core.stage.subsplash.net

Issued by Amazon

About this certificate

This digital certificate with serial number 07:f6:0b:cc:21:d3:56:fe:68:f3:14:3c:da:f6:fe:40 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=core.stage.subsplash.net

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:f6:0b:cc:21:d3:56:fe:68:f3:14:3c:da:f6:fe:40
Serial Number (int): 10582140277213271273840690008065244736
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: cf:be:bc:9d:8e:5d:ce:9e:50:aa:6c:41:55:e3:c3:25:ae:e1:d0:0b
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 01:2e:a9:0f:da:d1:2d:a5:4b:81:d3:f8:95:8e:f2:6c:29:6d:d9:91
Fingerprint (sha256): 5d:ea:c4:8b:72:50:56:58:c4:fa:43:38:5b:22:53:fb:b2:19:64:f9:a9:c6:28:52:50:bc:43:9c:fc:aa:d2:8b

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate core.stage.subsplash.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for core.stage.subsplash.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

core.stage.subsplash.net
*.core.stage.subsplash.net

Other certificates including the domain name subsplash.net

(limited to 100 certificates)
*.giving.subsplash.net
*.stage.subsplash.net
*.giving.subsplash.net
wallet.subsplash.com
*.stage.subsplash.net
core.dev.subsplash.net
*.subsplash.net
wallet.subsplash.com
subsplash.net
wallet.subsplash.com
*.dev.giving.subsplash.net
*.docs.subsplash.net
wallet.subsplash.com
*.stage.giving.subsplash.net
*.subsplash.io
dev.subsplash.net
*.core.stage.giving.subsplash.net
*.stage.subsplash.net
core.stage.subsplash.net
*.stage.giving.subsplash.net
*.stage.subsplash.net
core.stage.subsplash.net
*.dev.subsplash.net
subsplash.net
wallet.subsplash.com
wallet.subsplash.com
*.stage.subsplash.net
wallet.subsplash.com
subsplash.net
*.stage.giving.subsplash.net
*.dev.giving.subsplash.net
*.stage.giving.subsplash.net
*.giving.subsplash.net
*.subsplash.net
core.dev.subsplash.net
*.docs.subsplash.net
dev.subsplash.net
*.dev.subsplash.net
*.dev.giving.subsplash.net
*.dev.giving.subsplash.net
*.docs.subsplash.net
natetest.subsplash.net
*.stage.subsplash.net
*.dev.subsplash.net
*.giving.subsplash.net
*.stage.subsplash.net
*.dev.subsplash.net
wallet.subsplash.com
core.stage.subsplash.net
*.subsplash.io
wallet.subsplash.com
*.stage.subsplash.net
*.stage.subsplash.net
core.sandbox.subsplash.net
*.docs.subsplash.net
subsplash.net
*.subsplash.net
subsplash.net
stage.subsplash.net
wallet.subsplash.com
*.stage.giving.subsplash.net
*.stage.subsplash.net
*.subsplash.net
*.dev.giving.subsplash.net
core.stage.subsplash.net
subsplash.net
stage.subsplash.net

Certificate

The complete raw certificate details for core.stage.subsplash.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIElzCCA3+gAwIBAgIQB/YLzCHTVv5o8xQ82vb+QDANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjEyMDYwMDAwMDBaFw0yNDAxMDQy
MzU5NTlaMCMxITAfBgNVBAMTGGNvcmUuc3RhZ2Uuc3Vic3BsYXNoLm5ldDCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANtpqE4DkS4cOX+Vi/0hsql1Zzpp
ovMoMmyCWI0OQmkCSaW9GzJOPmNOn0BRlgbMkH9Ub2bxIHNpYWz0l1MNgNKLWpXn
prPpamQfsweenUGJeRpVF2vsm5faJWaIdqK3BIbTb8XW4haaNLN3O599I+Kmve4O
1pEp/vScwVUEONkMGG3O/+XbDAmqaoSLt3kC3rN1Eqx7Z4yaRBBJgyzWzDxeFBA2
bREYApO0DELaOi6B5okCaoZLpGu6d5AfKwPb9cr9ZL+LMOPKmps49s8+RL2jhqam
Kno7q10AbL2KMpUXpbj1BPambclj3b8nqlXAB/nDm6AZJQlV9aTJMiV4KPECAwEA
AaOCAaIwggGeMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1Ud
DgQWBBTPvrydjl3OnlCqbEFV48MlruHQCzA/BgNVHREEODA2ghhjb3JlLnN0YWdl
LnN1YnNwbGFzaC5uZXSCGiouY29yZS5zdGFnZS5zdWJzcGxhc2gubmV0MA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPQYDVR0f
BDYwNDAyoDCgLoYsaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2Nh
MWItMS5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0G
CCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYI
KwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFi
LmNydDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3
DQEBCwUAA4IBAQAOKvN+W1DLuEaZBlxSW1c+w62Q3a+XPQGTz6YXHoIjxgTW+jmO
UradH6nJC0CHJCSlJv9hA+0dj5hMgZ5Z4ad6O+yUZIppCQ7HGX+xTcW3L0Xp4irS
vZj4r9xu++haIXdRd1QoWbV0xN2cLoNcVi5O63lZ0jvCpZ5L/14YandBRHcLP41y
y5HoI8pL9Bo55+4G6eO57RTDKSdBmNRk7ikWyIXJb2ecBgVZTPqxG3HLNdUPK3QS
qe0qZHYWeAWMBbz8aKJ6nYW9D+gcpZCTsPQ0yNhAu1lYCJUqgm8yO83l1OFyHkJr
41YaMg5NsriVWLlQJGczHCyosgZ05PthNAIn
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22moTgORLhw5f5WL/SGy
qXVnOmmi8ygybIJYjQ5CaQJJpb0bMk4+Y06fQFGWBsyQf1RvZvEgc2lhbPSXUw2A
0otaleems+lqZB+zB56dQYl5GlUXa+ybl9olZoh2orcEhtNvxdbiFpo0s3c7n30j
4qa97g7WkSn+9JzBVQQ42QwYbc7/5dsMCapqhIu3eQLes3USrHtnjJpEEEmDLNbM
PF4UEDZtERgCk7QMQto6LoHmiQJqhkuka7p3kB8rA9v1yv1kv4sw48qamzj2zz5E
vaOGpqYqejurXQBsvYoylReluPUE9qZtyWPdvyeqVcAH+cOboBklCVX1pMkyJXgo
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10582140277213271273840690008065244736
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'core.stage.subsplash.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27698290413281355804457933058207448149745959394185765883521420466719249975682222989721539598408769572486596876245656984610289568511148738863384169444232415783181302848716138539757157867888401695540209630297609500123871014633708589092977372926001703013746741351881573479484278952502646271712222404674461486196139511678020231659859053554638111023729587235330179205329347340405698957152351545705331509118562442981321361326436867656109690945468848983199165350596617680294529549556279339521472871029300926136730543066204647694645466805525064884916251619531811181796584020209204139926252809306267997949838842131647108229361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cfbebc9d8e5dce9e50aa6c4155e3c325aee1d00b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core.stage.subsplash.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.core.stage.subsplash.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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