results.turningtechnologiessg.net

Issued by Amazon

About this certificate

This digital certificate with serial number 05:2a:3a:07:9b:b0:b7:02:99:c2:c9:13:0d:30:36:8b was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=results.turningtechnologiessg.net

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:2a:3a:07:9b:b0:b7:02:99:c2:c9:13:0d:30:36:8b
Serial Number (int): 6865393429521003229252421039141435019
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 3a:9f:24:b4:5f:16:f8:19:89:70:ea:22:c5:89:e2:d1:78:90:4a:ab
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 71:1d:f9:39:e8:59:5b:7b:23:d8:70:25:c2:79:71:c9:67:97:0a:d6
Fingerprint (sha256): 28:83:55:9e:66:fd:ef:3a:99:34:a1:4b:66:05:a0:82:a6:58:4d:ba:9e:4d:b2:fd:09:07:1e:ee:33:e8:5f:16

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate results.turningtechnologiessg.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for results.turningtechnologiessg.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

results.turningtechnologiessg.net

Other certificates including the domain name turningtechnologiessg.net

(limited to 100 certificates)
instructor.turningtechnologiessg.net
polling.turningtechnologies.com
cdn.turningtechnologiessg.net
scheduling-consumer.turningtechnologiessg.net
polling.turningtechnologies.com
download.turningtechnologiessg.net
scheduling-consumer.turningtechnologiessg.net
api.turningtechnologiessg.net
api.turningtechnologiessg.net
polling.turningtechnologiessg.net
polling.turningtechnologies.com
polling.turningtechnologiessg.net
results.turningtechnologiessg.net
user-server-consumer.turningtechnologiessg.net
utility.turningtechnologiessg.net
examview.com
student.turningtechnologiessg.net
email.turningtechnologiessg.net
cdn.turningtechnologiessg.net
student.turningtechnologiessg.net
polling-server.turningtechnologiessg.net
polling.turningtechnologiessg.net
utility.turningtechnologiessg.net
account.turningtechnologiessg.net
responseware.turningtechnologiessg.net
push-notification.turningtechnologiessg.net
account.turningtechnologiessg.net
responseware.eu
content.turningtechnologiessg.net
responseware.eu
results.turningtechnologiessg.net
cdn.turningtechnologiessg.net
responseware.eu
student.turningtechnologiessg.net
session-analytics.turningtechnologiessg.net
polling.turningtechnologiessg.net
instructor.turningtechnologiessg.net
responseware.eu
polling.turningtechnologiessg.net
content.turningtechnologiessg.net
responseware.eu
instructor.turningtechnologiessg.net
scheduling-consumer.turningtechnologiessg.net
results.turningtechnologiessg.net
account.turningtechnologiessg.net
responseware.turningtechnologiessg.net
polling.turningtechnologiessg.net
responseware.eu
admin.turningtechnologiessg.net
admin.turningtechnologiessg.net
responseware.turningtechnologiessg.net
responseware.eu
download.turningtechnologiessg.net
content.turningtechnologiessg.net
erp.turningtechnologiessg.net
scheduling-consumer.turningtechnologiessg.net
oauth.turningtechnologiessg.net
polling.turningtechnologies.com
results-server-consumer.turningtechnologiessg.net
responseware.turningtechnologiessg.net
internaladmin.turningtechnologiessg.net
polling.turningtechnologiessg.net
instructor.turningtechnologiessg.net
api.turningtechnologiessg.net
responseware.eu
user-server-consumer.turningtechnologiessg.net
cdn.turningtechnologiessg.net
results-server-consumer.turningtechnologiessg.net
session-analytics.turningtechnologiessg.net
results-server-consumer.turningtechnologiessg.net
internaladmin.turningtechnologiessg.net
responseware.eu
account.turningtechnologiessg.net
responseware.turningtechnologiessg.net
account.turningtechnologiessg.net
internaladmin.turningtechnologiessg.net
polling.turningtechnologiessg.net
responseware.turningtechnologiessg.net
account.turningtechnologiessg.net
oauth.turningtechnologiessg.net
results-server-consumer.turningtechnologiessg.net
oauth.turningtechnologiessg.net
scheduling.turningtechnologiessg.net
account.turningtechnologiessg.net
account-api.turningtechnologiessg.net
session-analytics.turningtechnologiessg.net
scheduling.turningtechnologiessg.net
responseware.eu
admin.turningtechnologiessg.net
gradebook.turningtechnologiessg.net
account-api.turningtechnologiessg.net
lms-integration.turningtechnologiessg.net
api.turningtechnologiessg.net
api.turningtechnologiessg.net
polling.turningtechnologiessg.net
polling.turningtechnologiessg.net
scheduling.turningtechnologiessg.net
user-server-consumer.turningtechnologiessg.net
results-server-consumer.turningtechnologiessg.net
student.turningtechnologiessg.net

Certificate

The complete raw certificate details for results.turningtechnologiessg.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIPUnOAkI2iTtJ+ut3tb
urAfXvYs+CuIUFzIXppcnChWRIK3LVE4uiS2qSXa9AEqIOiAet+MPtjL/IUAkP6S
qoXYdbOCggGblC0TbVngKR8R5U/wEKZMlvocOfzCF354skfYVHh1HSPk43KOFVss
ZzldbrsrCzC2YPiClAOz/hBIHTRWY+1RNZ/23ELQcVPEQfLjIFDwYNdvRC7t9ml+
x47lyfHPf/zz4QBUotbgUABar504ueNB7kQlHc/9yES7toEGqJ6TSZph4VaH9ncr
ANIKCP/kT9I+kyG9ilQIw1Ufnt9d3cSgqCrIAbf6VVKjbQr7ZeR0U41WWAHgmYT4
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6865393429521003229252421039141435019
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-12 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'results.turningtechnologiessg.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24807715825016986657280053091101058596339463399650393238782051419967680732149085617750708221827067558909139032488329908107250828513924671972687160375374902679121732017120338549352919983217237307834795795591350708201582988535031284673226010952646402419922067012301098233812712876872841367254388902197726039640756660921478727938509366906679505578106640555214018128628750824159993297149758369691553769047726714975628365464805581809642846978792336082695451562212861848985076921279681715559609738034342665355871215879739467467412080027238011255669398324268675253845915354393676987226287761566110324340465763926672761223383
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a9f24b45f16f8198970ea22c589e2d178904aab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'results.turningtechnologiessg.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000163f16afe640000040300473045022100a2acac5e389e7cd7aa2a1e37ba3fe6384829a09210958578bb012d10be3352610220122fd3e8779b9aab0063ee3c4594752d2e6f4344ea8c0a3182c043eabe2cdd420076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000163f16afe4b000004030047304502210080ce39e92a77287dd365c82587eaaa04493b060b4eee8722f892cb352d8cbc3402201d6ec7657fe630e589212fe7cbe8e08e41574a9b46482805c4366b59bd0097ab
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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