esglivetest.atocrsp.org

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:65:00:f4:c3:ac:8f:b1:0a:ee:d4:75:4e:a3:8d:92 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=esglivetest.atocrsp.org

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:65:00:f4:c3:ac:8f:b1:0a:ee:d4:75:4e:a3:8d:92
Serial Number (int): 19133633315930684012037808408269917586
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f4:71:32:d4:7f:25:50:b0:6c:6c:1a:5c:4f:9d:ea:e2:96:eb:c4:b9
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 63:e5:04:b1:8d:c7:4a:d8:de:56:b4:b0:dd:31:c3:11:06:b5:b5:e5
Fingerprint (sha256): 7d:3c:2b:ba:37:89:43:49:c5:8b:d2:b2:f4:54:73:dd:c1:c3:6c:f7:8e:a6:1c:a6:73:09:54:88:53:cb:15:6b

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate esglivetest.atocrsp.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for esglivetest.atocrsp.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

esglivetest.atocrsp.org

Other certificates including the domain name atocrsp.org

(limited to 100 certificates)
lsmtest.atocrsp.org
esg.atocrsp.org
lsmtest.atocrsp.org
webdev.portal-env.atocrsp.org
opendj.uat01.portal-env.atocrsp.org
apioat.atocrsp.org
opendj.preprod01.portal-env.atocrsp.org
sso.atocrsp.org
ssouat.portal-env.atocrsp.org
elb-api.prod01.d4t-env.atocrsp.org
webval.portal-env.atocrsp.org
tmsapi.atocrsp.org
portalload.atocrsp.org
ssosystst.portal-env.atocrsp.org
support.test01.commonservices-env.atocrsp.org
tmsapiload.atocrsp.org
esgsystst.portal-env.atocrsp.org
webpreprod.portal-env.atocrsp.org
tms-flow-env2.atocrsp.org
lsmtest.atocrsp.org
ssovalpreprod.portal-env.atocrsp.org
web.atocrsp.org
portal.atocrsp.org
esguat.portal-env.atocrsp.org
ssoval.portal-env.atocrsp.org
ssolivetest.atocrsp.org
tmsapisecuremo3.atocrsp.org
ssovaldev.portal-env.atocrsp.org
ssouat.portal-env.atocrsp.org
support.test01.commonservices-env.atocrsp.org
esglivetest.atocrsp.org
tms-api-env2.atocrsp.org
ssopreprod.portal-env.atocrsp.org
weblivetest.atocrsp.org
ssouat.portal-env.atocrsp.org
lsm.atocrsp.org
esguat.portal-env.atocrsp.org
ssopreprod.portal-env.atocrsp.org
portal.atocrsp.org
ssosystst.portal-env.atocrsp.org
ssouat.portal-env.atocrsp.org
tmsapisecuremo3.atocrsp.org
tms-api-env2.atocrsp.org
*.atocrsp.org
mecportal.atocrsp.org
ssovaluat.portal-env.atocrsp.org
lsm.atocrsp.org
portal.atocrsp.org
tmsapi.atocrsp.org
*.atocrsp.org
webuat.portal-env.atocrsp.org
tmsapimo3-testing.sand.tms-env.atocrsp.org
portalload.atocrsp.org
opendj.dev01.portal-env.atocrsp.org
portal.atocrsp.org
esg.atocrsp.org
web.atocrsp.org
tmsapimo3-testing.atocrsp.org
webpreprod.portal-env.atocrsp.org
opendj.lvtst01.portal-env.atocrsp.org
webpreprod.portal-env.atocrsp.org
portalload.atocrsp.org
ssodev.portal-env.atocrsp.org
esgpreprod.portal-env.atocrsp.org
webvalpreprod.portal-env.atocrsp.org
esgsystst.portal-env.atocrsp.org
portal.mo3.iam-env.atocrsp.org
portalmo3.atocrsp.org
tmsapisand.atocrsp.org
apioat.atocrsp.org
tmsapi.atocrsp.org
weblivetest.atocrsp.org
opendj.prod01.portal-env.atocrsp.org
websystst.portal-env.atocrsp.org
portalload.atocrsp.org
opendj.uat01.portal-env.atocrsp.org
tmsapisand.atocrsp.org
lsmtest.atocrsp.org
web.prod01.d4t-env.atocrsp.org
esglivetest.atocrsp.org
webvalpreprod.portal-env.atocrsp.org
webpreprod.portal-env.atocrsp.org
webvalsystst.portal-env.atocrsp.org
webuat.portal-env.atocrsp.org
webvaldev.portal-env.atocrsp.org
sso.atocrsp.org
web.atocrsp.org
support.prod01.commonservices-env.atocrsp.org
lsm.atocrsp.org
tmsapi.sand.tms-env.atocrsp.org
esguat.portal-env.atocrsp.org
tmsapi.load.tms-env.atocrsp.org
portalload.atocrsp.org
esgsystst.portal-env.atocrsp.org
opendj.lvtst01.portal-env.atocrsp.org
ssovalsystst.portal-env.atocrsp.org
ssopreprod.portal-env.atocrsp.org
ssodev.portal-env.atocrsp.org
*.atocrsp.org
opendj.prod01.portal-env.atocrsp.org

Certificate

The complete raw certificate details for esglivetest.atocrsp.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwR5tDOWEAYbUD60rA2ZZ
dVoKAGk75+I5ifnEIOnqRG4elOe/D71pjthSu3Jy+VZWy8E/Hf8aoWO3zSLd2OjB
YX7Un3rcn9utmnDcdpeLQSVcRpzU8lQZPYa6uko8fTMwdc78ZOStK9K794k08vq0
2cmKZSfLO72UTFAxfbp0xFgjpObhAW2LQ5JT8hWEy1XLznL0tIl/oDoegVaPUFKL
SxvZvEoz1qU3ZXtIZVA2Ln6PzNljxbepkqm1HyK7wuz1M0VNbr8Fcr8jBFFXOWUN
Z8fpB3aGUmfJ2yPIDvpf8ZuZB5cOPuufp+ig2p/wPx1wWt/wgJg19lmy1hLH9Wjv
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19133633315930684012037808408269917586
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-29 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'esglivetest.atocrsp.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24378996467410865610229389537333709290300664411931203940842054160706938359933848606910147318635684060310572880728741294354901254688792083048520665576101532911140742565301559090142675941771649218721448214120339761791835358173227925124058046486503860185327806194549657984493500912305983989439491947307937816559974441744904398690070825730749464286168850704329145412747504591246957241191985823828775992287955596861747083921194250884898431053658946848619241935528015785331177905104776252835207899731912976138356863390646519932150816365716600528684161049155444080102972903798907591013266393840099808066172694061639338094577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f47132d47f2550b06c6c1a5c4f9deae296ebc4b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esglivetest.atocrsp.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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