qa.imsapp.sparkswebapps.com

Issued by Amazon

About this certificate

This digital certificate with serial number 03:46:8b:b0:35:f9:ad:1f:4d:1b:41:8f:0a:f3:b1:3c was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=qa.imsapp.sparkswebapps.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:46:8b:b0:35:f9:ad:1f:4d:1b:41:8f:0a:f3:b1:3c
Serial Number (int): 4353977983248241241842941743995269436
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 3c:99:8a:b5:a3:98:53:83:5a:1b:80:3c:10:3c:d1:77:77:9b:de:2a
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 95:97:49:39:ec:47:3f:38:32:d9:cd:82:a1:81:d0:84:cf:c9:80:5a
Fingerprint (sha256): 55:7d:01:f5:be:bf:b1:f8:18:fe:d7:10:fb:43:e8:8d:80:fb:1e:fd:63:b1:76:e3:73:a3:42:45:d6:4f:4c:ca

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate qa.imsapp.sparkswebapps.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qa.imsapp.sparkswebapps.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qa.imsapp.sparkswebapps.com

Other certificates including the domain name sparkswebapps.com

(limited to 100 certificates)
helpdesk.fintonhouse.org.uk
*.sparkswebapps.com
helpdesk.fintonhouse.org.uk
uat.ims.sparkswebapps.com
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
*.sparkswebapps.com
helpdesk.fintonhouse.org.uk
timezone.sparkswebapps.com
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
*.sparkswebapps.com
dev.amp.sparkswebapps.com
helpdesk.fintonhouse.org.uk
uat.amp.sparkswebapps.com
*.sparkswebapps.com
imsapp.sparkswebapps.com
servicedesk.energyexemplar.com
tickets.andirect.org
uatamp.sparkswebapps.com
support.mastercardfdn.org
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
*.prod.sparkswebapps.com
uatamp.sparkswebapps.com
qa.imsapp.sparkswebapps.com
helpdesk.fintonhouse.org.uk
imsapi.sparkswebapps.com
assetmgmt.jennycraig.com
helpdesk.fintonhouse.org.uk
qa.ims.sparkswebapps.com
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
uat.ims.sparkswebapps.com
uat.imsapp.sparkswebapps.com
www.sparkswebapps.com
helpdesk.fintonhouse.org.uk
applicationsupport.fqml.com
*.sparkswebapps.com
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
servicedesk.odc.co.bw
servicedesk.gmhec.org
helpdesk.mvplaw.com
uat.timezone.sparkswebapps.com
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
servicedesk.projecthope.org
helpdesk.secureauth.com
helpline.petron.com
helpdesk.fintonhouse.org.uk
qa.imsapp.sparkswebapps.com
servicedesk.digicelgroup.com
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpline.petron.com
servicedesk.kings.edu.au
timezone.sparkswebapps.com
helpdesk.fintonhouse.org.uk
helpdesk.neopharm.ca
helpdesk.utimco.org
helpdesk.sparkswebapps.com
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
uat.timezone.sparkswebapps.com
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
support.embelton.com
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
ithelpdesk.optomed.com
ims.sparkswebapps.com
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.dbsupply.com
amp.sparkswebapps.com
dev.imsapp.sparkswebapps.com
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
helpdesk.fintonhouse.org.uk
blueprint.sparkswebapps.com
helpdesk.fintonhouse.org.uk
*.sparkswebapps.com
timezone.sparkswebapps.com
helpdesk.fintonhouse.org.uk
ithelp.dreamliveprosper.com

Certificate

The complete raw certificate details for qa.imsapp.sparkswebapps.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JHu1DoafNUrrDjWgiuk
EzYuiup9r+84+xOo5Sa/enoyxYc4rHnOdvLPce8Km3cbh4TTHmDcLLMuYoPF0dW1
HBdzz5y2Akmd39bKtiekmwYV/hk0JK8zxyU3UcLc7C3ocMGsC/Tb1SMUow/Eht6v
NRlmrV2jDBvfLw/gaMJ0qsFm3+87Qoc7tQVkpaToPSJrB8GUdt1ZR+f5fKbpDGr/
ufuJIJQWvqjYk7Non6X0bTq4Pkyr2eirDn2XIQXRUXUMK9kAALPoh9Y5yf/uZiAD
7JKbuWvFxTQWFAZcbF5Y4zUtdj6FElfYIyQP4XSExeF7xBEUKxgcZALLi/U05HHw
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4353977983248241241842941743995269436
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qa.imsapp.sparkswebapps.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27339436080461932581215311262500004682254763909914618993227154912439592517575933292811787310599636220042335284813074838792706280212662040873960634854696187560888087980131799298568804210532668001207831935228383829189379292474101616078962145841272062846422690743107090199225131548488123479983657693672210217430413592947013861122057633251233650999540223973917340521428360471833303957383276967649998237182149372439777772485935975842285634990695450424516001431835626902691035863747166060651638219582587345956510215401158318684225314392326977720614404050452442556550386545651080537559055332897331678333471642103240235020293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c998ab5a39853835a1b803c103cd177779bde2a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.imsapp.sparkswebapps.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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