opendj.lvtst01.portal-env.atocrsp.org

Issued by Amazon

About this certificate

This digital certificate with serial number 05:be:d3:e8:09:ba:e3:51:31:28:01:8b:4b:7c:8f:ce was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=opendj.lvtst01.portal-env.atocrsp.org

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:be:d3:e8:09:ba:e3:51:31:28:01:8b:4b:7c:8f:ce
Serial Number (int): 7636974354417569191485995005832368078
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 09:c6:ff:9a:eb:7e:45:12:f3:e5:db:78:da:60:15:92:71:d9:46:31
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): f8:a3:03:04:5d:f9:40:bb:3e:05:e6:eb:6b:81:bc:f7:23:28:e0:bb
Fingerprint (sha256): 60:7c:d8:d1:f5:39:00:49:82:7b:0f:87:b4:f8:19:d7:c3:64:d0:bc:f8:28:d1:74:36:41:96:12:10:29:26:3e

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate opendj.lvtst01.portal-env.atocrsp.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for opendj.lvtst01.portal-env.atocrsp.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

opendj.lvtst01.portal-env.atocrsp.org

Other certificates including the domain name atocrsp.org

(limited to 100 certificates)
lsmtest.atocrsp.org
esg.atocrsp.org
lsmtest.atocrsp.org
webdev.portal-env.atocrsp.org
opendj.uat01.portal-env.atocrsp.org
apioat.atocrsp.org
opendj.preprod01.portal-env.atocrsp.org
sso.atocrsp.org
ssouat.portal-env.atocrsp.org
elb-api.prod01.d4t-env.atocrsp.org
webval.portal-env.atocrsp.org
tmsapi.atocrsp.org
portalload.atocrsp.org
ssosystst.portal-env.atocrsp.org
support.test01.commonservices-env.atocrsp.org
tmsapiload.atocrsp.org
esgsystst.portal-env.atocrsp.org
webpreprod.portal-env.atocrsp.org
tms-flow-env2.atocrsp.org
lsmtest.atocrsp.org
ssovalpreprod.portal-env.atocrsp.org
web.atocrsp.org
portal.atocrsp.org
esguat.portal-env.atocrsp.org
ssoval.portal-env.atocrsp.org
ssolivetest.atocrsp.org
tmsapisecuremo3.atocrsp.org
ssovaldev.portal-env.atocrsp.org
ssouat.portal-env.atocrsp.org
support.test01.commonservices-env.atocrsp.org
esglivetest.atocrsp.org
tms-api-env2.atocrsp.org
ssopreprod.portal-env.atocrsp.org
weblivetest.atocrsp.org
ssouat.portal-env.atocrsp.org
lsm.atocrsp.org
esguat.portal-env.atocrsp.org
ssopreprod.portal-env.atocrsp.org
portal.atocrsp.org
ssosystst.portal-env.atocrsp.org
ssouat.portal-env.atocrsp.org
tmsapisecuremo3.atocrsp.org
tms-api-env2.atocrsp.org
*.atocrsp.org
mecportal.atocrsp.org
ssovaluat.portal-env.atocrsp.org
lsm.atocrsp.org
portal.atocrsp.org
tmsapi.atocrsp.org
*.atocrsp.org
webuat.portal-env.atocrsp.org
tmsapimo3-testing.sand.tms-env.atocrsp.org
portalload.atocrsp.org
opendj.dev01.portal-env.atocrsp.org
portal.atocrsp.org
esg.atocrsp.org
web.atocrsp.org
tmsapimo3-testing.atocrsp.org
webpreprod.portal-env.atocrsp.org
opendj.lvtst01.portal-env.atocrsp.org
webpreprod.portal-env.atocrsp.org
portalload.atocrsp.org
ssodev.portal-env.atocrsp.org
esgpreprod.portal-env.atocrsp.org
webvalpreprod.portal-env.atocrsp.org
esgsystst.portal-env.atocrsp.org
portal.mo3.iam-env.atocrsp.org
portalmo3.atocrsp.org
tmsapisand.atocrsp.org
apioat.atocrsp.org
tmsapi.atocrsp.org
weblivetest.atocrsp.org
opendj.prod01.portal-env.atocrsp.org
websystst.portal-env.atocrsp.org
portalload.atocrsp.org
opendj.uat01.portal-env.atocrsp.org
tmsapisand.atocrsp.org
lsmtest.atocrsp.org
web.prod01.d4t-env.atocrsp.org
esglivetest.atocrsp.org
webvalpreprod.portal-env.atocrsp.org
webpreprod.portal-env.atocrsp.org
webvalsystst.portal-env.atocrsp.org
webuat.portal-env.atocrsp.org
webvaldev.portal-env.atocrsp.org
sso.atocrsp.org
web.atocrsp.org
support.prod01.commonservices-env.atocrsp.org
lsm.atocrsp.org
tmsapi.sand.tms-env.atocrsp.org
esguat.portal-env.atocrsp.org
tmsapi.load.tms-env.atocrsp.org
portalload.atocrsp.org
esgsystst.portal-env.atocrsp.org
opendj.lvtst01.portal-env.atocrsp.org
ssovalsystst.portal-env.atocrsp.org
ssopreprod.portal-env.atocrsp.org
ssodev.portal-env.atocrsp.org
*.atocrsp.org
opendj.prod01.portal-env.atocrsp.org

Certificate

The complete raw certificate details for opendj.lvtst01.portal-env.atocrsp.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyn6fM0J/Jm0m1Sq2vnkJ
LdhY6bSO1AAWa7QVUYK1Pv7LL21wICOFyRV+l6cpTru9+LCWqUFGE+2nhWByRjva
gFGIW9e4scf93P2fXvbf63q0G5yQMnf0UvvZJB8mVJlJrI1ebJsdLvLWuEZGEM86
g9MHY+muwG2tVvLhC1O9JI1nWgpXJdH5SoajJxcjpOViV94YEtdGIdtuK6X/m8Yc
F8wxEmqRRIGXnA5YIXzRA3DBYxhQFcFmtYg4AU+S8gHg3JWIl0XefC9dSQK+Qazo
B35nH6MAGyfhcL5epxiXjbNkeOwSarPhFFKtlmsSnU/R4RiJRszY98WYxARqjFra
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7636974354417569191485995005832368078
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'opendj.lvtst01.portal-env.atocrsp.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25562577177310725801662814744530382123226115619858360156336452983272687191048666514418565763048024034976726212316403819997150233852719917685976756153669391788837632261696587588206764676592680086277023649279584667430957623016588489795068118440349057255324167997242355357796209368421746832354194545124513361621346992133964428526061069778921530697665648682271160593604888863226004659719973365627253015262722138060821776361326051281971999328951334993418776835118501558831200786736015352156971494081956967709326936091705459980466350855289806438040797700096504789184268189156922416777432235957145288252822179148463815187037
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							09c6ff9aeb7e4512f3e5db78da60159271d94631
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opendj.lvtst01.portal-env.atocrsp.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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