ue1-mm.prod-getty.cloud

Issued by Amazon

About this certificate

This digital certificate with serial number 01:de:c6:e3:3a:47:e5:d1:41:98:a6:06:01:0c:d0:98 was issued on by Amazon.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ue1-mm.prod-getty.cloud

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:de:c6:e3:3a:47:e5:d1:41:98:a6:06:01:0c:d0:98
Serial Number (int): 2485951818311110960037604100733194392
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: d2:50:24:e9:1d:78:81:09:0d:e7:1e:8c:b9:a8:50:ac:a6:2c:f3:bb
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 1f:0f:58:5c:48:eb:59:be:c5:06:b5:20:7f:24:74:3f:3d:dd:1d:b3
Fingerprint (sha256): 69:b0:39:dc:48:67:f0:0f:23:f8:bc:94:c6:ae:db:27:39:7e:43:c1:62:04:5c:43:f6:be:ad:68:ca:26:1f:39

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate ue1-mm.prod-getty.cloud

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ue1-mm.prod-getty.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ue1-mm.prod-getty.cloud
mm.gettyimages.com
origin-mm.gettyimages.com
download-mm.gettyimages.com
ue1-mm.gettyimages.com

Other certificates including the domain name prod-getty.cloud

(limited to 100 certificates)
secondary-prod-in.prod-getty.cloud
uw2-in.prod-getty.cloud
customcontent.gettyimages.com
briefs-middleware.custom-content.usw2.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
wildcard.prod-getty.cloud
prod-mm-missing.prod-getty.cloud
prod-in.prod-getty.cloud
prod-mm.prod-getty.cloud
prod-mm.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
prod-mm.prod-getty.cloud
prod-in.prod-getty.cloud
prod-in.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
prod-mm.prod-getty.cloud
prod-mm.prod-getty.cloud
ue1-in.prod-getty.cloud
uw2-in.prod-getty.cloud
prod-mm.prod-getty.cloud
secondary-prod-in.prod-getty.cloud
prod-mm.prod-getty.cloud
prod-in.prod-getty.cloud
usw2-unipassthru.prod-getty.cloud
prod-mm.prod-getty.cloud
prod-mm.prod-getty.cloud
wildcard.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
ue1-mm.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
wildcard.prod-getty.cloud
ue1-mms-ws.prod-getty.cloud
wildcard.prod-getty.cloud
uw2-in.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
middleware-customcontent.gettyimages.com
uw2-mm.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
*.asset.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
prod-mm.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
metrics.usw2.prod-getty.cloud
customcontent.gettyimages.com
uw2-in.prod-getty.cloud
prod-mm.prod-getty.cloud
ue1-mm.prod-getty.cloud
*.prod-getty.cloud
middleware-customcontent.gettyimages.com
prod-mm.prod-getty.cloud
uw2-mm.prod-getty.cloud
ue1-mms-api.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
usw2-unipassthru.prod-getty.cloud
ue1-mms-api.prod-getty.cloud
*.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
customcontent.prod-getty.cloud
prod-in.prod-getty.cloud
prod-mm.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
ue1-mm.prod-getty.cloud
prod-mm.prod-getty.cloud
customcontent.gettyimages.com
uw2-mms-ws.prod-getty.cloud
prod-mm.prod-getty.cloud
*.entapp-integr.prod-getty.cloud
prod-mm.prod-getty.cloud
customcontent.gettyimages.com
secondary-prod-mm.prod-getty.cloud
prod-mm.prod-getty.cloud
customcontent.prod-getty.cloud
prod-mm.prod-getty.cloud
*.prod-getty.cloud
wildcard.prod-getty.cloud
wildcard.prod-getty.cloud
prod-mm.prod-getty.cloud
prod-mm.prod-getty.cloud
uw2-in.prod-getty.cloud
ue1-in.prod-getty.cloud
briefs-middleware.custom-content.usw2.prod-getty.cloud
uw2-mm.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
prod-mm.prod-getty.cloud
middleware-customcontent.gettyimages.com
*.prod-getty.cloud
prod-in.prod-getty.cloud
wildcard.prod-getty.cloud
ue1-mm.prod-getty.cloud
uw2-mms-api.prod-getty.cloud
wildcard.prod-getty.cloud
usw2-unipassthru.prod-getty.cloud
middleware-customcontent.gettyimages.com
secondary-prod-in.prod-getty.cloud
secondary-prod-mm.prod-getty.cloud
middleware-customcontent.gettyimages.com
uw2-mm.prod-getty.cloud
ue1-in.prod-getty.cloud

Certificate

The complete raw certificate details for ue1-mm.prod-getty.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNXWaLx/g8AaGSRbqra2
kDDMZQb7Ge9KjSjqwpHefi8ru0UqZHjDc8jirttH7D/wioxEyRnQeOxoRIIw9MKU
gbdXqfUJcNihGbzBQGhZKlge81/SVIfYhc2Aud3ai4r/67/P6koFe4RHGnTu+CRW
NLn0V+sQDFS0nChl7mbhy+Ov/KjD775y/yzb5XnpHXIwRPcEoOhf1cnarvsxP6Ov
9X07E/J+u8B0M2AKsW5NHKQKK0j2foQyak/ZOAmrsUD+OEC1uyq5AaP/O3nQsxZV
zl7IpwiC33YsjtDjCz/CgIGkWAsnqgjFFqLpT6U4861RuspMvGO56LY6TUiv/fSp
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2485951818311110960037604100733194392
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ue1-mm.prod-getty.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24343201772383656062153831398173628054711029094736099743656234052295484245396914603341541146070515920234462553936782555124770154521943378055026094181240146110134619705251470704442592232691916581555155581386623434452620865548854313181352714253777319966578905073245671374888514272499572001506389692271767692671550237367942228325137160911879288458395334280264304307380736897357737821128049847917547148630465681759795340439464339507484617305780498858117486309355293436855294319817898401782029338098357145592767471905987411111811777871289869546246170293987028850718703605282321014429276828402384870024487507793511122774281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d25024e91d7881090de71e8cb9a850aca62cf3bb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ue1-mm.prod-getty.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mm.gettyimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-mm.gettyimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download-mm.gettyimages.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ue1-mm.gettyimages.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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