*.verisys.com

Issued by Amazon

About this certificate

This digital certificate with serial number 03:15:27:a4:4a:bf:44:c7:94:02:92:df:52:67:90:be was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.verisys.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:15:27:a4:4a:bf:44:c7:94:02:92:df:52:67:90:be
Serial Number (int): 4097526251910294114222544305265283262
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 07:cc:f1:b7:a8:c7:de:27:a1:45:5b:17:7b:cb:31:e1:0e:49:ef:63
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 00:6b:98:85:fd:49:c8:1b:2f:fb:85:c8:2f:fe:11:35:e8:11:98:68
Fingerprint (sha256): 5f:27:c9:0e:e1:17:b2:39:a4:3c:c9:9c:83:af:12:3f:22:70:ac:db:9e:e8:29:07:b0:b3:5b:45:cd:e9:40:eb

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate *.verisys.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.verisys.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.verisys.com
verisys.com

Other certificates including the domain name verisys.com

(limited to 100 certificates)
feedback.qualityhosting.de
survey.gradwell.com
*.demo.verisys.com
tls.automattic.com
verisys.com
survey.westernwindowsystems.com
cmap.stgapps.verisys.com
*.corp.verisys.com
supportsurvey.control4.com
surveys.myarg.com
kenexa.verisys.com
surveys.fredmangroup.com
tls.automattic.com
surrogate.omegafamilysurrogates.com
*.verisys.com
*.api.verisys.com
feedback.blackboardinsurance.com
*.apps.verisys.com
cody-test.getgetfeedbackback.com
survey.faq.rakuten.net
beta.verisys.net
*.verisys.com
pubmanager.stgapps.verisys.com
surveys.elkay.com
certificates.getfeedback.com
eval.bts.com
checkmedic-ldh.verisys.com
survey.boomtownroi.com
helpcenter.verisys.com
sftp.verisys.com
helpcenter.verisys.com
feedback.wufoo.com
feedback.blackboardinsurance.com
insights-stage.verisys.com
*.verisys.com
beta.verisys.net
certificates.getfeedback.com
cmap.apps.verisys.com
feedback.smilebooth.com
feedback.blackboardinsurance.com
checkmedic-ldh.sit.verisys.com
forms.comfortkeepers.com
*.verisys.com
enquete.pietervanforeest.nl
supportsurvey.control4.com
*.verisys.com
feedback.liftago.com
*.prod.verisys.com
*.prod.verisys.com
feedback.nanotempertech.com
customdomain.getfeedback.com
survey.faq.rakuten.net
*.dev.verisys.com
sftp.verisys.com
*.dev.verisys.com
survey.faq.rakuten.net
*.verisys.com
*.demo.verisys.com
feedback.icelandair.com
survey.westernwindowsystems.com
dashboard.verisys.net
survey.adstream.com
tls.automattic.com
surveys.fredmangroup.com
sftp.verisys.com
sftp.verisys.com
feedback.auditorservice.com
cm-uw2-dev-chkmdc-app.nsapps.aperturecvo.com
*.verisys.com
surveys.elkay.com
*.corp.verisys.com
www3.verisys.com
survey.faq.rakuten.net
www3.verisys.com
customdomain.getfeedback.com
customerfeedback.surveymonkey.com
feedback.nextdc.com
insights.verisys.com
checkmedic-ldh.dev.verisys.com
feedback.inap.com
feedback.auditorservice.com
pubmanager-alt.stgapps.verisys.com
*.prod.verisys.com
survey.gradwell.com
feedback.nextdc.com
enquete.pietervanforeest.nl
certificates.getfeedback.com
www3.verisys.com
tls.automattic.com
www3.verisys.com
feedback.qualityhosting.de
verisys.com
tls.automattic.com
*.api.verisys.com
*.verisys.com
*.demo.verisys.com
feedback.nanotempertech.com
*.prod.verisys.com
www.verisys.com
getfeedback.wire.com.au

Certificate

The complete raw certificate details for *.verisys.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfj1ELcuvK/GqvJZHUnL
wCSzV+BoM3Fa+d34IIAYXvl7mPw7seQ9BHCiG08B7vPxap969G5Nem+UIJ6Y9JQ9
ujnldCXeTmqIZS/6JKqvzYLJv/7kT/thz4L4CkquLVXUdF9t9ptmR/p/fsiwSY4V
09m+M5KR6S9vJMHgXpJq4BzKAty1nIBMrkKa2zdOLDuBIn2tB9FhHkrBOdyOBYnd
/ZD2HDsOOllUPxLZkBABDzrBrqO3zchKsJVjFu6gwkHug7M532ijD+iERHRPInSq
YTHNlxmT96bp+0JHwneI09ehNnxn6tEbsZvWpTo7Q2SOLcVsuscnJECSxqQX2Zz/
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4097526251910294114222544305265283262
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.verisys.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24486758271857977022638436860639774547655107259690761179986740968788802530365268355741129243925467160918823789867045207460790391427915404919394522026629962202169568622778881529981203932607956523217145350906710620567585286099277071025808054293682108498351629818662971507989833321733550177117271595397473208747634446988606155435012463097673788474787613959929899676338345178444165155562654819156846666077645462416499308025379890651883696175446958608999039669672176169695295106906328084359871270531255227912950161741745543681284299272758729862811121267966862458266884457308344138410222940434695418568549954907950305574791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							07ccf1b7a8c7de27a1455b177bcb31e10e49ef63
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.verisys.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verisys.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018503b7a9700000040300473045022042eaa0556733f6ed12c98935c61fc515cc6c770732cb74b8a0236cfbb2e8e675022100b060fc7213dfa619565f58e766b7cfdf1d5ae73a66675b4d6c1277e51add085300760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018503b7a9a400000403004730450221009dfad97518795c2d848c02a2d61d1fd29d7018ca2c82210c59034a72b0f7b75d02203f52a85dac6c43d93d2693fd9014f50133410890507ac6b34dd8c5c3ad2aa9e30076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018503b7a9ae0000040300473045022100df5ff9f7be587c926c99b5f0f4d6288813e943adb16a20bc11c6a877ddf5828502202076d0409b42d8c565eaef5f589fba2c7785b8ed8fdc0aaa041e3262416152f8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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