aes.sso-be-prod.aws.blinxsolutions.systems

Issued by Amazon

About this certificate

This digital certificate with serial number 0f:db:31:d3:ad:da:92:78:52:d5:87:86:cd:c1:f5:f3 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aes.sso-be-prod.aws.blinxsolutions.systems

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:db:31:d3:ad:da:92:78:52:d5:87:86:cd:c1:f5:f3
Serial Number (int): 21076543557810878998684590010408236531
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 9c:26:9f:b7:73:c8:2f:28:ed:67:a4:a0:71:c9:33:4c:10:5b:df:cd
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 94:79:74:96:55:a4:68:38:62:08:ec:0c:45:43:e9:ef:09:c2:42:80
Fingerprint (sha256): 5a:b5:6f:09:2d:90:85:30:09:03:14:0b:93:e1:f8:c3:16:12:f7:2f:63:f5:66:26:fc:77:c9:ff:12:d5:31:e8

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate aes.sso-be-prod.aws.blinxsolutions.systems

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aes.sso-be-prod.aws.blinxsolutions.systems

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aes.sso-be-prod.aws.blinxsolutions.systems

Other certificates including the domain name blinxsolutions.systems

(limited to 100 certificates)
sf.acu4.aws.blinxsolutions.systems
aes.bi-fe-dev.aws.blinxsolutions.systems
aes.sso-uat.aws.blinxsolutions.systems
se.crm-be-dev.aws.blinxsolutions.systems
webchatuat.aws.blinxsolutions.systems
aes.ch-be-dev.aws.blinxsolutions.systems
cp.pp.sbpl.aws.blinxsolutions.systems
sf.acu2.aws.blinxsolutions.systems
aes.bi.aws.blinxsolutions.systems
edb.dev.kpi.acurian.aws.blinxsolutions.systems
aes.bi-fe-uat.aws.blinxsolutions.systems
aes.ch.aws.blinxsolutions.systems
aes.bi-fe-pp.aws.blinxsolutions.systems
aes.bi-be-dev.aws.blinxsolutions.systems
edb.kpi.acurian.aws.blinxsolutions.systems
aes.bi-uat.aws.blinxsolutions.systems
edb.dev.kpi.acurian.aws.blinxsolutions.systems
cp.pp.sbpl.aws.blinxsolutions.systems
aes.ch-be-pp.aws.blinxsolutions.systems
edf.kpi.acurian.aws.blinxsolutions.systems
dev.academy.aws.blinxsolutions.systems
dev.stobart.crm.aws.blinxsolutions.systems
sa.acu1.aws.blinxsolutions.systems
edb.qa.kpi.acurian.aws.blinxsolutions.systems
aes.bi-be-pp.aws.blinxsolutions.systems
screener.acurianhealth.com
aes.sso-fe-pp.aws.blinxsolutions.systems
aes-fe-prod.acurian.aws.blinxsolutions.systems
se.crm-be-uat.aws.blinxsolutions.systems
se.crm-fe-pp.aws.blinxsolutions.systems
aes.sso-be-pp.aws.blinxsolutions.systems
blinx.arch-fe-dev.aws.blinxsolutions.systems
prodbackcrm.aws.blinxsolutions.systems
prodbackcrm.aws.blinxsolutions.systems
sa.acu.aws.blinxsolutions.systems
aes.bi-be-dev.aws.blinxsolutions.systems
aes.sso-be-dev.aws.blinxsolutions.systems
cp.d.sbpl.aws.blinxsolutions.systems
aes.bi-fe-pp.aws.blinxsolutions.systems
aes.bi-be-uat.aws.blinxsolutions.systems
aes-sdt-uat.aws.blinxsolutions.systems
aes.bi-uat.aws.blinxsolutions.systems
*.aws.blinxsolutions.systems
aes.ch-uat.aws.blinxsolutions.systems
uatbackcrm.aws.blinxsolutions.systems
webchat.aes.aws.blinxsolutions.systems
aes.sso-be-pp.aws.blinxsolutions.systems
devbackcrm.aws.blinxsolutions.systems
se.bi-be-prod.aws.blinxsolutions.systems
aes.ch-uat.aws.blinxsolutions.systems
edb.kpi.acurian.aws.blinxsolutions.systems
sf.acu.aws.blinxsolutions.systems
edb.dev.kpi.acurian.aws.blinxsolutions.systems
aes.bi-fe-uat.aws.blinxsolutions.systems
aes.bi-fe-dev.aws.blinxsolutions.systems
aes.bi.aws.blinxsolutions.systems
se.crm-fe-uat.aws.blinxsolutions.systems
sa.acu4.aws.blinxsolutions.systems
aes.bi-be-dev.aws.blinxsolutions.systems
aes.sso-be-prod.aws.blinxsolutions.systems
aes.ch-fe-uat.aws.blinxsolutions.systems
aes.ms.ts-be-pp.aws.blinxsolutions.systems
aes.bi-be-uat.aws.blinxsolutions.systems
edf.kpi.acurian.aws.blinxsolutions.systems
aes.ms.ts-be-pp.aws.blinxsolutions.systems
sf.acu4.aws.blinxsolutions.systems
blinx.arch-be-dev.aws.blinxsolutions.systems
aes.bi-be-prod.aws.blinxsolutions.systems
sa.acurian.aws.blinxsolutions.systems
aes.sso-be-dev.aws.blinxsolutions.systems
aes.bi-fe-dev.aws.blinxsolutions.systems
aes.ch-be-uat.aws.blinxsolutions.systems
dashboard.dev.sth.aws.blinxsolutions.systems
aes.ms.ts-be-uat.aws.blinxsolutions.systems
aes.sso-fe-pp.aws.blinxsolutions.systems
aes.sso-fe-uat.aws.blinxsolutions.systems
dev.stobart.crm.aws.blinxsolutions.systems
edb.kpi.acurian.aws.blinxsolutions.systems
cp.d.sbpl.aws.blinxsolutions.systems
se.crm-be-dev.aws.blinxsolutions.systems
edb.qa.kpi.acurian.aws.blinxsolutions.systems
webchatpp.aws.blinxsolutions.systems
backend.ed.aws.blinxsolutions.systems
sf.acu.aws.blinxsolutions.systems
sa.acu4.aws.blinxsolutions.systems
screener.acurianhealth.com
aes.bi.aws.blinxsolutions.systems
cp.pp.sbpl.aws.blinxsolutions.systems
*.aws.blinxsolutions.systems
pp.stobart.crm.aws.blinxsolutions.systems
blinx.arch-fe-dev.aws.blinxsolutions.systems
aes.bi-be-prod.aws.blinxsolutions.systems
aes.ch-fe-dev.aws.blinxsolutions.systems
aes.bi-be-prod.aws.blinxsolutions.systems
aes.bi-be-pp.aws.blinxsolutions.systems
pp.stobart.crm.aws.blinxsolutions.systems
aes.bi-be-prod.aws.blinxsolutions.systems
edb.qa.kpi.acurian.aws.blinxsolutions.systems
aes.ch-be-uat.aws.blinxsolutions.systems
sa.acu4.aws.blinxsolutions.systems

Certificate

The complete raw certificate details for aes.sso-be-prod.aws.blinxsolutions.systems in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoekRlA0W0IbfpCG/wOlI
yND6gULEmkuEnXCLmkhL6tItYNfp0m3MPNSD/kwOY+dFllyAth9RYwSeJD6SXiJ9
n4iyHptcswRZfuKejsg9jluB3TsH0Ex/IfAaqBPPkOZzAgfFmr8Z2e9sfJ1IoL6F
el5xrjXuXjKmCsLLDD3tinJXIuWb/ErFrNHTV9UZWqbsqqKkIcfA3JzjilU0mN9D
/hUuTjUm4wuOwBk7hs3HYG8L3zkqN7P+hTVvb591Ezo9Bvw5G/YEreDsscMnx44O
OSHuI0LXS1MEPCCNu/A4LdNMuG4sXYPMeuc2rRd15/H9BzYllJCZ5ZTuLJjFD24P
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21076543557810878998684590010408236531
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aes.sso-be-prod.aws.blinxsolutions.systems'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20439297541926380255056287041451762416401208689468298277422499943225372106606582412500973350225710243217602940842839490273288181200427830799396319163156535369277769053418638557405695116456075461249445090506288153779390231508268472085972341269010762930252383706109295750708070167956203498790294432664535565039101363109290532714417032492803545607057090649703253212619870193745984729547183163576953074942279569645998278363757144978559276581222085716675968256194397098520007408149728749050566531983795231604778982179113018537088021716207152572029814986106854403209687375916311575373534763551028010092519954479040191926093
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9c269fb773c82f28ed67a4a071c9334c105bdfcd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aes.sso-be-prod.aws.blinxsolutions.systems'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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