tisnational.prod.doha.dxau.digital

Issued by Amazon

About this certificate

This digital certificate with serial number 08:94:0c:bc:6d:5c:2c:4c:c7:2e:25:20:ce:4f:7c:48 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tisnational.prod.doha.dxau.digital

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:94:0c:bc:6d:5c:2c:4c:c7:2e:25:20:ce:4f:7c:48
Serial Number (int): 11402542218997574420354929018941701192
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c2:b0:82:33:b2:a4:10:53:45:1f:8c:7c:66:a4:c8:d7:11:32:22:dd
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 78:8f:95:92:96:60:52:f0:63:0e:73:8a:3c:13:01:ff:e2:34:1e:db
Fingerprint (sha256): 2a:38:ce:4e:cd:ae:2b:91:2d:69:08:73:e9:9a:68:12:4c:33:f7:43:81:f3:3a:02:d8:f0:34:fa:8d:c1:09:f8

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate tisnational.prod.doha.dxau.digital

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tisnational.prod.doha.dxau.digital

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tisnational.prod.doha.dxau.digital
tisonline.prod.doha.dxau.digital
*.tisnational.prod.doha.dxau.digital
elearning.prod.doha.dxau.digital

Other certificates including the domain name dxau.digital

(limited to 100 certificates)
status.pipeimob.com.br
status.markiiieb.com
status.ngxnetworks.com
shw.rmt.status.descartes.com
shw.rmt.status.descartes.com
iq.syncd.tech
status.us.premium.salusconnect.io
disponibilidade.activecorp.com.br
shw.rmt.status.descartes.com
status.quarklink.io
status.5starcoms.net
shw.rmt.status.descartes.com
status.anywhere.asolvi.app
pvt.tisonline.prod.doha.dxau.digital
tisnational.prod.doha.dxau.digital
tisnational.prod.doha.dxau.digital
status.mapworks.io
shw.rmt.status.descartes.com
status.pipeimob.com.br
status.doccle.be
status.lenderdock.com
shw.rmt.status.descartes.com
status.dxau.digital
shw.rmt.status.descartes.com
iq.syncd.tech
status.nwtc.edu
api.uat.doha.dxau.digital
osb.prod.doha.dxau.digital
status.5starcoms.net
iq.syncd.tech
shw.rmt.status.descartes.com
status.prokurio.com
status.rapidsos.com
status.whatgoesaroundnyc.com
status.bozic.io
status.buyerlink.com
status.dayonebio.com
status.prokurio.com
status.zeasn.io
*.dxau.digital
status.dealerexpert.ca
tisnational.prod.doha.dxau.digital
status.ssw.edu
hahttpstatus.myvfirst.com
status.zeasn.io
status.naviscloudops.com
disponibilidade.activecorp.com.br
status.orangecityfl.gov
shw.rmt.status.descartes.com
status.us.premium.salusconnect.io
status.rapidsos.com
shw.rmt.status.descartes.com
tisnational.prod.doha.dxau.digital
status.cubiksonline.com
disponibilidade.activecorp.com.br
shw.rmt.status.descartes.com
shw.rmt.status.descartes.com
status.us.premium.salusconnect.io
status.5starcoms.net
shw.rmt.status.descartes.com
status.us.premium.salusconnect.io
shw.rmt.status.descartes.com
status.anywhere.asolvi.app
status.whatgoesaroundnyc.com
status.intellecommerce.com
status.prokurio.com
status.intellecommerce.com
status.anywhere.asolvi.app
disponibilidade.activecorp.com.br
shw.rmt.status.descartes.com
status.nwtc.edu
shw.rmt.status.descartes.com
iq.syncd.tech
status.mapworks.io
shw.rmt.status.descartes.com
status.lenderdock.com
shw.rmt.status.descartes.com
status.facm.cl
shw.rmt.status.descartes.com
status.ngxnetworks.com
status.dayonebio.com
status.apptrana.com
status.tronixtrm.com
shw.rmt.status.descartes.com
iq.syncd.tech
status.apptrana.com
api.uat.doha.dxau.digital
shw.rmt.status.descartes.com
shw.rmt.status.descartes.com
hahttpstatus.myvfirst.com
status.canadianblackbook.com
shw.rmt.status.descartes.com
tisonline.uat.doha.dxau.digital
console.uat.doha.dxau.digital
status.zeasn.io
shw.rmt.status.descartes.com
disponibilidade.activecorp.com.br
status.anywhere.asolvi.app
shw.rmt.status.descartes.com
status.chekk.me

Certificate

The complete raw certificate details for tisnational.prod.doha.dxau.digital in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20A2Qg3WiPinoQbKLvwD
GS3GjXQO/4xA+URVmPMPIh2YMNHMFz8orGvVp5zz7r7cOOq09LbalA82rDtASkDf
At97wvSduHAS+L8I14gESTDOjnIlgBcqGGn2TcQQUlATMdWx1S1qLzZf+U+a+FoC
VbzzrTALJy1Pl2SGIppuS9ieHqmCeeQKnT7cqVdxV4s/lGXekukdwVJxpYPj3f+i
nvzB+vskj0ceEAA6mOsDh7mqIUZTDR2mzZ3DNcfymZe6Y0oL6rVeVfD2o3Djr9Xz
lDw+s8aDUoX8V2Ya/XsI/ZdPq0qthe7qAv8CaCVeqy5WCt9Lh518Ura9xDJJiYnj
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11402542218997574420354929018941701192
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tisnational.prod.doha.dxau.digital'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27677852877982800245213608734954070104196476879475129199906401365996919183864753579734384131638547352855924256286778203662077654848160151630442791868091107272213323925967112505807543123959862229439529089876622271687426394609540466669120169771575488979869322914907653471753012956655262131047393440593009160426966181788819768090452675139760379640603911876853083253024659320217826315749414508818070112592648823064895645357962017783968930540840395537973386739070944147166630538885771654458842683596722883691199942820860857220949045223577258376914110888486110843365478277223956588428200393165583000541429111064456801674161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c2b08233b2a41053451f8c7c66a4c8d7113222dd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tisnational.prod.doha.dxau.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tisonline.prod.doha.dxau.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tisnational.prod.doha.dxau.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elearning.prod.doha.dxau.digital'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001710f08ecb0000004030047304502207238378c39df672f1e097e9e49f7e935188d44b37584d306c15d4d7701fb2c73022100c7c5aacc7cec60d2f5c1431fa3efad2c9a67008b970b5709b65a5c92c80f82c70076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca000001710f08eceb000004030047304502200650d98839fbcb639bee3ecb734abbee121eb22cc3a1edd85dc1b84f8c38cb93022100a664d39ed99bfa8c6928b2e1bddf9b09a299416c70050b387cffb027a3954eac
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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