escenic.cue.cloud

Issued by Amazon

About this certificate

This digital certificate with serial number 0d:fb:43:83:ff:ab:4f:ac:fc:d2:4e:04:1f:2c:e3:d1 was issued on by Amazon.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=escenic.cue.cloud

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:fb:43:83:ff:ab:4f:ac:fc:d2:4e:04:1f:2c:e3:d1
Serial Number (int): 18584599836154662190664206298358014929
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 06:8e:51:1b:fd:14:f6:d5:82:b6:73:e6:88:3d:7d:c0:5c:aa:49:07
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 02:bf:a1:f0:e7:a8:07:7b:9b:41:80:5e:f1:77:31:3d:08:6f:90:24
Fingerprint (sha256): 37:62:f1:8d:56:fe:57:f9:eb:b5:5d:ac:66:25:da:ed:1f:2a:28:96:e9:a5:8c:81:6c:58:62:6d:ff:7b:37:0a

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate escenic.cue.cloud

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for escenic.cue.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

escenic.cue.cloud
*.test.escenic.cue.cloud
*.prod.escenic.cue.cloud
*.production.escenic.cue.cloud
*.escenic.cue.cloud
*.staging.escenic.cue.cloud

Other certificates including the domain name cue.cloud

(limited to 100 certificates)
nexo.cue.cloud
prod.globalblue.cue.cloud
ece-qatest15.cci.cue.cloud
elsoldemexico.test1.oem.cue.cloud
*.forum.cue.cloud
*.rwp.devtest.vrm.cue.cloud
elsoldemexico.com.mx
elsoldemexico.staging.oem.cue.cloud
*.test.madsack.cue.cloud
*.cue.cloud
escenic.cue.cloud
*.bnn.cue.cloud
*.cue.cloud
ece.banjo-vanadium.poc.cue.cloud
*.staging.forum.cue.cloud
elsoldemexico.oem.cue.cloud
*.cue.cloud
ece-stingray.cci.cue.cloud
*.oem.cue.cloud
ece-redspot.cci.cue.cloud
*.oem.cue.cloud
prod-site.vrm.cue.cloud
escenic.cue.cloud
*.staging.forum.cue.cloud
*.forum.cue.cloud
forum.cue.cloud
bnn.de
*.staging.mcc.cue.cloud
*.forum.cue.cloud
*.mcc.cue.cloud
*.bnn.cue.cloud
mediahuis.cue.cloud
dev.pd.cue.cloud
sites.vrm.cue.cloud
elsoldemexico.com.mx
*.cue.cloud
elsoldemexico.oem.cue.cloud
*.cue.cloud
www.elsoldemexico.staging.oem.cue.cloud
*.forum.cue.cloud
belo.cue.cloud
*.oem.cue.cloud
*.forum.cue.cloud
*.cci.cue.cloud
*.test.mcc.cue.cloud
*.oem.cue.cloud
ng-cue-unstable-contentstore.cci.cue.cloud
bnn.de
escenic.cue.cloud
ng-cueways.cci.cue.cloud
*.oem.cue.cloud
katura.pola.cue.cloud
elsoldemexico.staging.oem.cue.cloud
ng-stratus.cci.cue.cloud
*.cue.cloud
diariodelsur.com.mx
nexojornal.com.br
*.cue.cloud
dynatrace-activegate.cci.cue.cloud
um-qa.cci.cue.cloud
devnglb.belo.cue.cloud
img.digital.staging.vrm.cue.cloud
elsoldemexico.com.mx
*.oem.cue.cloud
elsoldemexico.com.mx
cook.staging.borsen.cue.cloud
nexojornal.com.br
*.cue.cloud
*.staging.forum.cue.cloud
nglb.hearst.cue.cloud
*.bnn.cue.cloud
*.forum.cue.cloud
escenic.cue.cloud
*.staging.forum.cue.cloud
*.staging.oem.cue.cloud
ng-fuji.cci.cue.cloud
*.cue.cloud
stagnglb.hearst.cue.cloud
elsoldemexico.test1.oem.cue.cloud
*.oem.cue.cloud
*.dynatrace.cci.cue.cloud
staging.pd.cue.cloud
elsoldemexico.com.mx
secure.test.globalblue.cue.cloud
*.staging.forum.cue.cloud
monitorlb.belo.cue.cloud
www.noticiasvespertinas.staging.oem.cue.cloud
nglb.belo.cue.cloud
sandbox.service.bnn.de
nexo.cue.cloud
test2.bnn.cue.cloud
*.bnn.cue.cloud
cue-um-unstable-nightly.cci.cue.cloud
prod.globalblue.cue.cloud
elsoldetoluca.staging.oem.cue.cloud
dagen.cue.cloud
*.oem.cue.cloud
*.cue.cloud
*.psus.cue.cloud
elsoldemexico.test.oem.cue.cloud

Certificate

The complete raw certificate details for escenic.cue.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRNviPasjk4LDTYymhHU
7TVpYLNcXsweOAD/lqdwo8X1Rnf4yCaOZEQ8u2f+wUdXkHjZawcvYio6ybZoUlpC
fW4H/nusuzd3CfvG9vWMRH2jCLtBtkrThc37RdHQVtQtw+zfp8kfIHoYDbfwOKCm
M69VxUesmAIOSrdGNbmaLiLDkSNXkjKSaptarviQuVh0t5iSX2tk5K7enIo2JrjM
YGoQfXRqbF4YsEDwuAPd2NnUbwnQp94u8odVxCBWKM4f3XE0Ln8O+PVxKlckco4T
xSbmK3kVaW234gpzrcLmseyNAYU0Zx7LRKuYVJvUQuM8j4cxw+DejdTvAHD3tDvK
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18584599836154662190664206298358014929
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'escenic.cue.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22353764071803349874666488469192642505197259597749579058804297223124036178436266081311170992741899937487626844317644825116687221747867301225161808128717931750278339253377937323342772622381457065860491380490937537528082021649632446653582166482670453438158325596513964634796646109754981866046218524021488420981672674856634038665277564999177013354739994930817524627792379191403124957959623064732874612618247803045211145461441172483243926177104815315174390915393973826968393018943645782753601292997400949502228774951052521626297762458430679404080775733495903609465150246639946153279694946193177395520681962309005470321157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							068e511bfd14f6d582b673e6883d7dc05caa4907
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (156 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'escenic.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.escenic.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.escenic.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.production.escenic.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.escenic.cue.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.escenic.cue.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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