media-mfe-shell.claims.sandbox.test.c1.statefarm

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0f:9b:03:1e:a6:5d:12:3e:1a:1a:18:9d:05:cc:3a:47 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=media-mfe-shell.claims.sandbox.test.c1.statefarm

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:9b:03:1e:a6:5d:12:3e:1a:1a:18:9d:05:cc:3a:47
Serial Number (int): 20743289225407350638663841485540833863
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a6:26:94:da:a3:b1:1f:c6:76:26:c2:8a:1b:34:66:eb:ca:24:ad:c0
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 12:20:56:cb:a4:12:73:b4:5b:97:e9:eb:4f:61:28:1a:4d:76:b4:33
Fingerprint (sha256): 1f:10:14:91:72:61:b3:79:5c:8b:d0:af:fb:55:53:54:6c:be:76:9b:e5:ca:c6:24:eb:b8:1f:a0:95:4a:32:35

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate media-mfe-shell.claims.sandbox.test.c1.statefarm

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for media-mfe-shell.claims.sandbox.test.c1.statefarm

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

media-mfe-shell.claims.sandbox.test.c1.statefarm

Other certificates including the domain name c1.statefarm

(limited to 100 certificates)
repaireligibility-1733283.claims.test.c1.statefarm
interactions.claimsvc.sandbox.test.c1.statefarm
repaireligibility-1736884.claims.test.c1.statefarm
rentaleligibility-1713142.claims.test.c1.statefarm
status-guidance.claims.c1.statefarm
test.driveforsafety.test.goodneighbors.com
ecrmclaimsfacade-env3.amccdev.test.c1.statefarm
ocd.research.c1.statefarm
driveforsafety.whs.c1.statefarm
fireqfcapi.claimsvc.sandbox.test.c1.statefarm
repaireligibility-1490984.claims.test.c1.statefarm
mediadownload-bus.claimsvc.test.c1.statefarm
facade-env1.ecrmclaims.amccdev.test.c1.statefarm
claims.telematicsfilterapitest1.research.c1.statefarm
repaireligibility-1727262.claims.test.c1.statefarm
roadsideassistance.claims.test.statefarm.com
rentaleligibility-1298191.claims.test.c1.statefarm
*.tl1.c1.statefarm
api.claims.sandbox.c1.statefarm
rentaleligibility-perf.claims.test.c1.statefarm
claimprefexp.claims.sandbox.c1.statefarm
repaireligibility-1286757.claims.test.c1.statefarm
info-exp.claimsvc.c1.statefarm
facade-env1.ecrmclaims.amccdev.test.c1.statefarm
api.infosec.c1.statefarm
*.oic.claims.test.c1.statefarm
arsondog.whs.research.c1.statefarm
photovideocapture.claims.test.statefarm.com
api.infosec.c1.statefarm
manage-tasks.claimsvc.test.c1.statefarm
rentaleligibility-1290042.claims.test.c1.statefarm
repaireligibility-1490984.claims.test.c1.statefarm
media-mfe.claims.sandbox.c1.statefarm
providers.rental.claimsvc.c1.statefarm
telematics.aa.enrollment.test10.tl1.test.c1.statefarm
driveforsafety.whs.c1.statefarm
checkout.hub.claims.statefarm.com
cornhole-api.xrhost.c1.statefarm
managestorage.claimsvc.sandbox.test.c1.statefarm
qualfc-env4.claims.sandbox.test.c1.statefarm
nachuntar.xrhost.test.c1.statefarm
repaireligibility-1286757.claims.test.c1.statefarm
closeclaimapi-exp.claimsvc.test.c1.statefarm
repaireligibility-1735606.claims.test.c1.statefarm
rentaleligibility-1743787.claims.test.c1.statefarm
facade-env4.ecrmclaims.amccint.test.c1.statefarm
roadsideassistance.claims.statefarm.com
sf-aqua-security.research.c1.statefarm
uimod-mfe.dcpm-sandbox.test.c1.statefarm
driveforsafety.whs.test.c1.statefarm
cornhole-api.xrhost.c1.statefarm
media-mfe.claims.c1.statefarm
driveforsafety.whs.test.c1.statefarm
api.rapid-reimbursement.claims.s.test.c1.statefarm
photovideocapture.claims.test.c1.statefarm
repaireligibility-1297024.claims.test.c1.statefarm
api.infosec.c1.statefarm
prepsub-exp.claims.sandbox.test.c1.statefarm
driveforsafety.whs.test.c1.statefarm
manage-tasks.claimsvc.sandbox.test.c1.statefarm
rentaleligibility-1292675.claims.test.c1.statefarm
driveforsafety.whs.test.c1.statefarm
media-mfe.claims.sandbox.test.c1.statefarm
driveforsafety.whs.test.c1.statefarm
sf-aqua-security.research.c1.statefarm
rentaleligibility-1740151.claims.test.c1.statefarm
repaireligibility-1730977.claims.test.c1.statefarm
ecrmclaimsfacade-env3.amccdev.test.c1.statefarm
rentaleligibility-1483369.claims.test.c1.statefarm
gnc-virtualmeeting.amccint.c1.statefarm
rss.claims.test.c1.statefarm
mddl-dev.c1.statefarm
digitalqfc.claims.test.c1.statefarm
rentaleligibility-1736987.claims.test.c1.statefarm
ocd.test.c1.statefarm
repaireligibility-1735402.claims.test.c1.statefarm
assignments.rental.claimsvc.c1.statefarm
rentaleligibility-1483369.claims.test.c1.statefarm
premiumchange-api.pcu.conncen.c1.statefarm
driveforsafety.whs.c1.statefarm
interactions.claimsvc.sandbox.test.c1.statefarm
ingest-vaaei8.sfconnect.digxp.test.c1.statefarm
datalake.test.c1.statefarm
inbound-communication.edeliver.test.c1.statefarm
driveforsafety.whs.c1.statefarm
driveforsafety.whs.test.c1.statefarm
dev.armapi.test.c1.statefarm
rental-exp-rest.claimsvc.sandbox.test.c1.statefarm
repaireligibility-1706942.claims.test.c1.statefarm
repaireligibility-1736884.claims.test.c1.statefarm
auth-utl.claimsvc.c1.statefarm
rentaleligibility-1293317.claims.test.c1.statefarm
rentaleligibility-1290880.claims.test.c1.statefarm
my-neighborhood.xrhost.c1.statefarm
driveforsafety.whs.test.c1.statefarm
facade.ecrmclaims.amccint.c1.statefarm
towexperienceapi-exp.claimsvc.test.c1.statefarm
env1.autoquotebuy.pcmngd01.test.c1.statefarm
api.claims.test.c1.statefarm
repaireligibility-1733275.claims.test.c1.statefarm

Certificate

The complete raw certificate details for media-mfe-shell.claims.sandbox.test.c1.statefarm in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraxwXYmPkDV49vQ82jjC
zdVKcU894IMu8nO4hn3MPCA4OsL0i1EaIAgQd9TzmW/KlYsI82jTp+67Vl4VPaKk
7FDnXFnaWyviatl2ddabWJkb3JHecLS27cafIWFC/O1FxpfBPsgHB65jQTA8CziW
WHdFgX7h7MPzck26ido7w/TvDe7+JL6wKoBLq765GaFmEA3I+gkA3BtUgRyxvbN5
0sdUC5VO2ZVFM+yEkeYxHaTUS9qfO+m4fEFXodAwjO4hcE0uahXo6dx50dBYwUGO
M/hGnzK86T53QiRQA7r2wNF/caLnQ+E8iNlWMEeji+iIvj7X2y4DezhgxVD/yWbr
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20743289225407350638663841485540833863
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'media-mfe-shell.claims.sandbox.test.c1.statefarm'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21924259563379339870892423697389290047053268600812377416027608310191803439216958169702678874567182713608222083616471397201423213226936322321933057097385496872960340333894342258072865744546002837498927038500475407380581899712849917545095805666829849420496307574773801779810087398621904139668585902006433994063524945488170242511288385691586070889582973551867278644784444110413768798413919134796370046227132952631617318584313492462560014449938175248836838597072830629319202848294040331438498819857616330889241903442577263871028899303702130460026684094557973137931144533773206138739663986552542107813788494541402461891333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a62694daa3b11fc67626c28a1b3466ebca24adc0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media-mfe-shell.claims.sandbox.test.c1.statefarm'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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