*.suite.perf.bridgeapp.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0a:56:03:af:e9:6b:e0:89:36:56:ea:7b:9c:a7:c6:18 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.suite.perf.bridgeapp.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:56:03:af:e9:6b:e0:89:36:56:ea:7b:9c:a7:c6:18
Serial Number (int): 13738892272080827548645885975040869912
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 5f:87:a2:7b:e4:e9:b1:7e:aa:81:c5:c6:12:e0:f7:aa:1b:35:0d:91
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 39:0d:79:e3:bb:7f:3a:76:0b:d0:ca:f0:56:7a:4b:92:5f:66:37:e9
Fingerprint (sha256): 41:fb:e9:f2:d5:1a:57:30:2d:21:ac:7c:32:e5:86:b5:a3:b6:fb:c0:b9:4b:44:f3:9d:3e:36:9f:fa:5c:0a:bb

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.suite.perf.bridgeapp.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.suite.perf.bridgeapp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.suite.perf.bridgeapp.com
*.suite.perf.bridgeops.sh

Other certificates including the domain name bridgeapp.com

(limited to 100 certificates)
auth.bridgeapp.com
stage.engage.bridgeapp.com
*.suite.edge.bridgeapp.com
*.perform.stage.bridgeapp.com
integrations.staging.bridgeapp.com
vanity6.jiveon.com
api.workfit.com
sendgrid.trytuesday.com
vanity6.jiveon.com
*.bridge-shopify.bridgeapp.com
vanity6.jiveon.com
login.edge.bridgeapp.com
*.perform.bridgeapp.com
dev.engage.bridgeapp.com
prod.syd.engage.bridgeapp.com
*.perform.stage.bridgeapp.com
community.bridgeapp.com
*.flexible-learning.bridgeapp.com
suite.staging.bridgeapp.com
vanity2.lithium.com
vanity6.jiveon.com
vanity6.jiveon.com
*.perform.stage.bridgeapp.com
partners.ruckusdev.ruckuswireless.com
*.flexible-learning-test.bridgeapp.com
www.brandstorm.loreal.com
*.staging.bridgeapp.com
*.perform.perf.bridgeapp.com
refer.dotloop.com
*.suite.edge.bridgeapp.com
vanity2.lithium.com
refer.dotloop.com
bridge-registration-qa.bridgeapp.com
filestore.prod-syd.bridgeapp.com
*.bridgeapp.com
*.bridgeapp.com
suite.staging.bridgeops.sh
*.perform.bridgeapp.com
myft-api-test.ft.com
refer.dotloop.com
authmonger.edge.cmh.shared.bridgeops.net
suite.bridgeops.sh
sni53262.cloudflaressl.com
myft-api-test.ft.com
*.bridgeapp.com
bridge-registration-qa.bridgeapp.com
*.perform.dev.bridgeapp.com
*.perform.bridgeapp.com
*.perform.bridgeapp.com
mc-ios-dev.masterclass.ninja
sendgrid.trytuesday.com
groove.spin.pm
suite.staging.bridgeops.sh
myft-api-test.ft.com
vanity6.jiveon.com
engage.bridgeapp.com
vanity6.jiveon.com
community.bridgeapp.com
vanity6.jiveon.com
authsyd.bridgeapp.com
*.bridge-registration-qa.bridgeapp.com
myft-api-test.ft.com
prod.engage.bridgeapp.com
stage.syd.engage.bridgeapp.com
login.edge.bridgeapp.com
myft-api-test.ft.com
vanity2.lithium.com
authmonger.staging.cmh.shared.bridgeops.net
suite.dub.staging.bridgeops.sh
authmonger.perf.cmh.shared.bridgeops.net
vanity6.jiveon.com
stage.engage.bridgeapp.com
*.staging.bridgeapp.com
suite.dub.bridgeops.sh
suite.edge.bridgeops.sh
suite.bridgeops.sh
*.perform.bridgeapp.com
*.flexible-learning-qa.bridgeapp.com
engage.prod.dub.bridgeapp.com
vanity6.jiveon.com
auth.edge.bridgeapp.com
*.perform.stage.bridgeapp.com
suite.edge.bridgeops.sh
refer.dotloop.com
authmonger-iad-edge.insops.net
authmonger.prod.cmh.shared.bridgeops.net
*.suite.perf.bridgeapp.com
login.edge.bridgeapp.com
auth.bridgeapp.com
training.medallia.com
authmonger.prod.syd.shared.bridgeops.net
vanity6.jiveon.com
partners.ruckusdev.ruckuswireless.com
engage.bridgeapp.com
bridgeapp.com
vanity6.jiveon.com
authmonger.staging.dub.shared.bridgeops.net
pigeon.edge.insops.bridgeapp.com
*.suite.staging.bridgeapp.com
vanity6.jiveon.com

Certificate

The complete raw certificate details for *.suite.perf.bridgeapp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zCyc3dS5sITxzuX4Tzj
i2qkr5Vr3Y1MxeJxrdmLCtJ2NTEFC//UT7GevITj+raIR2D5YgroO31bmYcUckMb
3n6uSqOnRKSvgHk2A5AUqP35a0bFS8z5CAE5z9e+nSa4cK8rAD+eCqS6LGINoEyt
gHMwLy4sul1u5Euowdq6n/xBXuf4AOd0jXB7rnGWoddcdpyFis0g+OQQMwaekrIU
9qHsXkNPdscGQJKlDshPrDr/9pT+SZB9yLJezoG52M5AS4Ysfs8ws7nSkSTxDWLx
X6mZ/b+UCV8lyzXHcJcCmgHQCAt1Vp5emGnIjaWJ8iLGn2zq0QpyymGu5Ra41bPJ
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13738892272080827548645885975040869912
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-16 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.suite.perf.bridgeapp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30194968309253843616143920808608029059262620046606239227517586486703901791832413514910627509684864176765116966149821120034318765701528105421343237228874020494625451045799972483139114615531562103407608937556890973058517536853978562966143239100743667035350600672794186764325551630219031603477305048787481179333886444831514938020420839425110635846482334418669464073879965042815152827078585661458035798070798839846856360914492987901923578894032691056172385805752517547752690668523744832266266790170994873622133158562632035486251361612536636270418751994040228264610432417213351444519873066131064170074748373252379325483503
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5f87a27be4e9b17eaa81c5c612e0f7aa1b350d91
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suite.perf.bridgeapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.suite.perf.bridgeops.sh'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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