*.platdev.atl-paas.net

Issued by Amazon

About this certificate

This digital certificate with serial number 09:d4:ac:fa:67:4a:fd:0a:00:10:37:29:a2:01:81:a1 was issued on by Amazon.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.platdev.atl-paas.net

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:d4:ac:fa:67:4a:fd:0a:00:10:37:29:a2:01:81:a1
Serial Number (int): 13067327309533694432222241724020392353
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 63:02:42:b0:e0:fc:43:ae:32:a9:ba:d7:17:99:42:fe:a1:4d:70:8e
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): c0:8a:70:75:8d:4b:e1:cb:c1:c3:46:08:df:8a:4a:9e:e5:94:97:68
Fingerprint (sha256): 78:7c:ef:eb:76:83:d3:dd:93:77:12:6c:23:80:2f:85:d8:e6:37:17:67:74:1c:94:0d:d6:1b:7a:66:bb:0a:67

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate *.platdev.atl-paas.net

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.platdev.atl-paas.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.platdev.atl-paas.net
*.ap-southeast-2.platdev.paas-inf.net
*.ap-southeast-2.sp.platdev.atl-paas.net
*.sp.platdev.atl-paas.net
*.sgw.platdev.atl-paas.net
*.platdev.paas-inf.net
*.platdev.public.atl-paas.net
*.ap-southeast-2.platdev.atl-paas.net
*.ap-southeast-2.platdev.public.atl-paas.net

Other certificates including the domain name atl-paas.net

(limited to 100 certificates)
*.staging.atlassian.io
*.atlassian.io
*.staging.atl-paas.net
*.staging.atl-paas.net
ingress-int-01.paas-stgwest2.us-west-2.kitt-inf.net
*.prod.atl-paas.net
*.staging.atl-paas.net
*.atl-paas.net
*.frontend.public.atl-paas.net
*.dev.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.staging.atlassian.io
*.staging.atl-paas.net
*.staging.atlassian.io
*.frontend.public.atl-paas.net
*.atl-paas.net
*.staging.atl-paas.net
*.staging.atlassian.io
*.dev.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
ingress-internal-01.paas-pdevapse2.ap-southeast-2.kitt-inf.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.dev.atl-paas.net
ingress-internal-01.paas-devwest2.us-west-2.kitt-inf.net
*.atl-paas.net
ingress-internal-01.paas-stgwest2.us-west-2.kitt-inf.net
*.dev.atl-paas.net
*.staging.atlassian.io
*.staging.atl-paas.net
*.atlassian.io
*.atl-paas.net
*.frontend.public.atl-paas.net
*.dev.atl-paas.net
*.staging.atl-paas.net
*.dev.atl-paas.net
*.platdev.atl-paas.net
*.dev.atl-paas.net
*.platdev.atl-paas.net
*.platdev.atl-paas.net
*.staging.atlassian.io
*.frontend.public.atl-paas.net
*.staging.atl-paas.net
ingress-cust-01.paas-ddev.ap-southeast-2.kitt-inf.net
*.staging.atl-paas.net
*.atl-paas.net
*.atl-paas.net
*.staging.atl-paas.net
*.staging.atl-paas.net
*.staging.atl-paas.net
*.platdev.atl-paas.net
*.atlassian.io
*.atl-paas.net
ingress-internal-01.ap-southeast-2.paas-playground3.kitt-inf.net
*.staging.atl-paas.net
ingress-internal-01.us-west-2.paas-stg.kitt-inf.net
*.staging.atlassian.io
*.staging.atlassian.io
*.atl-paas.net
*.atl-paas.net
*.atlassian.io
*.platdev.atl-paas.net
*.staging.atlassian.io
*.atl-paas.net
*.staging.atl-paas.net
*.staging.atlassian.io
*.alvintest.atl-paas.net
*.platdev.atl-paas.net
ingress-internal-01.paas-prodwest2.us-west-2.kitt-inf.net
*.staging.atlassian.io
*.dev.atl-paas.net
*.staging.atl-paas.net
*.staging.atl-paas.net
*.atl-paas.net
*.dev.atlassian.io
*.staging.atl-paas.net
*.frontend.public.atl-paas.net
*.atl-paas.net
*.staging.atl-paas.net
*.atl-paas.net
*.dev.atl-paas.net
*.staging.atlassian.io
ingress-internal-01.paas-ddev.ap-southeast-2.kitt-inf.net
*.staging.atl-paas.net
*.atlassian.io
*.atl-paas.net
*.staging.atl-paas.net
*.platdev.atl-paas.net
*.atl-paas.net
*.dev.atlassian.io
*.staging.atl-paas.net
ingress-internal-01.paas-prodeast.us-east-1.kitt-inf.net
*.staging.atlassian.io
*.atlassian.io

Certificate

The complete raw certificate details for *.platdev.atl-paas.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9mAj18qqL5IvdQin/sI
a5skF1SVCbmZs82zN46arKot+rxpN+mECzkclAf9zr0AUnIaTyWlq+ls1WZmG5VZ
OaZwlke0z9eQTkQsNLJ5z7ClMTyfJfTunGms82GywSf+UJcLgTdht1X73cMTeyfX
5Dm5Aw8cTGHzEI3EQDW1IqWfsTWjEd1yyUJjHokgYM6hD+GESoYQFoanHOdt+IXo
/YSeyYfyreuwLI1HZfQGEitXWcycJprSD8HVkVbZ9Z8RRRrPW3936bpoY6xyxKsa
26hXnmYrpU7HBwgsxXvUvJTc66+fxz6ExzzIAkMOx5u0Nsk80+42Q7L8Hd7MUjBr
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13067327309533694432222241724020392353
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.platdev.atl-paas.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21694004475364121960000320700171838432424997208335227546763951756308332808011033483129256188830426027056391767889725907585271068021489449642971585956695274103864177871245423335163060222048524063038490567458659415274921704009902326681087687044879701084207682196849482725877535258116034938506001260814250154286417037455525469667302311201506353041438157805417102314552619110396124628410160384164121134590283483014730523107564924282573255868474208117437512712630093951071202446867383798668863607555977330944850253234807767323350161081207254271585967301790378284216234127557193007186695459502077957443634636058798161161111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							630242b0e0fc43ae32a9bad7179942fea14d708e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (304 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.platdev.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ap-southeast-2.platdev.paas-inf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ap-southeast-2.sp.platdev.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sp.platdev.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sgw.platdev.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.platdev.paas-inf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.platdev.public.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ap-southeast-2.platdev.atl-paas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ap-southeast-2.platdev.public.atl-paas.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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