*.hayden-homes.com

Issued by Amazon

About this certificate

This digital certificate with serial number 04:7b:69:4b:90:ef:d1:83:7a:42:d1:eb:55:8a:5f:d0 was issued on by Amazon.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.hayden-homes.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7b:69:4b:90:ef:d1:83:7a:42:d1:eb:55:8a:5f:d0
Serial Number (int): 5957700136715783370234127577493692368
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 13:54:a5:41:9a:b3:02:3f:d4:0a:5a:dd:c1:b4:25:fb:89:65:9b:f9
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 72:3c:86:51:6a:32:cb:09:2c:de:a1:0c:b7:0d:b4:2a:3e:d0:81:c9
Fingerprint (sha256): 71:79:7b:65:ad:bb:9e:71:58:81:f1:b6:36:f2:c8:24:a8:3f:07:12:ca:2c:95:88:55:93:4a:2d:1a:f5:15:f9

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate *.hayden-homes.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.hayden-homes.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.hayden-homes.com
*.stg.hayden-homes.com
hayden-homes.com
aws.hayden-homes.com
*.aws.hayden-homes.com
*.prd.hayden-homes.com
or.hayden-homes.com
*.dev.hayden-homes.com
*.or.hayden-homes.com

Other certificates including the domain name hayden-homes.com

(limited to 100 certificates)
hayden-homes.com
kova.hayden-homes.com
kova.hayden-homes.com
gateway.hayden-homes.com
gateway.rdm.hayden-homes.com
gateway.rdm.hayden-homes.com
hayden-homes.com
*.hayden-homes.com
helpdesk.aeainvestors.com
eedesk.hayden-homes.com
hayden-homes.com
*.hayden-homes.com
hayden-homes.com
*.hayden-homes.com
hayden-homes.com
gateway.va.hayden-homes.com
onbase.hayden-homes.com
hayden-homes.com
servicedesk.intranerve.com
eedesk.hayden-homes.com
hayden-homes.com
eedesk.hayden-homes.com
gateway.va.hayden-homes.com
*.hayden-homes.com
hayden-homes.com
eedesk.hayden-homes.com
hayden-homes.com
hayden-homes.com
kova.hayden-homes.com
hayden-homes.com
*.hayden-homes.com
*.hayden-homes.com
*.hayden-homes.com
hayden-homes.com
hayden-homes.com
gateway.rdm.hayden-homes.com
*.hayden-homes.com
gateway.hayden-homes.com
hayden-homes.com
*.hayden-homes.com
*.hayden-homes.com
helpdesk.aeainvestors.com
gateway.hayden-homes.com
*.aws.hayden-homes.com
gateway.rdm.hayden-homes.com
hayden-homes.com
hayden-homes.com
kova.hayden-homes.com
imoit.ciraconnect.com
gateway.va.hayden-homes.com
hayden-homes.com
helpdesk.aeainvestors.com
*.hayden-homes.com
*.hayden-homes.com
helpdesk.aeainvestors.com
*.hayden-homes.com
hayden-homes.com
*.hayden-homes.com
hayden-homes.com
gateway.va.hayden-homes.com
kova.hayden-homes.com
hayden-homes.com

Certificate

The complete raw certificate details for *.hayden-homes.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrMwyEOu0Wl90IMEazXc
CJzBIt5fmlB7wnop0GfJAOfcCUt8WC/iUHGdNsSPUl8VwLC8M2Xl7BCQKJLoo5pY
asrGjtal4SwOLAu1B7Rzg6Pdc/UPaXhUTpfyPeDYuEnN1P1iaAr+DAY1q8cx79gI
Zkt+6jRZ+mIrTFFi4Wxzf2aPMqvp2OX74uwOoeauBIlN9sdTfHDl1pb7wsoiIcqd
noNqbCOsPEKXgIMCARiuZzhWJCXUXtunvRIYcCYtbq48RmpSvKLhgYtS1IotyoJ8
K+0FO3P9MTZs/SsydRl9VLVSWSXx8MwYPzFBtzpipMXRHU5GdL3qf80jgEfvBLiW
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5957700136715783370234127577493692368
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.hayden-homes.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24073640099914854667178037565820125787172651400991348966151082226905580596350931062506475595274947998967179220477712618622041593474456693132367170328439137668540611667001325398066157080818240398250813320061198744264460163842629750758829378729980456565610809272128510378623447786566428408754259640544131658393973402836464952607986599955361355917211184145981643920553793758480282890962728738291545524459942871067835208296115936673290592122103861482773869059311722148335200778432003471795047291919764450786919168583344459255930734555977792066071222286174046135340393780419042244695309265969785544516193271455235960247911
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1354a5419ab3023fd40a5addc1b425fb89659bf9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (203 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hayden-homes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg.hayden-homes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hayden-homes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws.hayden-homes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aws.hayden-homes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prd.hayden-homes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'or.hayden-homes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.hayden-homes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.or.hayden-homes.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0054f8233ab5154c7c8f7c30873d646b5ef937f8e5cf120ba2284af95698d64f4471ecfadec51d18bfaff4e7373a10499c511f77e9dfcb6c08d70d1ee6e96f00bbb8b72adf1e17e486c72080cdf758cc6b46f88dbb325a6661347aae551d80e2ea6ca19f17534f7522206269cc089baef222d40f8e070c145c36df18aa8ce1e9eb90439312b4c85fa18136428a0c0ca4aaf0bb878964be1956824a66259343aca45d1117ed51e19715b47d5c0a1bcbee3152b4953dbcfe936811c64f2befe5af95746f5c20101eb5e127aaed25c880d0d7b2b54391cb877ac10199332933199e0f54a4d9db03030d3d40b2c05e3f17d1b8675ed40d179adc4fa4fc25da94e9be8d