*.northplains.com

Issued by Amazon

About this certificate

This digital certificate with serial number 05:23:e5:1a:9a:08:20:c6:20:16:ae:fc:0b:7e:05:44 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.northplains.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:23:e5:1a:9a:08:20:c6:20:16:ae:fc:0b:7e:05:44
Serial Number (int): 6832517148375277624456527922012751172
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 0e:4a:5b:61:bb:3a:5d:4f:a6:ac:13:cf:97:6b:31:36:eb:c6:d6:e1
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 4b:c4:fc:d7:b6:82:0e:09:64:e1:51:44:fb:ae:d7:c1:3d:fd:16:08
Fingerprint (sha256): 76:e2:e9:a9:e8:04:b9:e2:4f:15:44:9e:2b:d0:15:a8:30:a9:90:cb:98:f7:77:e0:a0:a8:e7:82:a1:3e:0d:76

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.northplains.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.northplains.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.northplains.com

Other certificates including the domain name northplains.com

(limited to 100 certificates)
classichelp.kayako.com
support.cardinal-mark.com
*.northplains.com
*.northplains.com
support.engineyard.com
*.northplains.com
chempro.kcl.de
*.northplains.com
northplains.com
*.northplains.com
vpn.lt.northplains.com
support.infinio.com
chempro.kcl.de
chempro.kcl.de
www.northplains.com
*.northplains.com
northplains.com
www.northplains.com
support.engineyard.com
northplains.com
*.northplains.com
classichelp.kayako.com
www.northplains.com
classichelp.kayako.com
chempro.kcl.de
*.northplains.com
*.onbrand.northplains.com
classichelp.kayako.com
*.northplains.com
ssl470224.cloudflaressl.com
support.cardinal-mark.com
*.northplains.com
avolin.com
chempro.kcl.de
pg.pingfed.northplains.com
*.northplains.com
piwik.usarmy.northplains.com
www.northplains.com
chempro.kcl.de
classichelp.kayako.com
support.engineyard.com
chempro.kcl.de
chempro.kcl.de
*.northplains.com
northplains.com
northplains.com
*.northplains.com
supportsurvey.zephyrtel.com
support.cardinal-mark.com
northplains.com
chempro.kcl.de
*.northplains.com
go.northplains.com
blog.northplains.com
classichelp.kayako.com
go.northplains.com
*.northplains.com
chempro.kcl.de
northplains.com
*.northplains.com
*.northplains.com
www.northplains.com
*.northplains.com
avolin.com
northplains.com
blog.northplains.com
ssl470223.cloudflaressl.com
www.northplains.com
northplains.com
chempro.kcl.de
chempro.kcl.de
classichelp.kayako.com
northplains.com
support.cardinal-mark.com
blog.northplains.com
support.cardinal-mark.com
www.northplains.com
northplains.com
blog.northplains.com
support.engineyard.com
www.northplains.com
northplains.com
www.northplains.com
support.engineyard.com
classichelp.kayako.com
piwik.usarmy.northplains.com
northplains.com
northplains.com
go.northplains.com
northplains.com
uploader.northplains.com
avolin.com
chempro.kcl.de
piwik.usarmy.northplains.com
classichelp.kayako.com
blog.northplains.com
imports.versata.com
blog.northplains.com
northplains.com
northplains.com

Certificate

The complete raw certificate details for *.northplains.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr9gVa2kOjCqsamggGTz
PmSZTRYtT+L+FHNCapeL2fgt19FztK4H47lPU4H+LQwFsJc3eI01lfIepOJNV1/N
TLSMmrjkV5OPRpGJb3uARpW9BWBmQOsijlmcY57x4a6CXldcWfTUm9iR1qdWzsRp
5vU290ULw3sns9mbFb4ZcMXX8+NIlvibxBBsNlIVUXk2TUag6+WCN8Ebmua5053j
Y2DoJoQt7VeRiZkfHSHoUbDqgObc6BPDfROwjUpePntWdSAHFiNteEJhR/B/e3GQ
+VUx1KCGeqNi6UMgLN1QPh+3nqmko/4M9fi1NaNIXcqv7cqR64C4MA85QpfA7q4k
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6832517148375277624456527922012751172
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.northplains.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24584602337829972396140071984706659867803202194826831212797871862650053596807268133160414595732592913975589008047807201060690305111746731665256945291934701654012860200430979892492950616092584586473374851418192584783491414793615121399136951564776663824321331731460565344200581069591197294061199486310545092046899082390318660617518282004371354675737017049933599988950898314884058032280780087648508691227745328735704276713891515992108016255317504268139063615594876953473885259774255796258019170057055099851888467425170083249693425554452323867371841054477184388229156319319875565878523921712821777419415456218072688239713
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0e4a5b61bb3a5d4fa6ac13cf976b3136ebc6d6e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northplains.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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