cms.caltimes.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0d:16:6b:ef:92:df:45:ab:90:05:1a:17:13:cc:56:3e was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cms.caltimes.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:16:6b:ef:92:df:45:ab:90:05:1a:17:13:cc:56:3e
Serial Number (int): 17396383674904835093237936468173542974
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ec:68:39:1f:de:dc:21:88:25:c2:ea:09:30:af:c3:f0:f4:e2:96:20
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 0a:0f:fb:65:f2:02:05:2e:6d:08:66:a5:e3:25:eb:e4:c1:4e:24:70
Fingerprint (sha256): 23:4c:7c:8a:7c:c7:45:e1:93:32:94:13:52:aa:46:0d:2b:1f:3f:3a:fd:de:3f:c8:09:f3:82:40:d6:5f:b8:4b

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate cms.caltimes.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cms.caltimes.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cms.caltimes.com

Other certificates including the domain name caltimes.com

(limited to 100 certificates)
cms.caltimes.com
helpdesk.caltimes.com
*.caltimes.com
servicedesk.gerkencompanies.com
c3helpdesk.c3insurance.com
clldaudiocodes01.caltimes.com
dclat.caltimes.com
wires.caltimes.com
sdp.tianjinjuilliard.edu.cn
intranet.caltimes.com
helpdesk.rdek.bc.ca
adit.caltimes.com
opslinkx.caltimes.com
informatique.aubainerie.com
dmsbit.northeastern.edu
intranet.caltimes.com
c3helpdesk.c3insurance.com
intranet.caltimes.com
opslinkx.caltimes.com
helpdesk.valledelsol.com
ftp.caltimes.com
helpdesk.caltimes.com
opslink.caltimes.com
mediadesk.caltimes.com
sdp.tianjinjuilliard.edu.cn
intranet.caltimes.com
ngtstapi.caltimes.com
ftp.caltimes.com
dclat.caltimes.com
*.caltimes.com
rc.caltimes.com
cllpopensip01.caltimes.com
*.caltimes.com
placeanad.latimes.com
intranet.caltimes.com
ftptest.caltimes.com
helpdesk.caltimes.com
cms.caltimes.com
insightidr1.caltimes.com
mediadesk.caltimes.com
cms.caltimes.com
cmg.caltimes.com
ads.caltimes.com
ra.caltimes.com
myapps.caltimes.com
mediadesk.caltimes.com
circsupport.caltimes.com
placeanad.latimes.com
jamfadcs.caltimes.com
dclat.caltimes.com
wires.caltimes.com
ftptest.caltimes.com
cms.caltimes.com
hybrid.caltimes.com
myapps.caltimes.com
intranet.caltimes.com
farmerswife.caltimesqa.com
*.caltimes.com
placeanad.latimes.com
jamfadcs.caltimes.com
intranet.caltimes.com
ngapi.caltimes.com
intranet.caltimes.com
intranet.caltimes.com
servicedesk.gerkenpaving.com
devopshelpdesk.hcss.com
intranet.caltimes.com
dclat.caltimes.com
sdp.tianjinjuilliard.edu.cn
helpdesk.valledelsol.com
mediadesk.caltimes.com
desk.burgiss.com
cllpopensip01.caltimes.com
placeanad.latimes.com
insightidr1.caltimes.com
ads.caltimes.com
ngapi.caltimes.com
cllpopensip01.caltimes.com
intranet.caltimes.com
cms.caltimes.com
placeanad.latimes.com
intranet.caltimes.com
caltimescmg.caltimes.com
dclat.caltimes.com
core.p2p.caltimes.com
opslinkx.caltimes.com
support.aspu.com
ssrs.caltimes.com
helpdesk.caltimes.com
intranet.caltimes.com
support.aspu.com
ads.caltimes.com
adit.caltimes.com
intranet.caltimes.com
clwtawsesui.caltimes.com
core.p2p.caltimes.com
placeanad.latimes.com
servicedesk.gerkencompanies.com
intranet.caltimes.com
caltimes.com

Certificate

The complete raw certificate details for cms.caltimes.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwV1wXFYvo5P56ORmm98Y
eV3t9jKwrP3lVMFX2cdv1f/UqP9bryLMB0Y8TBZGLcKEmTbaux/0L8JesJ+s3+vp
PE470PyOeXX0pN5dIXhrVjG0WQn1VKch93caiiJ2EROjasjHO56yOwFBoLoYwWyE
Tg8M7znYxO2Kp7BkDewYSs/3n7r6COZhziHTLNA7tGEzqM/5qMEdi/D1t5cmPC64
SnFuWbl62wmQ4O3xuz44MVHMmM65aURqRoD8fZZMSAz0qWKS4b45i3WnFNv0iyyd
EzHPb18c5pvCctsRCfKqjn66IataRpm20wJpxA0MpVrjuD5przsckt8QHd3qNLUZ
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17396383674904835093237936468173542974
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cms.caltimes.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24410069301742990535165391159870815362568556529844402028361475556920935461693336173039567321233530012020360809218851986986703829898320858238852747741560932157809377877807280919778838568053782129065721526121173947227944923046191324691135796079998239856049492596500374277898329192306824464109999331889809412983479642530349164837406104391957831760226417885090078266472248812626487901830586745634452040617759733623176641196152966608272406397912512355739214248344840956434985978925926243963825550193074000529942887345887154472459730793248526651412302973311985472552284191411766972385148815555920009335256675427421672249693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ec68391fdedc218825c2ea0930afc3f0f4e29620
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.caltimes.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000168aa21132e000004030046304402206ef801ea7fe06cc1d25dc228392c679a04e19335b5e7dc48ecb76d8559922ca40220188de1677586747efe4167db67a5428222b207c54f12f6dac231bde7c04a51170076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000168aa211404000004030047304502206ff7611ee6bbf3778583c9a4d68fb41123e4899b9c6211a0ca5b38bb8f13ffce022100d92cf756f8f813653e662d5d70d012bfbb61743d3b1a9046dff9aadeaf9fb1d3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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