billing.clio.services

Issued by Amazon

About this certificate

This digital certificate with serial number 03:bd:9e:f2:dd:b1:ed:c0:4f:37:8b:64:59:ce:d3:e4 was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=billing.clio.services

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bd:9e:f2:dd:b1:ed:c0:4f:37:8b:64:59:ce:d3:e4
Serial Number (int): 4972251956161825245328902416487076836
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 22:19:e4:cf:6a:72:9b:12:41:68:2a:b8:e6:25:5e:9a:22:cb:7e:70
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): e6:18:ee:48:94:2a:80:9f:72:e2:97:a0:0a:c3:6d:44:1f:f4:1d:c5
Fingerprint (sha256): 4a:f0:40:e1:dc:1b:77:69:81:e7:fa:7e:b5:05:83:cb:0f:8f:8f:1a:e1:e1:8e:ab:8f:6f:92:48:15:c8:9c:a8

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate billing.clio.services

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for billing.clio.services

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

billing.clio.services
proxy.billing.clio.services
billing.clio.com

Other certificates including the domain name clio.services

(limited to 100 certificates)
billing.clio.services
staging.account.clio.services
staging.billing.clio.services
docusign.clio.services
docusign.clio.services
service-bucket-ruby.prod-eu-a.clio.services
docusign.clio.services
staging-proxy.grow.clio.services
staging.billing.clio.services
staging.billing.clio.services
service-bucket-ruby.prod-eu-a.clio.services
formevo.clio.services
staging.account.clio.services
staging.billing.clio.services
staging.billing.clio.services
staging.billing.clio.services
docusign.clio.services
staging.billing.clio.services
staging.account.clio.services
staging.account.clio.services
billing.clio.services
formevo.clio.services
service-bucket-ruby.prod-ca-a.clio.services
staging.billing.clio.services
staging.billing.clio.services
staging.billing.clio.services
staging.billing.clio.services
formevo.clio.services
docusign.clio.services
staging.account.clio.services
staging.billing.clio.services
docusign.clio.services
staging.billing.clio.services
staging-proxy.grow.clio.services
docusign.clio.services
staging.billing.clio.services
docusign.clio.services
staging.billing.clio.services
service-bucket-ruby.prod-ca-a.clio.services
staging.billing.clio.services
service-bucket-ruby.prod-au-a.clio.services
staging.grow.clio.com
service-bucket.staging-us-a.clio.services
docusign.clio.services
docusign.clio.services
staging.billing.clio.services
docusign.clio.services
docusign.clio.services
billing.clio.services
staging.billing.clio.services
staging-proxy.grow.clio.services
staging.billing.clio.services
billing.clio.services
staging.billing.clio.services
billing.clio.services
staging.billing.clio.services
docusign.clio.services
billing.clio.services
staging.account.clio.services
service-bucket-ruby.prod-eu-a.clio.services
staging.billing.clio.services
staging.billing.clio.services
staging.billing.clio.services
staging.billing.clio.services
billing.clio.services
docusign.clio.services
service-bucket.staging-us-a.clio.services
staging.billing.clio.services
proxy.grow.clio.services
staging.account.clio.services
billing.clio.services
service-bucket-ruby.prod-au-a.clio.services
staging.billing.clio.services
staging.account.clio.services
staging.account.clio.services
*.clio.services
service-bucket-ruby.staging-us-a.clio.services
staging.account.clio.services
billing.clio.services
staging.billing.clio.services
staging.billing.clio.services
docusign.clio.services
proxy.grow.clio.services
staging.grow.clio.com
staging.billing.clio.services
staging.account.clio.services
staging.billing.clio.services
service-bucket.staging-us-a.clio.services
docusign.clio.services
staging.billing.clio.services
staging.remi.clio.services
staging.remi.clio.services
billing.clio.services
docusign.clio.services
staging.billing.clio.services
staging.billing.clio.services
billing.clio.services
billing.clio.services
staging-proxy.grow.clio.services
staging.billing.clio.services

Certificate

The complete raw certificate details for billing.clio.services in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3nspJBxQl40Ihui9NPH
Dj0oujRtcPsdJXnmWCBw7J5wDneFJUs3/4DlHU4ImZE9KfZPNuqmfR2uLwde65W6
tFkOZCi0ex7NvzAJy0Z6ExXyqWZD1KxiKkNrRxQat6q2+wUlVFqUDl1H2wvSmId0
mtB7EAFXmbUmA+B7+dCGlnKxOzoXOH4Fz+9f/54BWhemsstAzZ+mJmAsnoXr9qKY
+8GEcab8d9K3PyAwTWP+FJmTMMRq5Tmxl9Dza0pqVHc9RAKEGlAEymE2qCTjAhig
62yPmBifA8YhPCI0gCZZsBSsb0QSVpxsFjzieeQy1C8U6KTB2fy1FF5cmq7IUf8v
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4972251956161825245328902416487076836
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'billing.clio.services'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23666686184235329846964465688616950098818347106321851577684698462687319258224617533781808211906006598803217049587588770118565420004673617530987223366196822872134741169538621096150701191411989150264515701204292122764771201767818951028548991868890194396465585721590519071682754039654133613343238006646637393664196055303697268284231675875025091532950702538950493430207655135435732082323855052391334847313432334601830453145998721476899590793869563079285119156923263900987703953711977902863723861184027943116749965208565293082938136659866608573412748218275228188380555504261888348602812696290859567435831680115459126931439
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2219e4cf6a729b1241682ab8e6255e9a22cb7e70
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billing.clio.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proxy.billing.clio.services'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'billing.clio.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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