*.oghub.io

Issued by Amazon

About this certificate

This digital certificate with serial number 09:6e:c0:e8:0b:56:4c:bf:2f:ba:7f:7b:1a:28:94:97 was issued on by Amazon.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.oghub.io

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:6e:c0:e8:0b:56:4c:bf:2f:ba:7f:7b:1a:28:94:97
Serial Number (int): 12538117223589343480462009181885994135
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 73:c9:6b:3d:22:b6:e1:e7:e0:09:9e:c7:db:d3:87:83:cf:e0:49:e8
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): ee:3f:af:eb:9e:dc:2e:53:0a:dc:5c:4f:27:60:5b:9f:89:de:89:de
Fingerprint (sha256): 70:6d:28:3b:ae:7c:83:49:aa:59:3e:68:4b:dc:0b:f1:30:20:5c:00:94:0d:47:17:d7:b0:b3:06:a4:24:25:3a

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.oghub.io

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.oghub.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.oghub.io
te.sportscheck.at
te.sportscheck.ch
te.sportscheck.com
te.heine.at
te.heine.ch
te.heine.de
te.heine-shop.nl
te.helline.fr

Other certificates including the domain name oghub.io

(limited to 100 certificates)
*.oghub.io
js.oghub.io
*.oghub.io
*.oghub.io
*.test-extern.oghub.io
backup.data.oghub.io
js.oghub.io
*.oghub.io
*.test-intern.oghub.io
*.oghub.io
js.oghub.io
*.test-extern.oghub.io
*.oghub.io
*.test-extern.oghub.io
*.oghub.io
backup.data.oghub.io
*.oghub.io
*.oghub.io
js.oghub.io
*.oghub.io
*.oghub.io
*.test-extern.oghub.io
backup.data.oghub.io
*.test-extern.oghub.io
*.oghub.io
js.oghub.io
js.oghub.io
js.oghub.io
js.oghub.io
js.oghub.io
js.oghub.io
*.oghub.io
*.oghub.io
js.oghub.io
*.oghub.io
js.oghub.io
test-extern.nitrosniffer.ottogroup.io
*.test-intern.oghub.io
js.oghub.io
*.oghub.io
argo-ui.usergraph.data.oghub.io
*.oghub.io
*.test-intern.oghub.io
js.oghub.io
*.test-intern.oghub.io
*.oghub.io
*.test-extern.oghub.io
*.oghub.io
prod.nitrosniffer.ottogroup.io
*.test-extern.oghub.io
js.oghub.io
js.oghub.io
js.oghub.io
*.oghub.io
js.oghub.io
*.oghub.io
js.oghub.io
*.oghub.io
js.oghub.io
backup.data.oghub.io
*.oghub.io
backup.data.oghub.io
*.oghub.io
test-extern.nitrosniffer.ottogroup.io
*.oghub.io
*.oghub.io
prod.nitrosniffer.ottogroup.io
js.oghub.io
*.oghub.io
js.oghub.io
*.oghub.io
js.oghub.io
*.oghub.io
ec0802.deepquery.data.oghub.io
js.oghub.io
*.test-extern.oghub.io
*.test-extern.oghub.io
js.oghub.io
*.test-intern.oghub.io
*.oghub.io
*.test-intern.oghub.io
*.oghub.io
backup.data.oghub.io
js.oghub.io
*.oghub.io
prod.nitrosniffer.ottogroup.io
*.oghub.io
*.oghub.io
js.oghub.io
js.oghub.io
js.oghub.io
*.test-extern.oghub.io
*.oghub.io
*.oghub.io
js.oghub.io
*.oghub.io
*.test-extern.oghub.io
*.test-intern.oghub.io
*.oghub.io
*.test-extern.oghub.io

Certificate

The complete raw certificate details for *.oghub.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsU4wZe5O7PUK62vx2qvZ
OR/vvC/YMny5PZFaY+DEbmJt9SiUfSnuzgDBkP78BMwEZQX89honaOA8ubxCtxlv
b8OoaQvkO5CNz3ZWFF1jAFIQSrJhC91fYbblbtGzNzoceASw4+kw68j36fpdayNh
xsae6A/S1j3ToNDqAQj0SqeYcmejJrjFnnSyh07hb1bYEqi+cSOzMBccxVcrYKfM
6VXJ5Ri8tupE0Ps1nEea505+8dnxIVnT2noOGdp4JAEGmW4HXeBhvrwttYOhJ35Q
6hte1Oo98otHL5Sp5KYKEm+TsK2+lzj0uASJmqsVUjMNRQpP8CBMX8XVMGj9OV51
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12538117223589343480462009181885994135
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.oghub.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22382736439200456362115460162664567659633330732646975252391238574633755044103886328073825471299584943429844819247244433584700728898843648719196946718710459795242357358495849066662421846652371478425939036609779506963011389937275363274201983300772390243578841844137182051936431377195192856991867161050840959463559141462857137944061940943283806450305811597804003174506291618958864064304556746034025221712594146102572697779556593408135127418819472123649255997598388233718855540225882331361497681582201354260428422161730828599046122257138494192312840269082439546499798394516447779325786879829525665108378580576807958771103
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							73c96b3d22b6e1e7e0099ec7dbd38783cfe049e8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oghub.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.sportscheck.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.sportscheck.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.sportscheck.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.heine.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.heine.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.heine.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.heine-shop.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te.helline.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001648050ebf2000004030048304602210099b8a5cb6458999449106c9e64a09b759c01ed62ac56db78633ff181499d2914022100edc39b1f581b9e5a8b67769e9ea9ed24d82ea65dc4db68633e680ebf66335e380077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001648050eccd00000403004830460221009912557fb96969c7c94c8bc69c99f1faac3b6c95d546c5cc2caef001959651be0221008eee0585393f4c64f56b0c6236d47b01393250b3492feb83b970f5b0e789ae9f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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