am.sace.sonet.com.au

Issued by Amazon

About this certificate

This digital certificate with serial number 0b:da:14:50:e5:10:d3:74:4b:2d:1e:9b:0a:75:1f:51 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=am.sace.sonet.com.au

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:da:14:50:e5:10:d3:74:4b:2d:1e:9b:0a:75:1f:51
Serial Number (int): 15753840726132149826286084719654543185
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ff:07:cd:01:07:95:ec:f7:4f:ed:ff:7f:10:74:82:36:58:0d:dd:ca
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 92:dd:7d:cc:fe:4d:d1:a6:98:89:a5:29:e7:b5:ae:e4:a9:58:98:cd
Fingerprint (sha256): 70:4a:07:07:80:58:3e:42:ca:34:07:c6:6a:45:28:7d:6e:a8:b5:fb:47:7b:ae:8c:dc:4e:af:70:92:d7:54:7e

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate am.sace.sonet.com.au

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for am.sace.sonet.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

am.sace.sonet.com.au

Other certificates including the domain name sonet.com.au

(limited to 100 certificates)
sace-reports.sonet.com.au
support.theperipheralstore.in
*.sonet.com.au
am.uat.mohi.sonet.com.au
icase.prod.sonet.com.au
am.uat.mohi.sonet.com.au
reports.sace.sonet.com.au
sace-reports-uat.sonet.com.au
pirls.sonet.com.au
am.uat.nzqa.sonet.com.au
icase.uat.vp.sonet.com.au
am.uat.sace.sonet.com.au
icase.prod.sonet.com.au
am.sit.nzqa.sonet.com.au
support.plcorp.com
cdn.nzuat.sonet.com.au
am.prod.sace.sonet.com.au
support.strataprof.com
sonet.com.au
am.uat.vcaa.sonet.com.au
sonet.com.au
iccs.sonet.com.au
icase.uat.vp.sonet.com.au
help.sonet.com.au
timss.sonet.com.au
am.perf2.sonet.com.au
support.pelicanqsrsolutions.com
sace-reports-uat.sonet.com.au
eu.sonet.com.au
icils.sonet.com.au
support.simpleintranet.org
am.mohi.sonet.com.au
am.vcaa.sonet.com.au
help.wisetronic.com
am.qa2.sonet.com.au
support.datosnetworks.com
eu.sonet.com.au
*.sonet.com.au
servicenter.tecnologi.ca
icase.prod.sonet.com.au
am-api.sonet.com.au
sonet.com.au
am.nzqa.sonet.com.au
aws-cdn-sace-prod.am.rm.com
am.skolverket.sonet.com.au
am.ameu.sonet.com.au
support.plcorp.com
support.simpleintranet.org
sace-am.sonet.com.au
am.uat.vcaa.sonet.com.au
am.vcaa.sonet.com.au
support.worldhook.com
support.simpleintranet.org
icase.qa1.sonet.com.au
support.karmagroup.com
am.uat.vcaa.sonet.com.au
support.simpleintranet.org
ssesms.sonet.com.au
am.qa2.sonet.com.au
am.skolverket.sonet.com.au
icase.prod.sonet.com.au
am.vcaa.sonet.com.au
am.amaus.sonet.com.au
support.acentric-surveys.com
*.sonet.com.au
am.sonet.com.au
admin-pirls.sonet.com.au
am.sace.sonet.com.au
support.simpleintranet.org
support.pointii.com
cdn.eu.sonet.com.au
support.highendiron.com
sace-am-uat.sonet.com.au
am.qa2.sonet.com.au
am.sonet.com.au
am.nzqa.sonet.com.au
am.nzqa.sonet.com.au
support.simpleintranet.org
am.mohi.sonet.com.au
icase.prod.sonet.com.au
am.uat.nzqa.sonet.com.au
icase.vp.sonet.com.au
reports.sace.sonet.com.au
usa.sonet.com.au
support.fastclock.net
sso.skolverket.sonet.com.au
icase.prod.sonet.com.au
sophosmc.sonet.com.au
am.mohi.sonet.com.au
am-sso.uat.vcaa.sonet.com.au
mail1.sonet.com.au
support.simpleintranet.org
icase.qa1.sonet.com.au
icase.sonet.com.au
support.simpleintranet.org
am.perf2.sonet.com.au
am-sso.uat.vcaa.sonet.com.au
repo.qa1.sonet.com.au
support.simpleintranet.org
am.uat.vcaa.sonet.com.au

Certificate

The complete raw certificate details for am.sace.sonet.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA25U7zQgrH5MQKfxCfxbT
q2+RnpK1o/OBxpyca/bpbbDAGf/gAx7eaT2hKzCc8Qj0C9mBW4OZjvISb8+vwLam
HLN+ZAfjb9OGogU/TPU7cwUAGrn/s+JRcOe7SqodL2aTWqnPyLqBqsdCTPMg+O3n
i95xMFJXUeq6kT1Ug1566CmKUd9P7UzOk/NBGyWNyqdTRJoUPnbBEM/uYULRBnCd
DtHJ5Ww5wvK57Kg8QCRrQSjiO2DzXM9YVyiBEO1O/EyiXPjDZ1ZesFjb8yyVkmaZ
sy6x9cM1w6UJabTZDSMsvWWdv1pWOYzmnkg+jIlIaRpxwNYRLWquSwxCQBlHHH2Q
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15753840726132149826286084719654543185
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-31 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'am.sace.sonet.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27719778617120372399511007309733856380701569504637539186993403226915581376769783762527435413631435460211537522274467917862439259264881342283955704495331520178534185259472132391488972208807280374872633075634738623407393814175383986396806697317684937135650753777054472822499113664605520180911528607050662571571880398433189833755495804715070771825623308085978374434038756342199493869141896409863897159165368087298926785251162443282006175837542884237233477123978082571277348660880128303135530706810399395472307274415637145540780337971562299741970657099901829916106151651819774318462924644102225972726956421146179125743661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff07cd010795ecf74fedff7f10748236580dddca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'am.sace.sonet.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016f5a8ac5ea00000403004630440220544d19daa840da3e01aacdbca72df19b3aeb49af83df284ca57c1f12f869dc14022030297286a8c0bd4d4b2590b7f62cbed02a68b4a4031e8d084aca92cceafd99430075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016f5a8ac6b70000040300463044022053dd4291548be7fb43e717c47cd4c8cab29ca2612b9c303afb2b15122091362d022051297efacefcb337fcec3807c6193c508863fcce329fa9164ed067f33d76faed
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002daff7c45b425709797339b4cf999534734e738bf87beddcfe038d82e679706aa71191cc6c3a9439a7bb0bbcd272b604c70f99053d5f57cf506b86e14063c3adfc68ae606409ba68a920bd16a180fc2124f921670e69da5f00bb44014101f2812072f2e0cd662166a35c4bb4b7ccef3eae0ef0da0b8613e05133da295abebc6ccd180379f25ea8c43eb9bbe0d28904860b7f219813e93fcec779e1ad257767d602a529a35bddc96fca41a21451c2b4670df6fddb09641fca2c0e9b6833c37868d7b0afd20a96910bdf96b01e153c5058b9cb63be7348b0b6644919148b7790647dfec92611e975273cd08145b5ab3e4b0ae11f20dc2d56ef2c533ef597011f60