api-home.roche.net

Issued by Amazon

About this certificate

This digital certificate with serial number 03:5b:01:66:b3:ac:89:6f:93:c6:d4:f7:1a:fc:9a:98 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api-home.roche.net

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5b:01:66:b3:ac:89:6f:93:c6:d4:f7:1a:fc:9a:98
Serial Number (int): 4460211420769998060980216205212949144
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 32:e8:28:53:4e:17:e1:7e:66:ff:6e:01:46:9d:36:8d:d2:ab:c7:14
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): f2:bd:a0:cc:b8:52:ec:8f:57:bc:ca:53:8d:31:0b:3c:21:12:2a:d5
Fingerprint (sha256): 23:0d:21:59:3c:a3:05:84:3c:60:49:55:57:a1:e9:a8:06:ae:e8:cd:a3:ad:31:98:a9:8c:f5:c2:64:9e:0b:e0

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate api-home.roche.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api-home.roche.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api-home.roche.net
*.api-home.roche.net

Other certificates including the domain name roche.net

(limited to 100 certificates)
coaguchek.com
partneraccess.roche.net
sentry-ppe.roche.net
edi2.roche.net
mdm.roche.net
sni.cloudflaressl.com
*.edidev2.roche.net
sg3vk030.roche.net
range.roche.net
sentryasiagmail.roche.net
sentrygmailtest.roche.net
vpn.range.roche.net
*.edidev2.roche.net
remoteaccess.roche.net
*.edi2.roche.net
rosa.roche.net
rkavoglh.roche.net
sni.cloudflaressl.com
se2vk030.roche.net
mdm-test.roche.net
partneraccess.roche.net
remoteaccess.roche.net
esrv-hub-uat.roche.net
*.editest2.roche.net
sni.cloudflaressl.com
editest3.roche.net
se2vk030.roche.net
se3vk030.roche.net
*.edi2.roche.net
sni.cloudflaressl.com
api-home.roche.net
sni.cloudflaressl.com
sni.cloudflaressl.com
sentryasiagmail.roche.net
sni.cloudflaressl.com
sni.cloudflaressl.com
rkavoglh.roche.net
*.rosa.roche.net
prod.rosa.roche.net
sentryemeao365.roche.net
cat.navify.esrv-hub-dev.roche.net
sni.cloudflaressl.com
ridusaxprod.dia.roche.net
aauthctx.roche.net
api-home.roche.net
sni.cloudflaressl.com
api-uat-home.roche.com
roche.net
edidev2.roche.net
*.edi2.roche.net
mb2vk030.roche.net
sentrynalao365.roche.net
roche.net
vpn.range.roche.net
roche.net
api-home.roche.net
roche.net
*.range.roche.net
mdm-dev.roche.net
range.roche.net
home.roche.net
sni.cloudflaressl.com
zh5vk030.roche.net
smartwebpoc.roche.net
roche.net
edi2.roche.net
cat.navify.esrv-hub-dev.roche.net
api-uat-home.roche.net
api-home.roche.net
*.edi2.roche.net
roche.net
api-home.roche.net
*.range.roche.net
sni.cloudflaressl.com
vpn.range.roche.net
remoteaccess.roche.net
sni.cloudflaressl.com
partneraccess.roche.net
esrv-hub-dev.roche.net
sni.cloudflaressl.com
roche.net
*.edidev2.roche.net
businesspartners.roche.net
sni.cloudflaressl.com
mdm-test.roche.net
range.roche.net
*.rosa.roche.net
esrv-hub-uat.roche.net
mb2vk030.roche.net
se2vk030.roche.net
range.roche.net
sni.cloudflaressl.com
uat-home.roche.net
sentry-ppe.roche.net
fr4vk030.roche.net
sni.cloudflaressl.com
sni.cloudflaressl.com
mdm.roche.net
edidev.roche.net
sni.cloudflaressl.com

Certificate

The complete raw certificate details for api-home.roche.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEkDCCA3igAwIBAgIQA1sBZrOsiW+TxtT3GvyamDANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAyMDUwMDAwMDBaFw0yMTAzMDUx
MjAwMDBaMB0xGzAZBgNVBAMTEmFwaS1ob21lLnJvY2hlLm5ldDCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAOZPQkwazY1VSWX9SoPogzKAoQBjwR8qs/r9
mI9D4D7v5arTjc3fGCxI3cZmgWjV7/sy8FWiXNkg+ZVWoCMRfd4UUryGS9QurfJX
VWk9lrdIvJGSVlRumqaoedSe5VB60WVsdDIhiKc64RX9S3FsNNjSc/YPnfgFWogK
a9nG7CPNthwBED7f8dWCObrZVLE9X5+wqSLv9KBD+7z0DIYKvAiRyQWHS+X2nUi2
tbWRjXRQyNOU5KP1Nzgbq56etekApy9bPmhdlaNf7nlvSL6a3tgiETA+oMFoMJni
c86mVIzl2mBhwvsFlDsAyePyYfoks9naQEuI65nydjD/gwBhrPMCAwEAAaOCAaEw
ggGdMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBQy
6ChTThfhfmb/bgFGnTaN0qvHFDAzBgNVHREELDAqghJhcGktaG9tZS5yb2NoZS5u
ZXSCFCouYXBpLWhvbWUucm9jaGUubmV0MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDov
L2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3JsMCAGA1UdIAQZMBcw
CwYJYIZIAYb9bAECMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUH
MAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcw
AoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwG
A1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQAD
ggEBAHMNMn7Xp3PqYk67GYavS1S6QDp6EVSkTs9rVnVtuXjohZeUgHRfcWnUt/X6
mBIW2AYsBVAfktBKbNN2tCUsjzJoQemyVPy0avvv6BY9EfuN5RVLDRVK9MoEviXJ
uBqoAezMazD71JgQvbUFmndvDyFyWS1UrUyX0+tcYsMpYvbpmVhzk3aEJHETYLia
4NyubrExy6BNQwMb0LMgZhlO5EWFs81reSAQ/4+U6/KXD3CetAjoKnnJQrM1s50r
c3mCY3SuW1816E9drt3RWPXz+jsgUpYJVefs4l/iANMrrKZmj0ffeHvwpx8c7paK
T8ZW+SIMqMeheaQJWSz3N391wd8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5k9CTBrNjVVJZf1Kg+iD
MoChAGPBHyqz+v2Yj0PgPu/lqtONzd8YLEjdxmaBaNXv+zLwVaJc2SD5lVagIxF9
3hRSvIZL1C6t8ldVaT2Wt0i8kZJWVG6apqh51J7lUHrRZWx0MiGIpzrhFf1LcWw0
2NJz9g+d+AVaiApr2cbsI822HAEQPt/x1YI5utlUsT1fn7CpIu/0oEP7vPQMhgq8
CJHJBYdL5fadSLa1tZGNdFDI05Tko/U3OBurnp616QCnL1s+aF2Vo1/ueW9Ivpre
2CIRMD6gwWgwmeJzzqZUjOXaYGHC+wWUOwDJ4/Jh+iSz2dpAS4jrmfJ2MP+DAGGs
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4460211420769998060980216205212949144
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-05 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api-home.roche.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29073894198840014882673517598215883711781145290476839354106255327567589162617440396261049762737549264842452701843425998475140838095639582648094052241712386339770180394400196571963817578174264588849704518013321445644768416237649044282651622572657477519311118891189466986717735089333810163592938022919014692913542705519490895566311655237980933529008990207348978124296404848232329070449897953773525424847486464133825060543026358092633397987801515779205971511795056195352831524558643231911414312848381468823455238952427797698778582111295688371295142340656520165780625504400079491918480085914765498474830997625095493627123
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							32e828534e17e17e66ff6e01469d368dd2abc714
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-home.roche.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api-home.roche.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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