*.ncrec.gov

Issued by Amazon

About this certificate

This digital certificate with serial number 0a:db:39:25:13:3f:21:24:62:63:0a:63:dd:de:d8:5c was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.ncrec.gov

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:db:39:25:13:3f:21:24:62:63:0a:63:dd:de:d8:5c
Serial Number (int): 14430552004614241175188426211417053276
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 48:4e:a8:9d:94:a6:a3:91:f6:ba:81:0c:6f:83:12:b8:59:b4:eb:93
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 05:1f:9a:72:69:8d:5c:ac:0a:3c:50:05:35:ae:2f:2d:60:de:2a:ed
Fingerprint (sha256): 6c:eb:a6:13:94:c0:9c:cb:df:f8:83:eb:69:c7:fa:92:f7:8d:36:10:c0:61:23:7b:90:d1:02:ed:e5:32:53:5c

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate *.ncrec.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ncrec.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ncrec.gov

Other certificates including the domain name ncrec.gov

(limited to 100 certificates)
ncrec-ex-01.ncrec.state.nc.us
www.rem.ncrec.gov
ncrec.gov
www.ncrec.gov
www.ncrec.gov
www.ncrec.gov
www.ncrec.gov
www.ncrec.gov
www.test.ncrec.gov
www.test.ncrec.gov
*.ncrec.gov
bulletins.ncrec.gov
firmapp.ncrec.gov
www.ncrec.gov
bulletins.ncrec.gov
www.ncrec.gov
www.ncrec.gov
ncrec.gov
firmapp.ncrec.gov
instructor.ncrec.gov
firmapp.ncrec.gov
mail.ncrec.gov
firmapp.ncrec.gov
firmapp.ncrec.gov
www.test.ncrec.gov
bulletins.ncrec.gov
mail.ncrec.gov
bulletins.ncrec.gov
bulletins.ncrec.gov
bulletins.ncrec.gov
bulletins.ncrec.gov
ncrec-ex.ncrec.state.nc.us
instructortest.ncrec.gov
*.ncrec.state.nc.us
*.ncrec.gov
bulletins.ncrec.gov
www.rem.ncrec.gov
www.ncrec.gov
www.ncrec.gov
*.ncrec.gov
www.ncrec.gov
*.ncrec.gov
*.ncrec.gov
www.ncrec.gov
instructor.ncrec.gov
instructor.ncrec.gov
ncrec.gov
ncrec.gov
bulletins.ncrec.gov
*.ncrec.state.nc.us
awstest.ncrec.gov
rem.ncrec.gov
www.ncrec.gov
www.phones.ncrec.gov
firmapp.ncrec.gov
bulletins.ncrec.gov
bulletins.ncrec.gov
*.ncrec.gov
bulletins.ncrec.gov
bulletins.ncrec.gov
rem.ncrec.gov
bulletins.ncrec.gov
*.ogletree.com
bulletins.ncrec.gov
www.remtest.ncrec.gov
firmapp.ncrec.gov
www.test.ncrec.gov
*.ncrec.gov
www.ncrec.gov
www.ncrec.gov
mail.ncrec.gov
www.remtest.ncrec.gov
firmapptest.ncrec.gov
bulletins.ncrec.gov
*.ogletree.com
www.ncrec.gov
instructor.ncrec.gov
bulletins.ncrec.gov
bulletins.ncrec.gov
instructortest.ncrec.gov
mail.ncrec.gov
mail.ncrec.gov
www.ncrec.gov
instructor.ncrec.gov
bulletins.ncrec.gov
www.ncrec.gov
bulletins.ncrec.gov

Certificate

The complete raw certificate details for *.ncrec.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ejeJpB7G5wnrvPBgWDV
oHSDGiTJLh4xKHJ8MNKmTaYbYt6w3mrJ/mE+qaHyGNLU8nfsJt15IfIqIbdJnSaf
J0ItanULsLBTlv6nOD/MyDtMNEc1g580g9HgjWMgxhINGCwOy8xOETyokb38r6DQ
q0e526+35yyfLLAW+Y77YtyWYhvlsQ0vSc1rGhCZYlw6bORs9BaL4dvLF9aLm4OS
TWOOV/gUbur9I0oLt2tPlyWYh87Xqhyu5h4n5+JvZxmLl+Vepl7X2tWe+8AuJpkf
ngMqkU6a2bHZdrroFJtAbYMTUKUrovtXvGIZycRRihHhWlHsg/ZL1rvdkLkhFybo
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14430552004614241175188426211417053276
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ncrec.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30033309657098874611204362916930867642808013005254742818694093432103394030845494983475705848300017154718518613224787253348071257999820952371396500471507285641704863270086484419084843356778133609610997482975999085931163690305241212814660768875513989724950050531067087982645976098177232855978100240595501505684483519582296344979847641560201111196846245319940836718814558254253008749614037214867032154234125023882895215329310053363847864237683158367000657692417422214335185651755523612675667141693300703991645984882060935942993643333910124566410911904493077560318831924748831352438550144613650985340426218507595411810549
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							484ea89d94a6a391f6ba810c6f8312b859b4eb93
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ncrec.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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