waffle.cglcloud.com

Issued by Amazon

About this certificate

This digital certificate with serial number 08:69:be:59:12:e1:a2:ba:28:66:d4:3e:42:ac:f3:5c was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=waffle.cglcloud.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:69:be:59:12:e1:a2:ba:28:66:d4:3e:42:ac:f3:5c
Serial Number (int): 11182875851400148414706127366836253532
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f6:28:84:fd:b1:89:1c:cd:43:04:df:8d:45:35:15:ad:cc:bf:0e:6b
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 6b:b3:d6:1c:aa:78:48:c7:c3:1d:08:bb:70:63:c0:df:53:52:5b:b0
Fingerprint (sha256): 62:40:df:77:12:f1:10:b2:8d:a3:aa:61:91:84:10:f6:e8:29:1d:f5:1a:05:44:47:d8:03:dd:2a:2b:d3:0e:b9

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate waffle.cglcloud.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for waffle.cglcloud.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

waffle.cglcloud.com

Other certificates including the domain name cglcloud.com

(limited to 100 certificates)
git-engineering.cglcloud.com
csbsui.cglcloud.com
*.refapps.cglcloud.com
cglcloud.com
git.cglcloud.com
*.cglcloud.com
*.git-engineering.cglcloud.com
*.cglcloud.com
sni.cloudflaressl.com
waffle.cglcloud.com
sni.cloudflaressl.com
git.cglcloud.com
*.cglcloud.com
cglcloud.com
csbsui.cglcloud.com
ilc.cglcloud.com
git.cglcloud.com
cglcloud.com
git-engineering.cglcloud.com
*.cglcloud.com
*.cglcloud.com
*.refapps.cglcloud.com
sni.cloudflaressl.com
*.cglcloud.com
*.cglcloud.com
*.refapps.cglcloud.com
cptnuswebsiteallmdcccxxxiv.cglcloud.com
*.cglcloud.com
flake-analyzer.cglcloud.com
git.cglcloud.com
*.git-engineering.cglcloud.com
waffle.cglcloud.com
git-engineering.cglcloud.com
git-engineering.cglcloud.com
*.cglcloud.com
waffle.cglcloud.com
cptnstaticadddnsmccclxxxv.cglcloud.com
git.cglcloud.com
git-engineering.cglcloud.com
wiki.cglcloud.com
*.refapps.cglcloud.com
wiki.cglcloud.com
git.cglcloud.com
cglcloud.com
git.cglcloud.com
waffle.cglcloud.com
alpha-demo.cglcloud.com
cglcloud.com
csbsui.cglcloud.com
git.cglcloud.com
git.cglcloud.com
git.cglcloud.com
cglcloud.com
cglcloud.com
xuntest-static.cglcloud.com
sni.cloudflaressl.com
*.cglcloud.com
ilc.cglcloud.com
*.cglcloud.com
csbsui.cglcloud.com
git.cglcloud.com
*.cglcloud.com
cglcloud.com
*.git-engineering.cglcloud.com
*.cglcloud.com
ccpcaptain.com
cglcloud.com
*.cglcloud.com
cptnuswebsiteallmccxcrcii.cglcloud.com
cglcloud.com
git-engineering.cglcloud.com

Certificate

The complete raw certificate details for waffle.cglcloud.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAroPwEtKVaD0iwhmAt02E
3tRg92j2wO3Q/0rgJZTfYnClBuDrnG8lGVYeMbDYDe92wHbRuAFMZwDQbaixM5qG
qJVFaPwJObD3o1qAm+bjIvSBzqMIRVv8fxGZPqjem1p+kxZxlJFWPeFGoZWU5avv
5vO3jvf9CPStyU9gNvTq6YoSsR6+XVbKHFiMe4fZzr0pC+0KDv3ljBX1HwQZ/mMf
gM5r7Fk7YC/rp5yGNh1adTakdh+pZH0K6kgBpWvs3I2fKVHtybbyc38DdxCQU1tu
Uzv9Ud+moH35c8Y514zSGnFVqD52Qve/b9QN5zPmqAnd0REjKD2s5CFqgfj3MtjQ
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11182875851400148414706127366836253532
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-07 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'waffle.cglcloud.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22030526011822163254612099585860366895756179061982444600848000723810515073024060929823308616455793304722978898365591447982452755066554863004094537325278034391121670270661834077166199319517464514139331958261136812587320308625817727420659800923590683430904456775519267504006012838700561572847028462854167952927359391939547440149225354067898588636388620225994652829165166815207930428105496571357872837214918273048014290882040315261651459997349332080077587643321923597007724556831995065749536402405719585374111445602973238183068071186404748841348549791776018612946259947919282504910246410564014651545582244632762678562999
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f62884fdb1891ccd4304df8d453515adccbf0e6b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waffle.cglcloud.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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