debian-qualif.effisoft.cloud

Issued by Amazon

About this certificate

This digital certificate with serial number 04:c5:5e:a7:33:41:53:75:95:09:6c:06:58:2c:e3:d4 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=debian-qualif.effisoft.cloud

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c5:5e:a7:33:41:53:75:95:09:6c:06:58:2c:e3:d4
Serial Number (int): 6341714257739617478189882948274938836
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 56:45:df:bb:86:9b:d7:4a:63:12:0b:62:2a:cd:aa:ea:af:79:0f:68
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): b0:31:ce:63:2f:14:16:41:b4:0b:cf:0c:eb:38:39:eb:bc:eb:fe:97
Fingerprint (sha256): 2f:69:f9:4e:f9:58:34:46:86:9d:8e:82:77:72:33:82:a1:c2:fe:f9:38:d9:e6:ae:8b:ca:a2:17:bf:4d:0e:f8

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate debian-qualif.effisoft.cloud

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for debian-qualif.effisoft.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

debian-qualif.effisoft.cloud

Other certificates including the domain name effisoft.cloud

(limited to 100 certificates)
wst-wxl-ppd.effisoft.cloud
qbe-bo-dev.effisoft.cloud
enc-wxl-prd.effisoft.cloud
qbe-wxl-uat.effisoft.cloud
ars-aco-prd.effisoft.cloud
efi-tst.effisoft.cloud
ci-pxl-915a.effisoft.cloud
qbe-bastion-tbm.effisoft.cloud
deb2-qlf2.effisoft.cloud
pen-tst.effisoft.cloud
sta-wxl-tst.effisoft.cloud
ics-wxl-ada.effisoft.cloud
qbebusinessobjectsdev.effisoft.cloud
its-jasper-tst916.effisoft.cloud
wxl1.effisoft.cloud
ics-aco-tst.effisoft.cloud
aco.effisoft.cloud
qlf-dev.effisoft.cloud
ci-pxl-919s.effisoft.cloud
qbe-bastion-tbl.effisoft.cloud
kbc-wxl-tst.effisoft.cloud
ics-wxl-ada.effisoft.cloud
qbe-wxl-ppd.effisoft.cloud
qbe-uat.effisoft.cloud
ics-aco-tst.effisoft.cloud
test3.effisoft.cloud
deb3-qlf3.effisoft.cloud
ras-wxl-tst.effisoft.cloud
ics-wxl-tst.effisoft.cloud
qbe-bastion-tbl.effisoft.cloud
ics-jasper-tst.effisoft.cloud
advens-sec.effisoft.cloud
qbe-bo-tbl.effisoft.cloud
sra-tst.effisoft.cloud
qbe-wxl-tbl.effisoft.cloud
jbg-dev.effisoft.cloud
efi-tst.effisoft.cloud
ics-wxl-ada.effisoft.cloud
qbebusinessobjectsdev.effisoft.cloud
debian-qualif.effisoft.cloud
sso-auth-tst.effisoft.cloud
qbe-wxl-tbl.effisoft.cloud
boe-bo-tst.effisoft.cloud
qbe-wxl-tbl.effisoft.cloud
qbe-bastion-tbl.effisoft.cloud
ics-wxl-ada.effisoft.cloud
jb-dev.effisoft.cloud
qbe-wxl-ubn.effisoft.cloud
jbg-dev.effisoft.cloud
test3.effisoft.cloud
ics-aco-tst.effisoft.cloud
kbc-bastion-prd.effisoft.cloud
wst-bo-prd.effisoft.cloud
qbe-tbl.effisoft.cloud
qbe-wxl-tbl.effisoft.cloud
ics-aco-tst.effisoft.cloud
qbe-bo-uat.effisoft.cloud
qbe-bo-tbl.effisoft.cloud
ars-aco-prd.effisoft.cloud
wst-wxl-ppd.effisoft.cloud
efi-dev.effisoft.cloud
qbe-env-status.effisoft.cloud
wst-wxl-dev.effisoft.cloud
ics-aco-tst.effisoft.cloud
eflb-wxl-dev.effisoft.cloud
mbo-tst.effisoft.cloud
sra-tst.effisoft.cloud
qbe-bo-dev.effisoft.cloud
ci-pxl-917a.effisoft.cloud
ci-pxl-915a.effisoft.cloud
ics-wxl-ada.effisoft.cloud
mkm-tst.effisoft.cloud
ics-jasper-tst.effisoft.cloud
qbe-wxl-dbn.effisoft.cloud
qbe-bastion-uat.effisoft.cloud
ics-wxl-ada.effisoft.cloud
jb-dev.effisoft.cloud
demo1-tst.effisoft.cloud
efi-dev.effisoft.cloud
wxl2.effisoft.cloud
qa2.effisoft.cloud
jb-dev.effisoft.cloud
qbe-auth-tbl.effisoft.cloud
qbe-wxl-tbm.effisoft.cloud
qbe-bo-ppd.effisoft.cloud
for-wxl-prd.effisoft.cloud
qbe-auth-tbl.effisoft.cloud
ics-wxl-rpa.effisoft.cloud
qbe-wxl-tbl.effisoft.cloud
ics-aco-tst.effisoft.cloud
ics-jasper-tst.effisoft.cloud
ci-jasper-pxl-915a.effisoft.cloud
mfp-aco-tbl.effisoft.cloud
jenkins-legacy.effisoft.cloud
sso-wxl-tst.effisoft.cloud
qbe-bastion-dbl.effisoft.cloud
qbe-wxl-dev.effisoft.cloud
qbe-dev.effisoft.cloud
debian-qualif.effisoft.cloud
enc-auth-prd.effisoft.cloud

Certificate

The complete raw certificate details for debian-qualif.effisoft.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHbrpSABss2ogu6MJA0s
O2cxMkw6LMqLe5k2ml2Z9Zgfg7VPC/3YBHzG1v24pGXmLrJXEZGMYcWMkJGEsEGm
1crWEFQB9tUtYN+d8wGJyEkB4NQZ0bkSmYVn/UrvdM4Bcsu/4sP0k7S2/f5W+Ay0
3oumCtOnrAKncHHdd3cylZdUk9I5LS3GuVdmCIOP2U2Jm32LRVVnFMHv0y5+253l
HR9/qSsVQdeMPhuiLxVMfTLVtQLQ0vKGfd7rZZu1hLZ2AJ0DOqds7NpuiKLZ4WnV
V4uodjBDlkEt+eDqDkbs+TJlPEBKHPSMkVPp5aM27fRYL4Cm6nXj2ElRb00CUEDY
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6341714257739617478189882948274938836
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'debian-qualif.effisoft.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20256770672991419318850860045867836210711715932653636112481691649662286699085462377805245426290779053499858571909116786361012008181703422989677623352466519586242367518743864120911632589866728995391250238521577746162435056430397212818363271937707248324617873091708488418524046122158212847179064170243895333456395004595677405963912356133767426749339439555549966910373289145258522511982614813822722333502304969113067606430180335104881079127456368768594003952201304045938273258974702953292921234165040362631393499627238243322654716101738033764652575792130010995796041621036817850292902407690997901696679108601350757341341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5645dfbb869bd74a63120b622acdaaeaaf790f68
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'debian-qualif.effisoft.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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