*.ehealthafrica.org

Issued by Amazon

About this certificate

This digital certificate with serial number 0d:af:59:a6:8f:06:57:dc:42:de:aa:ad:86:42:32:c9 was issued on by Amazon.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.ehealthafrica.org

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:af:59:a6:8f:06:57:dc:42:de:aa:ad:86:42:32:c9
Serial Number (int): 18190434226041228417646315266436641481
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 30:93:16:4e:eb:4e:77:0b:4d:e8:e2:4b:5d:77:cd:48:ce:0c:42:fc
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): d4:7a:29:5d:17:39:ad:5f:46:ab:49:30:d9:03:07:12:54:fb:6c:25
Fingerprint (sha256): 3f:f3:0d:44:7e:fe:25:7d:c0:c8:7a:96:19:c7:d3:a3:e7:ef:a2:f0:a0:8d:2e:d5:c5:26:24:ef:7a:ba:9b:18

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.ehealthafrica.org

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ehealthafrica.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ehealthafrica.org
*.ehealthnigeria.org
*.lake-chad.org
lake-chad.org
*.ehealth.org.ng
*.lomisstock.com
*.gather2.org
*.ie.ehealthafrica.org
*.grid-nigeria.org
*.eocng.org

Other certificates including the domain name ehealthafrica.org

(limited to 100 certificates)
hospitalrun.ehealthafrica.org
dispatch.ehealthafrica.org
ehealthafrica.org
ehealthafrica.org
cornbot.ehealthafrica.org
ehealthafrica.org
www.ehealthafrica.org
www.ehealthafrica.org
app.br.shopcall.io
aether.ehealthafrica.org
impact.ehealthafrica.org
www.codevine.net
gis-a.ie.ehealthafrica.org
www.ehealthafrica.org
ehealthafrica.org
lomisdeliver.com
ehealthafrica.org
lr.geoserver.ehealthafrica.org
*.dev.ehealthafrica.org
lomisdeliver.com
aether.ehealthafrica.org
ehealthafrica.org
aether.ehealthafrica.org
www.kilorrasoftware.ca
ehealthafrica.org
*.eocng.org
www.ehealthafrica.org
aether.ehealthafrica.org
ehealthafrica.org
www.ehealthafrica.org
ehealthafrica.org
*.ehealthafrica.org
gather.ehealthafrica.org
impact.ehealthafrica.org
*.ehealthafrica.org
dispatch.ehealthafrica.org
ehealthafrica.org
gis-a.ie.ehealthafrica.org
dispatch.ehealthafrica.org
aether.ehealthafrica.org
www.ehealthafrica.org
www.ehealthafrica.org
ehealthafrica.org
dispatch.ehealthafrica.org
ehealthafrica.org
elearning.ehealthafrica.org
www.codevine.net
aether.ehealthafrica.org
ehealthafrica.org
elearning.ehealthafrica.org
*.ehealthafrica.org
aether.ehealthafrica.org
ehealthafrica.org
docs-cerebrum.qongfu.com
www.1bh.men
podsmonitor.com
ehealthafrica.org
www.ehealthafrica.org
gather.ehealthafrica.org
gather.ehealthafrica.org
ehealthafrica.org
ehealthafrica.org
www.ehealthafrica.org
sportbid.com.br
www.ehealthafrica.org
ehealthafrica.org
*.ehealthafrica.org
housejobsdone.com
ehealthafrica.org
www.hyphen-hacks.com
*.ehealthafrica.org
ehealthafrica.org
gis-a.ie.ehealthafrica.org
data.ehealthafrica.org
terminator.sanbao.app
www.ehealthafrica.org
www.hyphen-hacks.com
*.ehealthafrica.org
aether.ehealthafrica.org
ehealthafrica.org
www.kilorrasoftware.ca
moodle.ehealthafrica.org
lomisdeliver.com
www.ehealthafrica.org
ehealthafrica.org
my.domain.ehealthafrica.org
www.ehealthafrica.org
*.gather2.org
dispatch.ehealthafrica.org
aether.ehealthafrica.org
data.ehealthafrica.org
www.ehealthafrica.org
*.dev.ehealthafrica.org
mctechhub.com
*.gather2.org
ehealthafrica.org
lomis-deliver-api.ehealthafrica.org
gather.ehealthafrica.org
www.lushthecontent.agency
ehealthafrica.org

Certificate

The complete raw certificate details for *.ehealthafrica.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLt3lBgqTn/XXhANw6kl
YwWwEL0Z9Ap87iu7omUckBYrKMg/f4WJP4Z5RjHJP6OR0/Qht0QW9KIYsncdASqp
GaPq1gC6WaSuRlUVYbTCi1uCUBBBCU2xUArqNFd3TIVc3VcKqlyw6PpLiPzINanv
X3MHf4OG+/WCAymXJK/ze5R6RSq63ecxgBUauItFbX8WKlpbX9EN5T3TStXK6iUH
60+4fL9JINhotB3cxXBkedP6vr8pLRcR9HkDuC1ojuW0TR4bpYVx11fFqloOkj/G
/G5uOiuab3MHHS7JJBBo1Khk2G5JJfJzw8Z/+v3lbYTI84ruw5WHg6kV/8LLXIPC
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18190434226041228417646315266436641481
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ehealthafrica.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25845057687222906536000711534051313717580148719556193099354520888661086193721194134836416474466369213952107572907692238520664299141778073188615609228626894881524707821100595618228303438951839162827265964631247028675068947521368689989752369283549612750592200871617473595467876104720914967663870443730417486997027132821041368305424792319954177459951823919865619384894441453274764793471452205762391601572429026026886320331160715200528475337338420161321691556317338372169664062394204536969962643827385528786676615422588211882734452203729611161627149255303841767326885995356120305704446641581046939883098231143087846179483
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3093164eeb4e770b4de8e24b5d77cd48ce0c42fc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (186 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ehealthafrica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ehealthnigeria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lake-chad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lake-chad.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ehealth.org.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lomisstock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gather2.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ie.ehealthafrica.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grid-nigeria.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eocng.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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