sams.bluetree-qa.co.uk

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:30:ca:92:30:96:43:02:63:c0:20:32:9e:dd:b6:7d was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sams.bluetree-qa.co.uk

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:30:ca:92:30:96:43:02:63:c0:20:32:9e:dd:b6:7d
Serial Number (int): 16204074827717262708036453045056157309
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 08:11:78:44:e0:ed:d1:3b:95:a4:24:62:1b:e1:29:37:8d:3c:d7:39
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 44:56:d7:6b:06:70:2b:60:60:53:ac:ed:dd:41:15:db:68:26:b7:ed
Fingerprint (sha256): 2f:2d:e1:1f:fa:12:62:9b:1f:09:16:a3:b5:2c:8f:f9:68:90:81:51:45:f5:d9:43:c5:70:61:d3:4a:3b:c2:bb

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate sams.bluetree-qa.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sams.bluetree-qa.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sams.bluetree-qa.co.uk

Other certificates including the domain name bluetree-qa.co.uk

(limited to 100 certificates)
product-api.bluetree-qa.co.uk
otis-uat.bluetree-qa.co.uk
product-api.bluetree-qa.co.uk
otis.bluetree-qa.co.uk
sams-uat.bluetree-qa.co.uk
smc.bluetree-qa.co.uk
product-api.bluetree-qa.co.uk
default-api-cluster.bluetree-qa.co.uk
smc.bluetree-qa.co.uk
ipd.bluetree-qa.co.uk
product-api.bluetree-qa.co.uk
coconut.bluetree-qa.co.uk
coconut.bluetree-qa.co.uk
coconut.bluetree-qa.co.uk
sams-uat.bluetree-qa.co.uk
default.bluetree-qa.co.uk
salesforce-sandbox.bluetree-qa.co.uk
route1print.bluetree-qa.co.uk
ops-cluster-default.bluetree-qa.co.uk
salesforce-sandbox.bluetree-qa.co.uk
sams.bluetree-qa.co.uk
product-api.bluetree-qa.co.uk
sams.bluetree-qa.co.uk
sams-uat.bluetree-qa.co.uk
sams-uat.bluetree-qa.co.uk
connect.bluetree-qa.co.uk
coconut.bluetree-qa.co.uk
ipd.bluetree-qa.co.uk
otis.bluetree-qa.co.uk
otis.bluetree-qa.co.uk
ipd.bluetree-qa.co.uk
connect.bluetree-qa.co.uk
bluetree-medical.bluetree-qa.co.uk
salesforce-sandbox.bluetree-qa.co.uk
connect.bluetree-qa.co.uk
coconut.bluetree-qa.co.uk
ops-cluster-default.bluetree-qa.co.uk
connect.bluetree-qa.co.uk
default.bluetree-qa.co.uk
otis-uat.bluetree-qa.co.uk
otis.bluetree-qa.co.uk
sams.bluetree-qa.co.uk
default-api-cluster.bluetree-qa.co.uk
smc.bluetree-qa.co.uk
salesforce-sandbox.bluetree-qa.co.uk
product-api.bluetree-qa.co.uk
sams.bluetree-qa.co.uk
salesforce-sandbox.bluetree-qa.co.uk
ipd.bluetree-qa.co.uk
results-api.bluetree-qa.co.uk
otis.bluetree-qa.co.uk
product-api.bluetree-qa.co.uk
bluetree-medical.bluetree-qa.co.uk
otis.bluetree-qa.co.uk
salesforce-sandbox.bluetree-qa.co.uk
ipd.bluetree-qa.co.uk
otis.bluetree-qa.co.uk
sams.bluetree-qa.co.uk
connect.bluetree-qa.co.uk
bluetree-medical.bluetree-qa.co.uk
connect.bluetree-qa.co.uk
default.bluetree-qa.co.uk
sams-uat.bluetree-qa.co.uk
product-api.bluetree-qa.co.uk
bluetree-medical.bluetree-qa.co.uk
smc-api-gateway.bluetree-qa.co.uk
salesforce-sandbox.bluetree-qa.co.uk
default.bluetree-qa.co.uk
ipd.bluetree-qa.co.uk
default-api-cluster.bluetree-qa.co.uk
ops-cluster-default.bluetree-qa.co.uk
connect.bluetree-qa.co.uk
product-api.bluetree-qa.co.uk
ipd.bluetree-qa.co.uk
otis.bluetree-qa.co.uk
results-api.bluetree-qa.co.uk
salesforce-sandbox.bluetree-qa.co.uk
default-api-cluster.bluetree-qa.co.uk
instantprint.bluetree-qa.co.uk
ops-cluster-default.bluetree-qa.co.uk
sams.bluetree-qa.co.uk
ipd.bluetree-qa.co.uk
default-api-cluster.bluetree-qa.co.uk
product-api.bluetree-qa.co.uk
otis-uat.bluetree-qa.co.uk
ipd.bluetree-qa.co.uk
params-api.bluetree-qa.co.uk
default-api-cluster.bluetree-qa.co.uk
sams.bluetree-qa.co.uk
smc-api-gateway.bluetree-qa.co.uk
ipd.bluetree-qa.co.uk
ops-cluster-default.bluetree-qa.co.uk
sams-uat.bluetree-qa.co.uk
smc-api-gateway.bluetree-qa.co.uk
smc.bluetree-qa.co.uk
otis-uat.bluetree-qa.co.uk
product-api.bluetree-qa.co.uk
sams.bluetree-qa.co.uk
r1-connect-api.bluetree-qa.co.uk
sams.bluetree-qa.co.uk

Certificate

The complete raw certificate details for sams.bluetree-qa.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1vR4ZAvvRlpRM83oKjma
M1NFkSVGzREfamLdPpG87KrW++YTqLvl6wpEts2//MX3B+cPm95G9oJtE8898agG
ApsigCIC3CKmCXa0wRL+hCtpPsOC2Bc/oG9rYuRSVsuiL9+nHpHice0d1LO0ekW/
axJa/GFcgDbER0STPlnZe1Bu+veUle8vnQtKd5vfZw6+QJWMSixbWmcyx3cyoTYe
Pys0FdEE8+HErY5y078GZAfO8rtY5ua6GUdRfnoseda+pT0zzmrZzOOJUkPH5pMA
zXVwsTZ09Rq00lsyLdQGiSk9QSGnQIMXytQnBlBnGSNctOyjS6Y1tTtwBugPMgg4
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16204074827717262708036453045056157309
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sams.bluetree-qa.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27135550049187087880727517152573125737062382528008869776099833313589187739845318109542461376383501057127799047699297444047391084794062733092040059811615772574886206533436291001083186219541039777307101124657612379230234689402067397990886442149023619170031577250188339883312345000237735793253106133059922366784887751340139513689542326233268814133324993583531759001487535069271059916663991953693415129648268670496325914796686092524026176739066886975388074391570349782158109011292144778107860359453802456398149459981873134703007706426900504902168188703382990050554058873911014653269322774220494336390759896234342174177369
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							08117844e0edd13b95a424621be129378d3cd739
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sams.bluetree-qa.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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