vms.test.verama.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0f:80:5e:3a:51:70:fe:e0:ef:fd:25:ae:52:bb:40:ef was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vms.test.verama.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:80:5e:3a:51:70:fe:e0:ef:fd:25:ae:52:bb:40:ef
Serial Number (int): 20604945101607254232136570911428657391
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0d:37:9c:b7:52:17:8c:be:ab:06:85:dc:56:a9:4f:43:86:b7:3c:91
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 48:b0:13:6d:23:50:46:19:d0:2d:40:c0:65:46:51:87:2b:13:69:17
Fingerprint (sha256): 20:22:75:45:af:5c:b0:5d:e1:b1:21:46:b2:39:7a:76:8f:0d:6f:ff:88:39:b3:63:e0:71:7b:70:79:fb:27:9b

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate vms.test.verama.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vms.test.verama.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vms.test.verama.com
*.vms.test.verama.com

Other certificates including the domain name verama.com

(limited to 100 certificates)
*.lambda.verama.com
*.lambda.verama.com
verama.com
*.verama.com
*.vms.test.verama.com
vms.test.verama.com
*.preprod.verama.com
*.preprod.verama.com
*.test.verama.com
verama.com
*.test.verama.com
verama.com
test.verama.com
reports.athento.com
reports.athento.com
*.vms.demo.verama.com
reports.athento.com
reports.athento.com
*.delta.verama.com
zohoanalytics.verama.com
zohoanalytics.verama.com
vms.test.verama.com
*.delta.verama.com
reports.athento.com
*.gamma.verama.com
*.demo.verama.com
reports.athento.com
*.vms.delta.verama.com
vms.test.verama.com
reports.athento.com
*.demo.verama.com
*.demo.verama.com
reports.athento.com
*.demo.verama.com
reports.athento.com
verama.com
reports.athento.com
reports.athento.com
*.lambda.verama.com
reports.athento.com
reports.athento.com
vms.delta.verama.com
*.test.verama.com
reports.athento.com
*.verama.com
*.vms.delta.verama.com
reports.athento.com
reports.athento.com
*.gamma.verama.com
verama.com
*.lambda.verama.com
analytics-eu.finepick.com
analytics-eu.finepick.com
verama.com
reports.athento.com
*.lambda.verama.com
vms.verama.com
*.demo.verama.com
reports.athento.com
*.verama.com
reports.athento.com
*.preprod.verama.com
*.lambda.verama.com
*.vms.test.verama.com
reports.athento.com
verama.com
verama.com
*.delta.verama.com
*.test.verama.com
analytics-eu.finepick.com
reports.athento.com
*.preprod.verama.com
reports.athento.com
*.verama.com
vms.gamma.verama.com
vms.demo.verama.com
*.verama.com
*.standalone.test.verama.com
reports.athento.com
analytics-eu.finepick.com
reports.athento.com
analytics-eu.finepick.com
*.preprod.verama.com
*.vms.verama.com
reports.athento.com
vms.preprod.verama.com
reports.athento.com
reports.athento.com
reports.athento.com
reports.athento.com
*.vms.gamma.verama.com
reports.athento.com
*.delta.verama.com
reports.athento.com
reports.athento.com
*.demo.verama.com
*.test.verama.com
*.lambda.verama.com
*.test.verama.com
test.verama.com

Certificate

The complete raw certificate details for vms.test.verama.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1F7Q3aq/OjamtqIXRAd+
aSYzJL0VCpH+T27KOKtfq6QD5rDenDt4J5ngWHjeh6wj4CuI5s0YMglE9FhDEiB3
NtevhviE9RiPlEuYi233uV2sFCEmYfN/VSG22U60GQcRsx8fdG/bEULfr8PqoLyh
E+2Pp1dpxe7Y/Wv0eZDzmponlY9hBZBTHFAHPmLtiuiH/2OVCIpT8N6lyemoAlx9
8gcDqWzPGMib2iyhEMEJ3eeaZsLuVp9es95WlvtdSJRk/dw1GdD1y0veY3DeN61l
NmmvZ9cIzmAXacmbXuP5OGLsPSeSgUoPfikhUhMj0apzKI6tprglcFGMTNDviQTJ
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20604945101607254232136570911428657391
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vms.test.verama.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26809276107000567090895077643785236363512985430810881186332389142014385891269519273550093801812195023347556062307820746228138942645667811299759987774072206798192364215691762836418438241668621352267680986270654845666377983275508469647112425811416672080357105904852452533731427320196488989255775044795333327934311062254343437613726253350349291360163635900820504899661118518917551568447059512972360932770949432837832614359033181370058145725296566121256351273095260870315243497037518849637383531469492049187100428701597001411423680377086034559430063528066597027968925288065304934851288578640827020599898632581734493112823
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0d379cb752178cbeab0685dc56a94f4386b73c91
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vms.test.verama.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vms.test.verama.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016df8dcbaee0000040300473045022100921a21f27fa5de91238af6641789f0de0a996ebf095ee3ea501e7a903a16fe70022014e8ce640b5c7c41b758f3d7bf4473717839e39141ffde088189f858ff169f0d0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016df8dcbb6e000004030047304502203f3e2b3786204127c837b8762e0feeeffdc677027d82fa3c80c112f10bb06223022100a687732b8c9985c5621882c87695e6ec9ab2e880a01327576525c1b6ee848e70
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001003c7c82a96c4f0d9e54600b983ccc15f331fcda1f545ed9efb84bb1ae3c51bf64c6255e73f8d60c9fb2054cb9d33a92508857d861ee12d3a3e90efe3bb7b11122ce138257d4ea2aa985b12677be1f6103729556ba94dd46795ab829f0685de64fcdc096fa1fc7eac7e871f631a9b62004919aed1f4bf5f2e4f9c34ffb21f9e5ee548c0ca3bee26ddcf256b1154547b8e7221ac6254b67b0aa765f07a9dfc08ec5b37e55de19a73331ab8b094862bf02625c432c973f142ddf1cbb0a7b4bb6792629f0345b2760bdb5a58f350798107178e2d02d2dd8245ab447c0950c32aecb5c6c0ed3df96831657906b86cefce40b6fe3678d1df8cf9221c67630db6ec38