nonprod-classic-rest-api.dev.adtech.de

Issued by Amazon

About this certificate

This digital certificate with serial number 02:56:cc:33:50:14:ea:0b:ab:34:c3:7e:0b:4f:20:93 was issued on by Amazon.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=nonprod-classic-rest-api.dev.adtech.de

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:56:cc:33:50:14:ea:0b:ab:34:c3:7e:0b:4f:20:93
Serial Number (int): 3109135198383344641216713929536774291
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 2a:2a:83:6e:e5:82:f7:54:11:f7:24:34:04:d8:d1:24:8a:22:bf:11
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 1a:ee:21:5f:5a:c8:e4:e1:34:4e:79:c9:c4:81:49:d5:dc:1f:22:33
Fingerprint (sha256): 30:35:7f:7c:42:89:02:c7:23:e4:ae:38:cc:4d:03:a1:b1:5b:ef:08:53:d9:96:f5:9c:df:59:26:b5:5a:7c:ae

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate nonprod-classic-rest-api.dev.adtech.de

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nonprod-classic-rest-api.dev.adtech.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nonprod-classic-rest-api.dev.adtech.de
nonprod-api-selene.dev.adtech.de
nonprod-classic-api.dev.adtech.de
nonprod-classic-api.dev.adtechus.com
nonprod-api-selene.dev.adtechus.com
nonprod-classic-rest-api.dev.adtechus.com

Other certificates including the domain name adtech.de

(limited to 100 certificates)
targeting-service.adtech.de
console.oneadserver.aol.de
report.adtech.de
aka-cdn.adtech.de
consent.oath.com
formula-api.adtech.de
targeting.oneadserver.aol.de
console.oneadserver.aol.de
pri-adserver-origin-eu.prod.adtech.de
stage.consent.oath.com
stage.guce2.oath.com
aka-cdn.adtech.de
*.adtech.de
selene-api.reserved-adserver-dev.aws.oath.cloud
stage.consent.oath.com
api.oneadserver.aol.com
stage.consent.oath.com
pri-adserver-origin-eu.prod.adtech.de
imspro.oneadserver.aol.de
stage.consent.oath.com
console.oneadserver.aol.de
ws.adtech.de
nonprod-classic-rest-api.dev.adtech.de
console.oneadserver.aol.de
aka-cdn.adtech.de
selene.oneadserver.aol.com
learnapi.oneadserver.aol.de
aka-cdn.adtech.de
*.adtech.de
api.oneadserver.aol.com
console-pr.oneadserver.aol.de
api.oneadserver.aol.com
selene.oneadserver.aol.com
1as-bannertest.adtech.de
selene.oneadserver.aol.com
imspro.oneadserver.aol.de
formula-api.adtech.de
pri-adserver-origin-eu.prod.adtech.de
trunk.consent.oath.com
ws2.adtech.de
consent.oath.com
consent.oath.com
imspro.oneadserver.aol.de
consent.oath.com
targeting-service.adtech.de
api.oneadserver.aol.com
console.oneadserver.aol.de
console.oneadserver.aol.de
pri-adserver-origin-eu.prod.adtech.de
imspro.oneadserver.aol.de
vlibs.eu-central-1.dev.adtech.de
stage.consent.oath.com
trunk.consent.oath.com
trunk.consent.oath.com
stage.consent.oath.com
assets.oneadserver.aol.de
*.adtech.de
console.oneadserver.aol.de
console-pr.oneadserver.aol.de
trunk.consent.oath.com
stage.consent.oath.com
formula-api.adtech.de
api.oneadserver.aol.com
adserver.adtech.de
console-pr.oneadserver.aol.de
consent.oath.com
cstest.oneadserver.aol.com
console-pr.oneadserver.aol.com
nonprod-classic-rest-api.dev.adtech.de
trunk.consent.oath.com
console-pr.oneadserver.aol.de
pri-adserver-origin-eu.prod.adtech.de
console.oneadserver.aol.de
eks-nonprod-classic-rest-api.dev.adtech.de
trunk.consent.oath.com
stage.consent.oath.com
*.adtech.de
nonprod-classic-rest-api.dev.adtech.de
consent.oath.com
consent.oath.com
stage.consent.oath.com
consent.oath.com
imspro.oneadserver.aol.de
formula-api.adtech.de
a.adtech.de
aka-cdn.adtech.de
pri-adserver-origin-eu.prod.adtech.de
consent.oath.com
stage.consent.oath.com
aka-cdn.adtech.de
aka-cdn.adtech.de
trunk.consent.oath.com
formula-api.adtech.de
consent.oath.com
api.oneadserver.aol.com
stage.guce2.oath.com
console.oneadserver.aol.de
pri-adserver-origin-eu.prod.adtech.de
formula-api.adtech.de
trunk.consent.oath.com

Certificate

The complete raw certificate details for nonprod-classic-rest-api.dev.adtech.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJTLHlPxgY65AYvnpHRo
LjdZlO0uQAsD/V9O2PZBKBx7K2vQAMGrnQlZrShSANfwRJbJPTcAvsV6qhcM2Cdi
er/a1khh/yNpjE590U3y+ooBNUZDXEF+ZDhD7RPvdBjmwWB/+N7AwqRjzaMDbIu+
fH5fx53Pr/y1AtQJEaMA3whgjgTdjM8E50+lGJuWVldVk7TA6hoWOr3gBqzwmi+9
GG+0KrlrDDHJ7Ux0xlIYuACk8TS8MP2An/bRx9PlcNXBQGDy0wcETcGyNNEcwjdj
Gr5OUWVqSPj+mSd3CaHYXkdLBDsDbwUnI7IldrCZau5zuDxh+0OhX265WgKzRr7n
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3109135198383344641216713929536774291
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-21 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nonprod-classic-rest-api.dev.adtech.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21281408010019725255560983584335791379301437144352397915318740848561336786199105248438126491889843266356202752502584894718487476242244949993047222491093955618217115445407411024800902826327193743676858138659560243939367068158032006825361406050513960375142856884742090816189671448547581752373106124121723473856130610522173406947821598018632798247378691322683932251147679498687797456705080856432051931454835289899273677607091636203551449510055024003749890751027061984845581810929367379082411924915970465566845716031039454259865271561759911782254975956115521319677838275511421128573591517183897511197087979795212801075131
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2a2a836ee582f75411f7243404d8d1248a22bf11
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (230 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprod-classic-rest-api.dev.adtech.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprod-api-selene.dev.adtech.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprod-classic-api.dev.adtech.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprod-classic-api.dev.adtechus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprod-api-selene.dev.adtechus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprod-classic-rest-api.dev.adtechus.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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