*.sandbox.ggops.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:1e:e7:a9:bf:04:9a:8e:ec:d7:64:fd:e8:47:75:a7 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.sandbox.ggops.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:1e:e7:a9:bf:04:9a:8e:ec:d7:64:fd:e8:47:75:a7
Serial Number (int): 16111203540470146210340192127096944039
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 56:36:53:f7:72:90:7c:db:d3:7b:f5:4f:f0:05:27:5a:de:d0:47:e5
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 61:99:79:24:dc:e7:a7:12:27:2a:f5:9d:1e:aa:a9:f0:f6:49:86:48
Fingerprint (sha256): 4c:c2:8d:64:17:4c:61:30:bd:13:a6:fb:6a:2a:0a:d8:29:73:ab:86:d0:0e:80:a6:b2:6b:93:ad:e9:1e:f4:d8

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.sandbox.ggops.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sandbox.ggops.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sandbox.ggops.com
*.dev.sandbox.ggops.com
*.stage.sandbox.ggops.com
*.prod.sandbox.ggops.com

Other certificates including the domain name ggops.com

(limited to 100 certificates)
*.ops.k8s.ggops.com
*.ambassador.dev.sandbox.ggops.com
*.sports.ggops.com
*.mle.va.sx.ggops.com
*.dev.sandbox.ggops.com
*.dev.sandbox.ggops.com
sports.drone.vi.ggops.com
pritunl.sandbox.ggops.com
*.dev.k8s.sx.ggops.com
*.k8s.dev.sandbox.ggops.com
*.prod.sandbox.ggops.com
*.sandbox.ggops.com
*.ambassador.dev.sandbox.ggops.com
*.dev.k8s.sx.ggops.com
*.verity-api.dev.va.ggops.com
zip-code-service.ops-8604.ggops.com
*.dev.sandbox.ggops.com
*.web-engineering.k8s.ggops.com
demo-manager.dev.va.ggops.com
pritunl.mongodb.va.ggops.com
*.ggops.com
*.config-dashboard-api.dev.va.ggops.com
*.verity-visualizer.dev.va.ggops.com
data-engineering.drone.va.ggops.com
*.k8s.prod.sandbox.ggops.com
*.dev.sandbox.ggops.com
*.k8s.dev.sandbox.ggops.com
*.mle.va.sx.ggops.com
sports-api--dev.sports.ggops.com
pritunl.sandbox.ggops.com
*.video-converter.dev.va.ggops.com
*.cv.k8s.sx.ggops.com
pritunl.va.ggops.com
*.gumgum.com
pritunl.va.ggops.com
*.verity.k8s.sx.ggops.com
pritunl.va.ggops.com
*.k8s.prod.sandbox.ggops.com
pritunl.sandbox.ggops.com
*.sandbox.ggops.com
publisher-manager-lambdas.ggops.com
*.gumgum.com
*.gumgum.com
pritunl.mongodb.va.ggops.com
*.advertising-api-v2.dev.va.ggops.com
*.nlp.k8s.sx.ggops.com
*.sports.ggops.com
*.vi.ggops.com
*.sandbox.ggops.com
pritunl.va.ggops.com
creative.preview.ggops.com
*.gumgum.com
*.ggops.com
*.verity-api.stage.va.ggops.com
pritunl.ca.ggops.com
*.ggops.com
*.gumgum.com
*.gumgum.com
*.drone.sandbox.ggops.com
*.gumgum.com
*.gumgum.com
preview.ggops.com
*.k8s.dev.sandbox.ggops.com
*.ggops.com
*.ad-server.k8s.ggops.com
publisher-manager-lambdas.ggops.com
*.gumgum.com
verity-api-test.ggops.com
*.verity-testing-tool.dev.va.ggops.com
*.gumgum.com
*.gumgum-jwt-auth.dev.va.ggops.com
*.prod.sandbox.ggops.com
pritunl.va.ggops.com
*.staging.verity.k8s.sx.ggops.com
*.k8s.prod.sandbox.ggops.com
*.mle-inference.va.sx.ggops.com
*.drone.sandbox.ggops.com
*.gumgum.com
*.ggops.com
*.web-engineering.k8s.ggops.com
*.va.sx.ggops.com
*.web-engineering.k8s.ggops.com
*.verity.va.sx.ggops.com
*.verity-testing-tool.dev.va.ggops.com
*.dev.k8s.sx.ggops.com
*.dev.sandbox.ggops.com
ggops.com
*.dev.sandbox.ggops.com
*.dev.sandbox.ggops.com
*.verity-api.gumgum.com
*.sandbox.ggops.com
*.gumgum.com
*.gumgum-jwt.dev.va.ggops.com
*.sandbox.ggops.com
*.gumgum.com
*.demo-manager-api.dev.va.ggops.com
*.columbia-wall.dev.va.ggops.com
*.dev.sandbox.ggops.com
data-science.drone.va.ggops.com
*.drone.va.ggops.com

Certificate

The complete raw certificate details for *.sandbox.ggops.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswIqKH5EzVIoywDvohTi
ZuxxOsZ7MV7mRUmVsV+TfYcW7KwMVbGqeP4SkBJwqJxqQ90zYBch+0Lq/7caRYez
1k8BtJSlt8yRN0ZHMh9AZAQ2waYVKf0TFNzxRrOgls6sJbipBof4hBbqqNaBll0i
ykpMJnLq+uCBBYwdPgfJKPziZnnnKiV71NdTN1y7s32bPKtqRw0r6ZaPQluR696W
7PyWeZI9Tq18v+eaLFp4w/pbPOebsyl6hKWcyHiA+GjX3PgoP9zAJGbzkWUSAvC3
xq6wGx6IMbVBJi6jZQWfxq7H7UAnZQwlPNColULkAsGWyESsxWnxENLGIifWuPYC
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16111203540470146210340192127096944039
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-28 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sandbox.ggops.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22597724032602940999159911526720815469648353826832335194286211752380409184095057159404680611203450607926204200629600895696901842793070276976531743251159333286470101979220331740550460359995625920552730183877414116181312046100899659525142224046462590653808799125330682810462948225241605452048328774167803622069057335877092551191122039848357030538997641702509885957053179265602405846191831309531314723170826969981191030316344857608238490293624597353698301199019341772580083139870434218614290669620119716493551952292843243341631891802275382489837086249737286871228869389696474728753540749856755156165290873878184977629901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							563653f772907cdbd37bf54ff005275aded047e5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandbox.ggops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.sandbox.ggops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stage.sandbox.ggops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.sandbox.ggops.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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