atlantis.engineroom.anchor.net.au

Issued by Amazon

About this certificate

This digital certificate with serial number 03:50:51:dc:0e:a9:ce:04:df:49:01:ec:f1:33:54:ac was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=atlantis.engineroom.anchor.net.au

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:50:51:dc:0e:a9:ce:04:df:49:01:ec:f1:33:54:ac
Serial Number (int): 4404728045949254250838015189554779308
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 30:3a:c9:ee:9d:21:2c:86:e5:1a:12:ee:52:7f:cd:9c:c7:a6:fd:99
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): fa:43:2c:79:33:fb:77:83:10:42:87:3d:bb:38:62:fe:07:de:64:a3
Fingerprint (sha256): 2f:20:05:0e:9e:54:de:cd:01:7d:73:e1:e4:39:19:e7:77:78:e4:69:75:be:7f:e3:d0:4d:34:06:74:7c:b5:fe

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate atlantis.engineroom.anchor.net.au

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for atlantis.engineroom.anchor.net.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

atlantis.engineroom.anchor.net.au
www.atlantis.engineroom.anchor.net.au

Other certificates including the domain name anchor.net.au

(limited to 100 certificates)
polikil.tmp.anchor.net.au
kdogg.anchor.net.au
sgch.com.au
librenms.syd1.anchor.net.au
prod.slatteryauctions.anchor.net.au
status.acordo.pro
fetlifestatus.com
rdgw.access.cx.anchor.net.au
www.berth70.anchor.net.au
berth70.anchor.net.au
oc.castor.anchor.net.au
staging.platypusshoes.com.au.tmp.anchor.net.au
status.acordo.pro
networkstatus.360webhosting.co.uk
lweb01.reef.anchor.net.au
status.acordo.pro
fetlifestatus.com
rdgw.access.cx.anchor.net.au
status.acordo.pro
fetlifestatus.com
rdgw.access.silq.anchor.net.au
fetlifestatus.com
team-khantstopus.com
status.acordo.pro
admin.prod.blackswallow.anchor.net.au
admin.lifeinteriors.com.au.lb.stg.lifeinteriors.anchor.net.au
surf30.anchor.net.au
dev.slatteryauctions.anchor.net.au
*.mcp.anchor.net.au
lifeinteriors.com.au.tmp.anchor.net.au
status.acordo.pro
fetlifestatus.com
fetlifestatus.com
fetlifestatus.com
chart270.anchor.net.au
staging.platypusshoes.com.au.tmp.anchor.net.au
netbox.anchor.net.au
oc.castor.anchor.net.au
prod.platypusshoes.co.nz.www.prod.accent.anchor.net.au
fetlifestatus.com
api.kitchenaid.co.nz.viper800.anchor.net.au
atlantis.engineroom.anchor.net.au
networkstatus.360webhosting.co.uk
lifeinteriors.com.au.lb.stg.lifeinteriors.anchor.net.au
api.kitchenaid.com.au.viper800.anchor.net.au
networkstatus.360webhosting.co.uk
networkstatus.360webhosting.co.uk
fetlifestatus.com
sgch.com.au
berth70.anchor.net.au
anchor.net.au
networkstatus.360webhosting.co.uk
fetlifestatus.com
fetlifestatus.com
staging.lwreid.com.au.tmp.anchor.net.au
anchor.net.au
fetlifestatus.com
networkstatus.360webhosting.co.uk
trick100.anchor.net.au
status.acordo.pro
fetlifestatus.com
sgch.com.au
fetlifestatus.com
status.acordo.pro
fetlifestatus.com
lifeinteriors.com.au.lb.stg.lifeinteriors.anchor.net.au
status.acordo.pro
uat.marketboomer.anchor.net.au
www.anchorreef.com
edge-test-production.stpg-personal.space
fetlifestatus.com
preprod.doorhandles.com.au.tmp.anchor.net.au
staging.lwreid.com.au.tmp.anchor.net.au
fetlifestatus.com
fetlifestatus.com
staging.lwreid.com.au.tmp.anchor.net.au
trick100.anchor.net.au
status.acordo.pro
networkstatus.360webhosting.co.uk
networkstatus.360webhosting.co.uk
team-khantstopus.com
berth70.anchor.net.au
fetlifestatus.com
ninja.poc.marketboomer.anchor.net.au
mainsail.anchor.net.au
api.kitchenaid.co.nz.viper800.anchor.net.au
fetlifestatus.com
sgch.com.au
status.acordo.pro
fetlifestatus.com
boris.unsw.edu.au.web2.prod.unsw.anchor.net.au
mainsail.anchor.net.au
*.aws.smartygrants.anchor.net.au
*.anchor.net.au
api.kitchenaid.com.au.viper800.anchor.net.au
*.stg.fluidmt.anchor.net.au
status.acordo.pro
status.acordo.pro
status.acordo.pro
sgch.com.au

Certificate

The complete raw certificate details for atlantis.engineroom.anchor.net.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsagRxy8TeFcrN2QzIMLq
JUKDb8p9FKNrC+iAvwoR3g2iBv4jE/pFkh2QS7I4RKzY0jU/Wu3WuX/+cjS1H7UN
6k5RyKnEYTvjf+B6Xcoc7xneyPksCSYNcBM6osr3KxX0rg7WsyG0ctmKw2QpvaaH
wiOIEbKHNxYpVOUmHisneFo4SqA/Cws31e74pmKuPX4uz+vv2dmsllNdmGbkdXNW
lJCvOGjltJcbouiRkxjq+UjxX8sd+MqDqIDA43mL4o/BiOx7sAtcnLmCgJiX0A/F
PbJCmDxbfQJfC40NiCxCAU0ek6FTuzQD11PzK01I0OZdzQT4xgnuign6AbvxwoRO
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4404728045949254250838015189554779308
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'atlantis.engineroom.anchor.net.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22427058111505834408698769518689594633542890892261601970263936876145416467782147096412188884976065968025813216052321132746640810959609929196910714130334746552084813738817133988856694607392839446360405755870845601164964388496803173553003520391582718680072302750064620424703659407090699004737002673974491060871754420792699834506717830371621124811701232771054372033690571216952682641533031476819305331837021771648256183203770910223026700620941374613204289337861771234595012062904261994169317914124739848605413452107908683845909392077678351917242460795538603416181564750524046590178059891601771167120579352050415406698093
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							303ac9ee9d212c86e51a12ee527fcd9cc7a6fd99
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlantis.engineroom.anchor.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atlantis.engineroom.anchor.net.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016d84ecae370000040300473045022100f4993cb098951fdfb2294d4739d7725a33411da0f187917ffa132524be777bd1022053b382f8436f7656436f4c3aa8289180494971eccf78cb57f3dee02c68bd24b10077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016d84ecae9f00000403004830460221009f162ba8d6600b0dac2369c0a97ce437d9cd50723770f50db75f99a2e725443a022100deef49d16ec3c24229b337dc3a549518522aecf64d85d87e6f48f00dddd8ebfe
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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