canvas.adtech.com

- ADTECH AG -

Issued by AOL Member CA

About this certificate

This digital certificate with serial number e3:37:22:6b:0a:f0:4a:57:05:ad:d2:29:1a:91:d6:14 was issued on by America Online Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

ADTECH AG

Organization: ADTECH AG
State / Province: Hessen
Locality: Frankfurt
Country: DE

America Online Inc.

Organization: America Online Inc.
State / Province: Virginia
Locality: Dulles
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): e3:37:22:6b:0a:f0:4a:57:05:ad:d2:29:1a:91:d6:14
Serial Number (int): 302021029453120575207128559368287671828
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 26:99:26:8a:33:09:d1:32:f3:bb:af:42:19:42:60:85:df:c2:dc:60
AuthorityKeyId: 61:a6:99:6d:24:9f:0e:11:88:e6:39:e0:fe:74:d1:05:69:52:a9:43

Fingerprint (sha1): fa:fe:53:ae:f5:66:7b:9d:eb:76:b8:4d:20:2a:5b:29:fc:73:5c:54
Fingerprint (sha256): 57:45:94:e6:e7:34:72:6a:bc:ad:f5:c9:a9:b5:58:0d:a8:b2:c3:39:53:69:e4:fd:6e:3d:e9:ec:33:d3:e4:ad


Revocation information

OCSP Server: http://ocsp.web.aol.com/ocsp
CRL Distribution Point: http://crl.aol.com/AOLMSPKI/aolServerCert.crl

Check the revocation status for certificate canvas.adtech.com

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for canvas.adtech.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name adtech.com

(limited to 100 certificates)
onebyaol.com
spacewalk.prod.adtech.aolcloud.net
spacewalk.eu-fra.adtech.com
dev-scheduler001.eu-fra.adtech.com
jenkins001.us-ec.adtech.com
zenoss.adtech.com
api.canvas-qa.adtech.com
jira.adtech.com
canvas-qa.adtech.com
canvas-stage.adtech.com
newfront.aol.com
scheduler003.us-ec.adtech.com
research.adtech.com
canvas-stage.adtech.com
canvas.adtech.com
spacewalk.prod.adtech.aolcloud.net
spacewalk.prod.adtech.aolcloud.net
spacewalk-proxy001.eu-fra.adtech.com
spacewalk.eu-fra.adtech.com
spacewalk.us-ec.adtech.com
api.canvas.adtech.com
wdm.adtech.com
build-cpp.eu-fra.adtech.com
spacewalk.adtech.com
spacewalk.prod.adtech.aolcloud.net
spacewalk.prod.adtech.aolcloud.net
qa-scheduler003.eu-fra.adtech.com
scheduler003.us-ec.adtech.com
spacewalk.prod.adtech.aolcloud.net
qaa-scheduler003.eu-fra.adtech.com
cstest.adtech.com
*.eu-fra.adtech.com
cstest.adtech.com
ansible-jenkins001.us-ec.adtech.com
api.canvas-stage.adtech.com
spacewalk.scd.us.adtech.com
spacewalk.toy.as.adtech.com
spacewalk.prod.adtech.aolcloud.net
spacewalk.eu-amt.adtech.com
canvas.adtech.com
ansible-jenkins002.us-ec.adtech.com
qa-scheduler003.eu-fra.adtech.com
scheduler001.eu-fra.adtech.com
ersa-api.us-ec.adtech.com
onebyaol.com
*.eu-fra.adtech.com
spacewalk.us-ec.adtech.com
svn.adtech.de
spacewalk.prod.adtech.aolcloud.net
classic-aerospike.us-ec.adtech.com
dev-scheduler003.eu-fra.adtech.com
mail.advertising.com
intranet.adtech.com
api.canvas.adtech.com

Certificate

The complete raw certificate details for canvas.adtech.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrDX9zEaZyo6aoEdVdvx
b0WrSdybE/C1bzU9A5l6aKHMOjPqHxAvWdEzc6pWBYDgvdu5Djsa8fa33pFsTHUm
k7lOSb5RFGmo0qCnY15s3cg9rC8s48KPGLd4ohYO4R3U0Kiq1amC0kHPmWKmoTij
1oJ/S+2Ct1kALJT+YINlCy8xlrDraojTuN/wLvakT5BLLopugHXjZLWG3lYebBTs
TD/EJ9/pNuGnLRlUxRgY5SdcCG41sFkniYBotAKhSyPOHR2QA4n0uPn9Om0trBu4
Q5TG9PuvjLQia+bgGBHnv6WT+Q6n+DBdG5FEvYS17zrqhqWpW2J3SLjD80iT+ZPZ
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302021029453120575207128559368287671828
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dulles'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'America Online Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AOL Member CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-12-17 15:51:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-17 15:51:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Frankfurt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ADTECH AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'canvas.adtech.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25587342440163839913449944875423006686568514604097538318144460992482466014760345571505263062625541439303789179374267340529104152375927681272034018888100589563523482654710819148725516330681192608836297980666744307779310173164961668303625404309774015062398056380447795110732234793106020420160795189120413418267622389929343384196740234843353991993420447358735869622385680084609113581438354649035531827424314903732996962100050110686249209386011744725688393614004147786568707599011163188956265805531476862132168816234509973080638737897344380517791895809347014165683437197672478716010167158204498065285363677765856367204851
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 61a6996d249f0e1188e639e0fe74d1056952a943
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.aol.com/AOLMSPKI/aolServerCert.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.web.aol.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.1066.1.1000.1.0.2.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://pki-info.aol.com/AOLMSPKI/index.html'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2699268a3309d132f3bbaf4219426085dfc2dc60
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00803b487152ac0925c5043a033c856c52745df26da6bc930169c2bdaf1527380e2394c9add8053506d8a507a0e837ce254593f7e601d93453173dc66382d1c6648c44e32308452b127f59e6820fe66ff3b2219f41b49f8f61329be0734393fce46d1f15e4fe1ff892fbef2d8f339814aa0bb02c8796f2406896fbbfe858c282c2f331d575da730742f96dcf9787c3371cd668b018878430c4fac80f5f23fe2828f62a9b1158887560deaafe06cb04b31cb980806dec8602f4f98947ecd77adad572b81c07615fe592d90f7ce3cfc9f3c92a93246097cb79f4db90ace9d78bf192ae54b0945bf4cbec0d1cbe59912c4af0dc3dad1e462c9fde9685207f56cb6964