dev.teamrecognitionaward.pmicloud.biz

Issued by Amazon

About this certificate

This digital certificate with serial number 04:e1:6f:87:fa:20:db:09:6e:df:fd:10:f6:93:63:79 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dev.teamrecognitionaward.pmicloud.biz

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:e1:6f:87:fa:20:db:09:6e:df:fd:10:f6:93:63:79
Serial Number (int): 6487440896988916922970986132272276345
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 8b:ef:02:94:2a:ca:3d:5d:a9:6c:2a:5e:1f:6c:84:b2:30:32:76:9d
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 50:b1:e5:0b:71:1f:43:13:b5:b2:27:1d:4a:a6:25:a0:c4:65:49:77
Fingerprint (sha256): 3b:90:42:4c:20:a4:4c:3b:4d:58:92:2d:d5:07:48:8a:c7:b9:7c:dc:bc:5e:9e:59:a1:4e:8f:c9:cf:cd:d0:aa

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate dev.teamrecognitionaward.pmicloud.biz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev.teamrecognitionaward.pmicloud.biz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.teamrecognitionaward.pmicloud.biz
*.dev.teamrecognitionaward.pmicloud.biz

Other certificates including the domain name pmicloud.biz

(limited to 100 certificates)
ambari-qa.ocean.pmicloud.biz
*.cdt.pmicloud.biz
dev.elasticsearch.chatbot.pmicloud.biz
tngames.pmicloud.biz
iepm-qa.eu-west-1.aws.pmicloud.biz
*.java-api.chatbot.pmicloud.biz
whfc-dev.eu-west-1.aws.pmicloud.biz
dsvct-prd.eu-west-1.aws.pmicloud.biz
batchevents.dte.pmicloud.biz
websitefactory.pmicloud.biz
gts.pmicloud.biz
qa.crm-sms.pmicloud.biz
vpnprd.philipmorrisph.pmicloud.biz
ismsbr-prd.eu-west-1.aws.pmicloud.biz
cdra-qa.eu-west-1.aws.pmicloud.biz
vpnprd2.id-da.pmicloud.biz
webadmin.chatbot.pmicloud.biz
task.dte.pmicloud.biz
*.ocean.pmicloud.biz
www.cdt-dev.pmicloud.biz
tip.pmicloud.biz
cjm.pmicloud.biz
gavs-dev.eu-west-1.aws.pmicloud.biz
qa.viber.dte.pmicloud.biz
fbi-qa.eu-west-1.aws.pmicloud.biz
ssrs-dev.eu-west-1.aws.pmicloud.biz
*.services.ocean.pmicloud.biz
vpnprd.nexthink.pmicloud.biz
pmjpisbi.pmicloud.biz
csa.cyber.pmicloud.biz
elastics.chatbot.pmicloud.biz
mirrorpl.pmicloud.biz
*.services.ocean.pmicloud.biz
mysite.pmicloud.biz
*.ua-ls.pmicloud.biz
gavs-dev.eu-west-1.aws.pmicloud.biz
api-test.mozart-dev.aws.pmicloud.biz
wfiws-dev.eu-west-1.aws.pmicloud.biz
csa-qa.eu-west-1.aws.pmicloud.biz
vpnqa.dwa.pmicloud.biz
bensrq-qa.eu-west-1.aws.pmicloud.biz
chatui2.chatbot.pmicloud.biz
dev.batchevents.dte.pmicloud.biz
clipp-prd.eu-west-1.aws.pmicloud.biz
eipos.pmicloud.biz
pmplrose-qa.aws.pmicloud.biz
deepatlapi-qa.eu-west-1.aws.pmicloud.biz
gavs-dev.eu-west-1.aws.pmicloud.biz
dyo.pmicloud.biz
kibana.chatbot.pmicloud.biz
ismsph-dev.eu-west-1.aws.pmicloud.biz
*.games.ua-ls.pmicloud.biz
*.api.el.ocean.pmicloud.biz
auth.chatbot.pmicloud.biz
deepatlapi-qa.eu-west-1.aws.pmicloud.biz
elastics.chatbot.pmicloud.biz
entmisteunserewelt.com
ismscz-dev.eu-west-1.aws.pmicloud.biz
mdolz-qa.aws.pmicloud.biz
deepatlapi-dev.eu-west-1.aws.pmicloud.biz
gauntlet.pmicloud.biz
tdisf-qa.eu-west-1.aws.pmicloud.biz
*.booked.pmicloud.biz
ambari-server-ds.ocean.pmicloud.biz
pse-dev.eu-west-1.aws.pmicloud.biz
dev.dyo.pmicloud.biz
iqos-id.pmicloud.biz
uaposmart.aws.pmicloud.biz
deepatlapi-dev.eu-west-1.aws.pmicloud.biz
molecule.dte.pmicloud.biz
*.ocean.pmicloud.biz
iqossvcqas.pmicloud.biz
dyo.pmicloud.biz
bapsrq-dev.aws.pmicloud.biz
*.atool.pmicloud.biz
test.grafana.mirrorpl.pmicloud.biz
iqossvc.pmicloud.biz
vpn.iqossvcqas.pmicloud.biz
dev.dyo.pmicloud.biz
*.cjm.pmicloud.biz
vpn.gts.pmicloud.biz
celonis-prd.eu-west-1.aws.pmicloud.biz
dct.pmicloud.biz
vpnprd.ski.pmicloud.biz
unlitter.pmicloud.biz
cfghub.aws.pmicloud.biz
infrabackup9-prd.eu-west-1.aws.pmicloud.biz
gafp-prd.eu-west-1.aws.pmicloud.biz
hsrpt-qa.aws.pmicloud.biz
talmfpqa.rp.pmicloud.biz
amild-id.pmicloud.biz
vpnqa.setc.pmicloud.biz
*.games.ua-ls.pmicloud.biz
vpndev1.philipmorrisph.pmicloud.biz
auth.chatbot.pmicloud.biz
tkyvpn.tpe.pmicloud.biz
gavs-dev.eu-west-1.aws.pmicloud.biz
messenger.chatbot.pmicloud.biz
hkchq-prd.eu-west-1.aws.pmicloud.biz
gmd-prd.eu-west-1.aws.pmicloud.biz

Certificate

The complete raw certificate details for dev.teamrecognitionaward.pmicloud.biz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4ruEOeRWNrI+pdkNidr
uEkqKQGGRbxI3RQ6oual/3Xr8zNkBJeCjHfgY+3iafWyLV52Pc5aXS8Iq22dtHdh
2gnHRtA3xtSgLRphgKns/uplbr/AKWb/RTiipZhiHSX/3l4BsK5Mj/ZnWTxE3/L5
A3rpqjcyE4T4NIhr3cM3YkMWtus55P9bXq+uYkgQdxQ5yckMtUzKl9ZF0sFu2Hro
mcTx/lRtQTX16LeVkm9Rqm0uwgMnJpzihhUWSmmEJ2/d6dg3VxLprED7TDQEx/r9
EpniaDqQil9g4zoF4T7fjDOgZoU1AhWMolkav3SueCyWLa7ySNlJXH0iH8abb4lK
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6487440896988916922970986132272276345
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.teamrecognitionaward.pmicloud.biz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20140399399063355677541919624770487079309520770519229195144907600917056062090021150731563361524874343765790703930455814099634003986406427646643928012969494545182662703586072736527022516794614497732486642555508865145206268296635871959890759237149300841876164856641242486060310790251281981865164360733827354372481740569388416888096365538952230097222668310567160529607137625420384680949612188478934076872305976897439138063887879697708914042445083617655897157448659506993083984127473696928594948959694092551327917736080588033070052946284745588873320669990262308277781307110648533034246479690907638282563136755140393519623
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8bef02942aca3d5da96c2a5e1f6c84b23032769d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.teamrecognitionaward.pmicloud.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.teamrecognitionaward.pmicloud.biz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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