css.nsense.net
Issued by Amazon
About this certificate
This digital certificate with serial number 04:dc:5f:ce:87:72:7a:90:dd:75:12:b4:bb:1f:71:bb was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=css.nsense.net
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:dc:5f:ce:87:72:7a:90:dd:75:12:b4:bb:1f:71:bbSerial Number (int): 6461160483850023087353146829229224379
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 53:af:f0:62:21:7c:bd:18:d6:1a:5d:65:9e:14:6c:d7:76:3f:92:b7
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 34:2e:04:68:81:45:71:4a:48:f6:c4:6f:9d:ae:36:1e:5b:a4:ed:41
Fingerprint (sha256): 22:57:83:d0:d4:53:43:8e:a7:45:83:15:1d:35:78:a7:61:78:4f:ab:0f:25:f0:9d:99:0b:e3:6e:70:05:c6:16
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate css.nsense.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for css.nsense.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
css.nsense.net
Other certificates including the domain name nsense.net
(limited to 100 certificates)
*.nsense.net
karhu2.nsense.net
ir.f-secure.com
remote2.nsense.net
css.nsense.net
ir.f-secure.com
nsense.net
gotham.nsense.net
css.nsense.net
www.nsense.net
karhu.nsense.net
gotham.nsense.net
updates.karhu2.nsense.net
css.f-secure.com
karhu2.nsense.net
updates.radar.f-secure.com
gotham.nsense.net
karhu.nsense.net
updates.radar.f-secure.com
www.css.f-secure.com
css.nsense.net
gotham.nsense.net
updates.karhu2.nsense.net
gotham.nsense.net
*.nsense.net
portal.radar.f-secure.com
gotham.nsense.net
nsense.net
gotham.nsense.net
updates.radar.f-secure.com
gotham.nsense.net
ir.f-secure.com
css.nsense.net
gotham.nsense.net
www.nsense.net
gotham.nsense.net
*.nsense.net
updates.radar.f-secure.com
gotham.nsense.net
gotham.nsense.net
nsense.net
updates.radar.f-secure.com
www.nsense.net
*.nsense.net
css.f-secure.com
www.nsense.net
updates.radar.f-secure.com
gotham.nsense.net
remote.nsense.net
www.nsense.net
portal.radar.f-secure.com
gotham.nsense.net
gotham.nsense.net
karhu2.nsense.net
ir.f-secure.com
remote2.nsense.net
css.nsense.net
ir.f-secure.com
nsense.net
gotham.nsense.net
css.nsense.net
www.nsense.net
karhu.nsense.net
gotham.nsense.net
updates.karhu2.nsense.net
css.f-secure.com
karhu2.nsense.net
updates.radar.f-secure.com
gotham.nsense.net
karhu.nsense.net
updates.radar.f-secure.com
www.css.f-secure.com
css.nsense.net
gotham.nsense.net
updates.karhu2.nsense.net
gotham.nsense.net
*.nsense.net
portal.radar.f-secure.com
gotham.nsense.net
nsense.net
gotham.nsense.net
updates.radar.f-secure.com
gotham.nsense.net
ir.f-secure.com
css.nsense.net
gotham.nsense.net
www.nsense.net
gotham.nsense.net
*.nsense.net
updates.radar.f-secure.com
gotham.nsense.net
gotham.nsense.net
nsense.net
updates.radar.f-secure.com
www.nsense.net
*.nsense.net
css.f-secure.com
www.nsense.net
updates.radar.f-secure.com
gotham.nsense.net
remote.nsense.net
www.nsense.net
portal.radar.f-secure.com
gotham.nsense.net
gotham.nsense.net
Certificate
The complete raw certificate details for css.nsense.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEcjCCA1qgAwIBAgIQBNxfzodyepDddRK0ux9xuzANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTExMDgwMDAwMDBaFw0yMDEyMDgx MjAwMDBaMBkxFzAVBgNVBAMTDmNzcy5uc2Vuc2UubmV0MIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAwrcJYaw2r/v5+vnlx2209ctmOQVtWXHE8P6jLdKX 9dKPSLh5ig+0hhTqj0ZLzvbaJCBuupMytBFZrff+cHSlTnlNosWHOEbftLOGcjos 1HzfVRSZBx2wRPlKt69NWwr+uSh78cpiAlWWxzA2qwEaeKHtD3ZraCdRwFjMEUd6 1iSwi0YwPz3rqRjoUcO2hI6ypV3MHLZFHSLhhlydLya/msvU0VSkXgV1r77WJf2k Oq/kOuBOMXQBbJKeaJrpav4p0aBvkxRX31jNu0tdK9manPF0pO9N8cPXzNOiZUiW wNxlDfoQOsXho8Uuxvz3g/vz5jv3T5GtP6LD5mLNkbERUwIDAQABo4IBhzCCAYMw HwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFFOv8GIh fL0Y1hpdZZ4UbNd2P5K3MBkGA1UdEQQSMBCCDmNzcy5uc2Vuc2UubmV0MA4GA1Ud DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0f BDQwMjAwoC6gLIYqaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2Nh MWIuY3JsMCAGA1UdIAQZMBcwCwYJYIZIAYb9bAECMAgGBmeBDAECATB1BggrBgEF BQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRy dXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVz dC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQC BQAwDQYJKoZIhvcNAQELBQADggEBAJkBWUaZwHmYE8oMxtcmdQpF4I9waGjfPMQr 6FAN8A9x4uNBPep94np/cyWjj91T/6IY9ZrB9bC5jVtu8FBBgcwuh6uQfnlalvba avqwyFyk+KOkpTiE4uh6N73mRnt63LMxlPZKRktAKBx965M1A4C4fltyZQ9OY88k aNXVJ5Laj7vKUthZxUBJ96mKoOf7OTuiQlDaAYxqkcJddEt3yfdAJzkHQFrr9vE4 Xgjt6w2vumOlIAe5ihRIMuKklM30acQMF8+j9WTbYKWMkG11A2pGd7X9wSjecuYH R0zOle8efN/TJHkNMBcIiYjtWf6NQOzL/b4bdwvelVLag6N6pNE= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrcJYaw2r/v5+vnlx220 9ctmOQVtWXHE8P6jLdKX9dKPSLh5ig+0hhTqj0ZLzvbaJCBuupMytBFZrff+cHSl TnlNosWHOEbftLOGcjos1HzfVRSZBx2wRPlKt69NWwr+uSh78cpiAlWWxzA2qwEa eKHtD3ZraCdRwFjMEUd61iSwi0YwPz3rqRjoUcO2hI6ypV3MHLZFHSLhhlydLya/ msvU0VSkXgV1r77WJf2kOq/kOuBOMXQBbJKeaJrpav4p0aBvkxRX31jNu0tdK9ma nPF0pO9N8cPXzNOiZUiWwNxlDfoQOsXho8Uuxvz3g/vz5jv3T5GtP6LD5mLNkbER UwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6461160483850023087353146829229224379 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-08 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-08 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'css.nsense.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24580489897851449841457766344977010976055493744612470339172786496876429610142018743868804449748421772287447380570579026437182121202808765175598628507750329118187108879178753990518800355873822707142224056523799019859836899508480178749907136146845123128477260535721013063720097768210419209450930380111357858164935228971011960523863532005626491995801076915287616886338676166196979423967433735775902733418132716788384600867321447223799892514705214062857417737887071697238362742800494797479803983411611728041411280657900834559684560906462382348281723287076798878012688751602979512656400397569559434424039903605810879598931 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 53aff062217cbd18d61a5d659e146cd7763f92b7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'css.nsense.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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