cdn.assessment.jombay.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:96:fd:69:5b:0a:c9:ec:fb:0f:dd:0d:a9:b2:82:4d was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cdn.assessment.jombay.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:96:fd:69:5b:0a:c9:ec:fb:0f:dd:0d:a9:b2:82:4d
Serial Number (int): 16734720274962181208622092168203502157
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a7:c5:98:42:99:f4:d3:cb:69:fb:82:fd:cc:c0:e9:d4:de:65:45:73
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 81:99:12:93:a8:60:a7:d6:76:ae:71:ff:dd:4f:3e:e3:ce:54:ff:85
Fingerprint (sha256): 4b:8a:94:ee:8d:93:45:52:f9:85:0c:ec:0f:ae:8d:2f:1c:85:f1:38:15:0a:3a:d5:28:c3:b3:69:18:41:1c:6d

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate cdn.assessment.jombay.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cdn.assessment.jombay.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdn.assessment.jombay.com

Other certificates including the domain name jombay.com

(limited to 100 certificates)
d.d8u.com
filipwolanski.com
app1.ftrans01.com
d.d8u.com
test.strzelbicki.pl
lisahartberger.de
d.d8u.com
d.d8u.com
d.d8u.com
app1.ftrans01.com
m-ai.jombay.com
d.d8u.com
cdn.idp.jombay.com
cdn.360.jombay.com
www.jcbsystems.com
www.asipago.com
vitau.el-pixel.com
idp.mamahealth.tw
cdn.assessment.jombay.com
www.bibleidc.com
radio-dev.gera.fan
*.jombay.com
d.d8u.com
cdn.assessment.jombay.com
*.jombay.com
*.jombay.com
d.d8u.com
app1.ftrans01.com
shop.theother.kitchen
d.d8u.com
prospect.gschaeftl.com
d.d8u.com
*.jombay.com
kentek.com.mx
app1.ftrans01.com
d.d8u.com
d.d8u.com
white-label-sectionalconfig-test.3dcloud.io
rhs.storpug.com
idev1.jombay.com
www.manwey.com
loan0k.com
d.d8u.com
*.jombay.com
cdn.assessment.jombay.com
*.jombay.com
dashboard.meetgo.vn
app1.ftrans01.com
d.d8u.com
rentzsch.name
d.d8u.com
360rocket.it
d.d8u.com
d.d8u.com
app1.ftrans01.com
delivery.bajajfinserv.in
d.d8u.com
www.oxchibus.co.uk
d.d8u.com
d.d8u.com
www.votelabs.app
d.d8u.com
cdn.assessment.jombay.com
d.d8u.com
d.d8u.com
app1.ftrans01.com
d.d8u.com
d.d8u.com
d.d8u.com
*.jombay.com
www.getthoughtful.com
d.d8u.com
d.d8u.com
opfikon.avdis.ch
cdn.360.jombay.com
d.d8u.com
app1.ftrans01.com
delivery.bajajfinserv.in
orsaydemain.corehab.fr
app1.ftrans01.com
*.jombay.com
d.d8u.com
cdn.360.jombay.com
puzan.com.np
d.d8u.com
ops.servecommerce.com
signature.minegocio.com.ec
cdn.360.jombay.com
*.jombay.com
*.jombay.com
d.d8u.com
warehouse.sgbike.com.sg
*.jombay.com
app1.ftrans01.com
ccms.wonderschool.com
victorstollmann.com
d.d8u.com
d.d8u.com
d.d8u.com
d.d8u.com

Certificate

The complete raw certificate details for cdn.assessment.jombay.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+WB+mU4EubGNfuJd+Ck
izxSnRDlJpN8pUTXLiMHXcwzpqcN/fAm9fpArXvGtIH5hDyXJHu08eiWav5WdZjE
1o9WKdlFUIpFO/PDk46zZKM0ZWGmeesv4ep8as741ejbnPUOGDOoOeTxxqxhxDTo
NjzKryl+zNp0sAWSqqVY/LYTOi0wyPu0WpwTfZBBmQYdJ4niGQgoacVggxcJzMvl
p6DgFdqZwfunvvv0tsG2npBd2vHmtPYWRj/IuyoLYTGj3dzphp2CSzB4cie+FdjH
LVXe5Ol943YAaD/kyBV2C4MptD8soou/AUntulAUbuddFxTgoOu+Ik+425M3uS4y
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16734720274962181208622092168203502157
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-08 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdn.assessment.jombay.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25739550386354499737343733299917915093933480337444487023904961665743521970804530865732752117468246634179126192084039727354514060771415757424254068394700474943718682312348576318230919300357782036472742208405817430606113305737351751554649900850206793301499552725037456707470592397874482715168534667031896453657106416337025934135165132993182519030773588603596840385775900031086121554222916459511561061961975229436558230553874098350885454663449005425282016131955355233684943846299711497457472358780289328580985598648156976948688336733277310091715409814648249431435637188041855140063106327680692764375612921426971416474309
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a7c5984299f4d3cb69fb82fdccc0e9d4de654573
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.assessment.jombay.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001682db0e9180000040300473045022100ec397428d9459f9e6b35672038e7b16ae1905017df7f46657f710b016d69f27f02207c97d1fc30088a39398fcc686a5775063eb6a25638e3deb678671c2070cb2bdf0077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001682db0e9f20000040300483046022100a568cb5501b01ca56a7c46773edc58e0f2615de1f22a2947f3da6a89b8004899022100fc3cd1a29400e85d6739a950507b3165275dcdba7627d6e65d54fba5f0b98066
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0054c0981aaa624eb73c9645d289773b29cb651e81bfaeac2d11f877a06655277650e5a548ad11b7b4a919532feca13f704c9e2eb5270683c20fa6974c8d5c1e55e3dcb75cc952d5c36e57d6407ba38e395e9a2f49105dba31970864528af8cbb1cbaa99f2c98007d3e2f269426671dbeda53bfbe03d00e91fa178be565cd403fba7d9fb2671c44195247cb49ead9ca806ed6bd8befcd9e9f4de58aae86bd15944e8f8d643af3b934a9c0a7ac317c68ac6edd3f80098af84c4437db54f98ce37b495f3c7f391cdb0c1ed1f74ee060ab2411277f6bf6e0ecb50054c7c7fbe1a3aa5cc6cf6510522c142f523e5a77ac3e8d304142061dc4dc90b37240fdc570d9af9