hoa.mmrem.com
Issued by Amazon
About this certificate
This digital certificate with serial number 04:ab:c6:21:95:b8:35:c3:0f:96:a3:e5:74:db:85:d1 was issued on by Amazon.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=hoa.mmrem.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:ab:c6:21:95:b8:35:c3:0f:96:a3:e5:74:db:85:d1Serial Number (int): 6208813323915967715412484091799111121
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 23:34:f9:ef:9a:21:b3:2c:28:1f:81:e5:c5:66:da:9e:df:9f:11:66
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 5a:4a:3d:45:4f:7d:d8:2a:bb:31:4c:b3:74:2f:41:46:e9:33:d8:67
Fingerprint (sha256): 80:97:f1:e3:d6:d5:28:9e:78:4e:72:fe:f4:e5:42:d8:a5:9f:d0:dd:a3:d7:02:1e:91:4f:dc:8f:71:67:6d:f6
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate hoa.mmrem.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for hoa.mmrem.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
hoa.mmrem.com
hoa.chronossolutions.com
hoaprod.mmrem.com
hoa.chronossolutions.com
hoaprod.mmrem.com
Other certificates including the domain name mmrem.com
(limited to 100 certificates)
tfs.mmrem.com
tfs.mmrem.com
*.mmrem.com
mgmt.mmrem.com
jira.mmrem.com
hoa.mmrem.com
dashboards.mmrem.com
*.mmrem.com
hoa.mmrem.com
jira.mmrem.com
hoa.mmrem.com
jira.mmrem.com
*.mmrem.com
hoa.mmrem.com
hoa.mmrem.com
hoa.mmrem.com
hoastaging.mmrem.com
*.mmrem.com
jira.mmrem.com
tfs.mmrem.com
hoa.mmrem.com
hoa.mmrem.com
jira.mmrem.com
hoadev.mmrem.com
hoastaging.mmrem.com
vpn.mmrem.com
jira.mmrem.com
hoadev.mmrem.com
www.mmrem.com
tfs.mmrem.com
*.mmrem.com
mgmt.mmrem.com
jira.mmrem.com
hoa.mmrem.com
dashboards.mmrem.com
*.mmrem.com
hoa.mmrem.com
jira.mmrem.com
hoa.mmrem.com
jira.mmrem.com
*.mmrem.com
hoa.mmrem.com
hoa.mmrem.com
hoa.mmrem.com
hoastaging.mmrem.com
*.mmrem.com
jira.mmrem.com
tfs.mmrem.com
hoa.mmrem.com
hoa.mmrem.com
jira.mmrem.com
hoadev.mmrem.com
hoastaging.mmrem.com
vpn.mmrem.com
jira.mmrem.com
hoadev.mmrem.com
www.mmrem.com
Certificate
The complete raw certificate details for hoa.mmrem.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFkTCCBHmgAwIBAgIQBKvGIZW4NcMPlqPldNuF0TANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODEwMjMwMDAwMDBaFw0xOTExMjMx MjAwMDBaMBgxFjAUBgNVBAMTDWhvYS5tbXJlbS5jb20wggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQCoPsWBmE5ayLrZ9TYAcyqz/4vJ2St5IjlsFW2LFZSI 6h8Ub+ejyaWZcORaFbx91Pd8GfFIfAxGpSwnvYO6Us8KsXMbZhOQK0KTCyz5hNYX dHiuV5cihuNLhqKOIysbJsrRmyJMfVTu5fvBKJ/22p7cI/R1TBX9CrzHJUG4sj3e AbWcAR8rUlemJAP+sWItPmyoLDaAgKgOQ3aSx72JCcao1IrX3GNK2A62kC6F4E/s uqd5lpH4byqWydGOB4d5RytJm4smx85OChY13WrcIEV0XhAI7hPlI9v+9Xz057aq ByJ7SLt98FCJNj2kO9Zezq/iRM8BWMa4/POQwbec9WO1AgMBAAGjggKnMIICozAf BgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQUIzT575oh sywoH4HlxWbant+fEWYwRQYDVR0RBD4wPIINaG9hLm1tcmVtLmNvbYIYaG9hLmNo cm9ub3Nzb2x1dGlvbnMuY29tghFob2Fwcm9kLm1tcmVtLmNvbTAOBgNVHQ8BAf8E BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIw MKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNy bDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwBAgEwdQYIKwYBBQUHAQEE aTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5j b20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29t L3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDx AHYApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFmouDm4AAABAMA RzBFAiAejQU3ucw97uQrkw8lj7dELZ+0Z06FZNmNp/Vqb0ru3gIhAOyYpmdq7O1x 5yIKuywARkXEsrS42x4EhkMsTPC3b9sVAHcAh3W/51l8+IxDmV+9827/Vo1HVjb/ SrVgwbTq/16ggw8AAAFmouDn6AAABAMASDBGAiEA5dzypGbM2tU1cw6AnK1B2tJJ YpBwR82QkwCcP97wqlsCIQC5c3ZUY2t0QRJxxdUGzgW0//aOE6nsO3pI4/Co4tl0 TjANBgkqhkiG9w0BAQsFAAOCAQEAoL8iZA4AsaUNgXk/UZSygTSf1TUOj1taY/71 vsM1/2dOXZqB5n8lAvxQzVjkY3PB9xb2oDI/LSVyV2NR/x4FvpW06+Cad68i+wlR goXHtC9MnieLugODuaYEjbov81l/0TMBb5Itzy4E3pcvS7PQV451pGSrthUofo2t 9EE6/jLMLgqvcKLzGEEG+ci4kNAEHiGhFYuTsSJdTdyFn4M0FaGF8VmzW4Mr863Q OVnxtcNw3m57Qhb5o8Fr9yIovA9h1pYTGr19/catzaN2IG9HW23tmXB3+3jHQ88r iCrIWo/WABhsSIYHGvoKbGM39g0yK3fRdERQNGHu0UqFXmn2tw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD7FgZhOWsi62fU2AHMq s/+LydkreSI5bBVtixWUiOofFG/no8mlmXDkWhW8fdT3fBnxSHwMRqUsJ72DulLP CrFzG2YTkCtCkwss+YTWF3R4rleXIobjS4aijiMrGybK0ZsiTH1U7uX7wSif9tqe 3CP0dUwV/Qq8xyVBuLI93gG1nAEfK1JXpiQD/rFiLT5sqCw2gICoDkN2kse9iQnG qNSK19xjStgOtpAuheBP7LqneZaR+G8qlsnRjgeHeUcrSZuLJsfOTgoWNd1q3CBF dF4QCO4T5SPb/vV89Oe2qgcie0i7ffBQiTY9pDvWXs6v4kTPAVjGuPzzkMG3nPVj tQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6208813323915967715412484091799111121 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-23 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-23 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hoa.mmrem.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21238989018907056700089570695072470503701425866516702994820891804648250117957711534156561847206376088023295390383626081579108622302284237503243127195250969681940643329356482420590364309659934992510591243422950236143933215645819126337683742635305211817100338770204770409148276210599270305435227378282734247099787376817496678174897815578483725955025459075244812474224847150781636276581405495025300243966166329818107126296308995064298857343742018155944285685646119856688164178165511058596134688711545993633672780233444988707929499614634951764283486819209013877906427973092999296108363564146773324007792788100831507735477 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2334f9ef9a21b32c281f81e5c566da9edf9f1166 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoa.mmrem.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoa.chronossolutions.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hoaprod.mmrem.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000166a2e0e6e0000004030047304502201e8d0537b9cc3deee42b930f258fb7442d9fb4674e8564d98da7f56a6f4aeede022100ec98a6676aeced71e7220abb2c004645c4b2b4b8db1e0486432c4cf0b76fdb150077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000166a2e0e7e80000040300483046022100e5dcf2a466ccdad535730e809cad41dad24962907047cd9093009c3fdef0aa5b022100b9737654636b74411271c5d506ce05b4fff68e13a9ec3b7a48e3f0a8e2d9744e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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