*.token.pci.public.tmaws.eu

Issued by Amazon

About this certificate

This digital certificate with serial number 09:d2:c3:48:77:b1:2b:5a:a8:37:7f:7c:fa:06:09:29 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.token.pci.public.tmaws.eu

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:d2:c3:48:77:b1:2b:5a:a8:37:7f:7c:fa:06:09:29
Serial Number (int): 13057395113699870533789523888438642985
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3b:a1:4c:53:43:2f:8b:a6:40:7e:29:4d:9b:d1:b6:68:11:40:ff:61
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 5e:92:34:a5:f3:d6:f3:db:4f:d9:38:c0:39:a7:2a:fd:33:0e:70:56
Fingerprint (sha256): 20:ff:a3:1d:97:30:4c:e0:2b:88:f4:82:eb:5e:a2:7c:2f:27:d2:5d:12:46:ae:32:3b:a6:a6:fc:6b:cd:95:5a

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.token.pci.public.tmaws.eu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.token.pci.public.tmaws.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.token.pci.public.tmaws.eu

Other certificates including the domain name tmaws.eu

(limited to 100 certificates)
dns-vetting1-jeffg-noah.map.fastly.net
ticketmaster4.map.fastly.net
*.ta-web.pci.public.tmaws.eu
router.prod1.admin.amplify.b2c.ie.prod.public.tmaws.eu
*.amplify.b2c.k8s.eu-central-1.nonprod.public.tmaws.eu
dns-vetting1-jeffg-noah.map.fastly.net
*.lne.prod.public.tmaws.eu
ticketmaster4.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
ticketmaster4.map.fastly.net
redirect-dub.lne.prod.public.tmaws.eu
ticketmaster6.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
*.mfxelk.eu-central-1.nonprod.tmaws.eu
acm.prod.tmaws.eu
*.staging.mfol.pci.tmaws.eu
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
*.lne.prod.public.tmaws.eu
dns-vetting1-jeffg-noah.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
app.dev1.erc.nonprod.tmaws.eu
ticketmaster4.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster4.map.fastly.net
*.srep.nonprod.tmaws.eu
ticketmaster6.map.fastly.net
*.lne.prod.public.tmaws.eu
ticketmaster6.map.fastly.net
sonarqube.nonprod.tmaws.eu
ticketmaster4.map.fastly.net
*.resale.prod.public.tmaws.eu
ticketmaster4.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
ticketmaster6.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
*.admission.com
acm.pci.tmaws.eu
ticketmaster4.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
*.staging.mnxadmin.pci.tmaws.eu
dns-vetting1-jeffg-noah.map.fastly.net
ticketmaster4.map.fastly.net
change.prod.tmaws.eu
ticketmaster4.map.fastly.net
ticketmaster6.map.fastly.net
ipxy.api.dev1.tiap.discovery.b2c.ie.nonprod.public.tmaws.eu
ticketmaster4.map.fastly.net
ticketmaster6.map.fastly.net
*.prod.gdpr-portal.pci.tmaws.eu
ticketmaster4.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
*.admission.com
*.iccp.prod.tmaws.eu
*.mnxadmin.pci.tmaws.eu
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster6.map.fastly.net
*.payment.pci.tmaws.eu
ticketmaster4.map.fastly.net
*.mec.nonprod.tmaws.eu
ticketmaster4.map.fastly.net
yum.stg.pci.tmaws.eu
ticketmaster4.map.fastly.net
*.token.pci.public.tmaws.eu
*.iccp.prod.tmaws.eu
ticketmaster6.map.fastly.net
ticketmaster4.map.fastly.net
*.payment.nonprod.public.tmaws.eu
ticketmaster4.map.fastly.net
token.dev1.mapper.accounts.b2c.ie.nonprod.public.tmaws.eu
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster6.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
ticketmaster4.map.fastly.net
npm.pci.tmaws.eu
ticketmaster4.map.fastly.net
ipxy.api.prod1.tiap.b2c.ie.prod.public.tmaws.eu
ticketmaster4.map.fastly.net
*.resale.nonprod.tmaws.eu
ticketmaster4.map.fastly.net
*.jiramonitor.nonprod.public.tmaws.eu
dns-vetting1-jeffg-noah.map.fastly.net
*.admission.com
ticketmaster4.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
ticketmaster4.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net

Certificate

The complete raw certificate details for *.token.pci.public.tmaws.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3biVlnJxC3P1IOvdeW3S
2JJHtEn2L3RtMn5yZtMe5xYVugO7wktUt7DyNO0CtwKBNCbx+mAXJ93poXNvipX6
rZvxgo+Izq1mmxoVzgc0rOf9t5kQIhQd6r7Jg0F1KyCYC3EjEdrtyLTo7kpTW+r6
maF1kYAQGnpqCR0urjSZYOEFo65wvVNnu2Ic/s72khh3wYY/xAhIdBmcPlty5oSp
bgdm8xma5KLO/GIyohjMVZuC5M1rvqYOcGis5ygq/0aM3N9PvY4DspUHKnxsufR3
eyl4qvwW5CPqm6YU2hvmlXePVSFFbJ8gbMOOD6qsnn0tf0d7zfbp0cpfhryb4mEd
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13057395113699870533789523888438642985
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.token.pci.public.tmaws.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27989687321521788083521041462619944998009509491484471752063024170984295029771438084870352394918844590427104898784261401719290393082510858409328993263492212037379412090159261924367583105355718995655366990324822702493380666095028053012568190344205664572771831179273426229070257255874070096519094064490389774737193515393254304080455479106726635681236459317294404489389032071965572610901015170556302280091056064491547309437369700955248102881129914004509049355367457827505547973232209255479319969162615584170003099356795361779240562643937125801388713378043797874324478736575953266329918115148592148799234525182615776992641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3ba14c53432f8ba6407e294d9bd1b6681140ff61
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.token.pci.public.tmaws.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001684de6bb6c00000403004830460221009212475d684c847c9ceb9576ee523937403007daac1c6b576eb79d3d9c0e9b6f022100e4ba01e84928cde6b0e1132bbec642da3e52c4affddf7824457db6f9758d07600076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001684de6bc3f000004030047304502207a0643e9123b60d62cc2158c23dbd4d6fe02cdbaac20945002b0109eda62b9c5022100eac15f411b8993d332c594cbf867dbab908fcf13126fdb286ebe91769391ad71
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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