*.onepassport.dev2.alpiq.io

Issued by Amazon

About this certificate

This digital certificate with serial number 02:f9:75:da:2c:9f:3a:52:a6:66:0f:c6:7a:e7:57:f3 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.onepassport.dev2.alpiq.io

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:f9:75:da:2c:9f:3a:52:a6:66:0f:c6:7a:e7:57:f3
Serial Number (int): 3953728236817894239714122876852852723
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: a2:b9:30:f1:d4:a7:23:ec:e6:2d:d3:e6:58:39:4d:d6:f2:a9:e6:e3
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): dc:08:8f:10:87:ba:76:6d:03:13:34:89:34:9e:dc:d6:4a:63:2c:02
Fingerprint (sha256): 20:b3:7c:ca:d0:71:81:5d:2d:f2:e9:41:e4:1a:14:f0:fd:2b:3e:a1:f3:df:ad:59:cc:de:52:2a:80:42:43:c0

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.onepassport.dev2.alpiq.io

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.onepassport.dev2.alpiq.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.onepassport.dev2.alpiq.io

Other certificates including the domain name alpiq.io

(limited to 100 certificates)
onepassport.test2.alpiq.io
api.settlement.dev.settlement.alpiq.io
api.test.pooling.alpiq.io
api.devops.dev.phoenix.alpiq.io
dl-api.iot.alpiq.io
contract-management-backend-dev.alpiq.io
webbidding.dev.internal.alpiq.io
api.customers.dev.ems.alpiq.io
*.onepassport.onepassport-new.dev.alpiq.io
onepassport-dev.dev.alpiq.io
www.test.ems.alpiq.io
api.test.pooling.alpiq.io
console.dev.iot.alpiq.io
dl-api.iot.alpiq.io
www.ems.dev.alpiq.io
ac-api.iot.alpiq.io
api.dev.middleware.alpiq.io
api.settlement.alpiq.io
vetrocom-ui.dev.vetrocom.alpiq.io
dev.mdr.dev2.alpiq.io
api.devops.test.phoenix.alpiq.io
logging.ems.alpiq.io
api.fullsupply.test.internal.alpiq.io
api.test.internal.alpiq.io
api.ops.support.dev.backoffice.alpiq.io
api.dev.batterysimulator.alpiq.io
*.dev.plt.alpiq.io
*.link.dev.alpiq.io
api.dev.middleware.alpiq.io
api.internalbit.alpiq.io
api.internal.alpiq.io
dh-api.test.iot.alpiq.io
adminportal.api.customers.dev.ems.alpiq.io
api.customers.dev.ems.alpiq.io
am-api.dev.iot.alpiq.io
ac-api.dev.iot.alpiq.io
login.alpiq.io
calendar.dev.res.alpiq.io
api.internalbit.alpiq.io
datacatalog-ui.test.alpiq.io
erv.dev.phoenix.alpiq.io
api.preprod.ems.alpiq.io
api.dev.internal.alpiq.io
contract-management-backend-devfk.alpiq.io
manifold.dev.ds.alpiq.io
command-api.test.pooling.alpiq.io
provisioning-api.iot.alpiq.io
contract-management.test.alpiq.io
api.preprod.customers.alpiq.io
devops.dev.phoenix.alpiq.io
api.middleware.alpiq.io
pip.dev.alpiq.io
calendar.alpiq.io
contract-management-backend-devfk.alpiq.io
ppa-service.dev.pooling.alpiq.io
edge-api.dev.iot.alpiq.io
api.customers.dev.ems.alpiq.io
website-test.dev.phoenix.alpiq.io
api.ppa-service.dev.pooling.alpiq.io
customerportal.dev.ems.alpiq.io
contract-management-backend-dev.alpiq.io
about-dti-api.dev.iot.alpiq.io
api.data-catalogue.dev.alpiq.io
api.test.vetrocom.alpiq.io
onepassport.dev2.alpiq.io
api.dev.batterysimulator.alpiq.io
tsviz.test2.alpiq.io
contract-management-backend.dev.alpiq.io
pip.dev.alpiq.io
api.devops.dev.phoenix.alpiq.io
epexdev.dev.ds.alpiq.io
mdr-feature.dev2.alpiq.io
portal.dev.alpiq.io
*.onepassport.test2.alpiq.io
*.onepassport.dev.alpiq.io
*.dev.trading.alpiq.io
command-api.dev.pooling.alpiq.io
onepassport-ui-dev.alpiq.io
maven.dev.alpiq.io
*.onepassport.dev.alpiq.io
contract-management-backend-devfk.alpiq.io
*.onepassport.dev2.alpiq.io
*.onepassport.dev2.alpiq.io
contract-management-devfk.alpiq.io
mdr-feature.dev2.alpiq.io
logging.test.ems.alpiq.io
api.dataops.test.phoenix.alpiq.io
*.api.alpiq.io
onepassport.dev2.alpiq.io
*.onepassport.dev2.alpiq.io
mdr.dev2.alpiq.io
datacatalogue.alpiq.io
contract-management.dev.alpiq.io
provisioning-api.iot.alpiq.io
*.onepassport.dev.alpiq.io
assets.learn.dev.alpiq.io
contract-management-devfk.alpiq.io
api.middleware.alpiq.io
webbidding.test.internal.alpiq.io
omu-api.iot.alpiq.io

Certificate

The complete raw certificate details for *.onepassport.dev2.alpiq.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriwV8GafVOMch93ukzLw
+T9j80lQwE9t4AxTmyclsyN608E4Y8I0YWolOwCtuUxhIR4txtI46OsjuZcOmjDp
Fh5Vip+JRErqIgj+N02AS4dbCVglSPgZhDIlr34FFIzsMTNCNFGh1NA4ekr23EAw
Bx2Im2w5+H8/qIs40H2z/Dv8oym0ZkpgARWvN4hI5xcyfyLsM87N+PsTYpAIX8it
nKEEg5SJ/hLg8sXMJwpDV0i2zAGf2XzxIxgPXCOi7mbyukP0GyvjbJDZYUXbZ0Uc
fgodTfSbjpL3o/NqLoOhQ9S0eNyumUR4myo24xbG4eEfne05aNGkOdEXlaYzDrjn
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3953728236817894239714122876852852723
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-10 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.onepassport.dev2.alpiq.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21987204532746980490053506962950687944607026556920378682676676625004949717066807352259518855754808090774464424743699114299049457446002454326251861982451122539378097052623688740344908688333435942698345396199694418774849191286283518212103410888568312466576960162547028764815871865916864798753102045111545297557093348173105763571746054178805976072792610237230735896383718569940687530762765107345213107765967559729019007459071275577104232805204836503761980347907481979884701261565995868505137085648670455902783361485707689906441188330278165390490808363255162651738004660036285862331400542582897943070283274467272308614929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a2b930f1d4a723ece62dd3e658394dd6f2a9e6e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.onepassport.dev2.alpiq.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		009b35d935dbef9d1e3cf9abaf796790d3cbfce70157b90095836c45422d6fa7a1db78b9bf3f6bb9474c35e7e5b2f05174f71e3598cc1771a5bab4dd80c6cb2a54ec34efb5c45a7b311d0bd16029227c0d1d1d7e37c1521e0850003bae4c104b8b792eb4b6611800f9773afd036159711b3a5853482b1a6ec127a461151faf689c1da62c41924338b522544f0a1d0a1ce84afbc9fcb960a5971be0e282b32ff5c7a8d405ad29b1a82a48bd01407db3943d6c7302b011571b609d8e9eb162fbf44985de98612fc1f621f99bec3982c40096b99ef9f274b184363d6242cad3ca0cd0ad23d81a7cec249cb3a4546493732ebd9e1dbeacd60270215969da1c2693ebc8