfCC+hfeGi
5yIinwMSC5ptGVy4XNt6qtGfpATtNoP6rEwUsPMG1TPIphsh5SAZKgt0WhovvvCs
Mme150XrEcdfJZrOStjNxtrgpplUeWefaEBsONZBjy8P7YIuu3Z9cL4MltH98LMJ
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16470761782170049030716111269699282643
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.onepassport.test2.alpiq.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30096060797229459895288187187539468307876166110487885163146414170317695419482153551612881887928893809761446353175565961604288187973297730832500881324836756741297304147123014128146771494128857421847138320764353018016908929529976777308895314830944818134365818386523238467105566558347164359906951957916084989020195504604514287492996100954819040840064767671125217056782597482052327346210656521603914386949027006255186178747091048275101894142151050745829060641079285820843179974935509430829200044125029706933752619690696441246054065413932666089245763208776187414611987887265123226023593914396939811075405917002571218880913
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c6fff38a607cc860d743d863a114f0d6e56d4a09
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onepassport.test2.alpiq.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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