app2.airview0-dev.dht.live

Issued by Amazon

About this certificate

This digital certificate with serial number 04:f5:63:f8:5e:14:99:78:b4:d7:32:0b:9d:56:ab:51 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=app2.airview0-dev.dht.live

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f5:63:f8:5e:14:99:78:b4:d7:32:0b:9d:56:ab:51
Serial Number (int): 6591052349732255501843729835330284369
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: cd:f2:82:5b:47:84:d0:c8:f1:db:86:17:22:a0:cd:08:9d:6e:77:e0
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 8a:b0:4f:82:d5:23:19:17:34:bd:59:f6:c5:e0:ed:4c:7c:cf:dd:10
Fingerprint (sha256): 97:6a:f6:e7:e3:ee:1f:f0:55:0d:64:33:76:d6:89:0a:5c:69:b4:75:73:c4:52:e7:c2:23:bb:5f:a4:e4:35:9f

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate app2.airview0-dev.dht.live

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app2.airview0-dev.dht.live

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app2.airview0-dev.dht.live

Other certificates including the domain name dht.live

(limited to 100 certificates)
avw.airview0-dev.dht.live
monaco.airview0-dev.dht.live
api.aloe-dev.dht.live
nexus-new.airview0-shared.dht.live
*.mgmt.paas.dht.live
docs.showtime2-sbx.dht.live
data-platform-mock.showtime5-sbx.dht.live
bitbucket.prod.dht.live
graphql.showtime5-sbx.dht.live
external.myair-eu-dev.dht.live
peep-ws5.smart-coaching-dev.dht.live
api.hellosleep-prd.dht.live
opsmanager-amr-sbx.atlas-sbx.dht.live
scui.sleep-concierge-prd.dht.live
*.airview-icm-dev.dht.live
avw.airview0-dev.dht.live
data-platform-mock.myair-eu-dev.dht.live
dev.us-west-2.paas.dht.live
avx-mock-apac.myair-eu-dev.dht.live
honeybadgers-sbx.dht.live
avx-mock-amr.showtime5-sbx.dht.live
docs.showtime5-sbx.dht.live
avx.eta.dht.live
external.showtime2-sbx.dht.live
static.showtime5-sbx.dht.live
green-iot-avx-a.airview-messaging-qa.dht.live
dashboard-ws2.smart-coaching-dev.dht.live
monaco.airview0-dev.dht.live
support-api.myair-eu-dev.dht.live
privacy.hellosleep-dev.dht.live
avx-mock-amr.showtime5-sbx.dht.live
*.mgmt.paas.dht.live
external.showtime5-sbx.dht.live
monaco.eta.dht.live
support.showtime5-sbx.dht.live
support.showtime5-sbx.dht.live
opsmanager-amr-stg.atlas-stg.dht.live
docs.showtime5-sbx.dht.live
opsmanager-amr-stg.atlas-stg.dht.live
privacy.hellosleep-dev.dht.live
static.myair-eu-dev.dht.live
api.hellosleep-dev.dht.live
opsmanager-amr-stg.atlas-stg.dht.live
opsmanager-amr-stg.atlas-stg.dht.live
jenkins.rcsydneypdsoftware-prd.dht.live
opsmanager-amr-stg.atlas-stg.dht.live
api.showtime5-sbx.dht.live
privacy.showtime3-sbx.dht.live
sc-2036-survey-api.honeybadgers-sbx.dht.live
amsuat-www.resmed.com
sc-2036-mobilequestionsui.honeybadgers-sbx.dht.live
nightowl.showtime13-dev.dht.live
avw.airview0-dev.dht.live
graphql.showtime5-sbx.dht.live
api.showtime1-sbx.dht.live
support.myair-eu-dev.dht.live
monaco.airview0-dev.dht.live
dashboard-ws2.smart-coaching-dev.dht.live
peep.smart-coaching-dev.dht.live
*.prod.dht.live
support-api.showtime5-sbx.dht.live
data-platform-mock.showtime5-sbx.dht.live
api.hellosleep-stg.dht.live
bitbucket.prod.dht.live
api.showtime1-sbx.dht.live
docs.dht.live
avx-mock-eu.showtime5-sbx.dht.live
api.showtime5-sbx.dht.live
honeybadgers-sbx.dht.live
support.myair-eu-dev.dht.live
avx-mock-apac.showtime5-sbx.dht.live
avw.eta.dht.live
static.showtime5-sbx.dht.live
api.showtime1-sbx.dht.live
data-platform-mock.showtime5-sbx.dht.live
myapi.airview-kona-dev.dht.live
airview-xint-stg.dht.live
monaco.airview0-dev.dht.live
api.showtime1-sbx.dht.live
opsmanager-amr-sbx.atlas-sbx.dht.live
opsmanager-amr-dev.atlas-sbx.dht.live
amsuat-www.resmed.com
*.pub.vamshi-test.devx-eks-dev.dht.live
*.priv.vamshi-test.devx-eks-dev.dht.live
dev.us-west-2.paas.dht.live
opsmanager-amr-sbx.atlas-sbx.dht.live
*.mgmt.paas.dht.live
api.showtime1-sbx.dht.live
api.showtime5-sbx.dht.live
avx.airview0-dev.dht.live
opsmanager-amr-stg.atlas-stg.dht.live
api.showtime-eu-1-sbx.dht.live
opsmanager-amr-stg.atlas-stg.dht.live
ros2-qa.dht.live
avx-mock-amr.showtime5-sbx.dht.live
static.showtime2-sbx.dht.live
support.showtime2-sbx.dht.live
avx-mock-apac.showtime5-sbx.dht.live
ecs-service.playground-a-sbx.dht.live
avw.eta.dht.live

Certificate

The complete raw certificate details for app2.airview0-dev.dht.live in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1zHOlKWO17ZCyBFKbkC
/uMv38juGy2xLdH7Tt4o10GMvPF6+UtacCJ5dEPwSPg7sjpiDvd7Upp8h0/CB7Ib
dyvBgfS17j1yZQ6ANhUVF9JbwLSG/RcAs/JEFrp+X5lbtzyMdS+kb1X+5wrw9ubn
TxliWzNxTqLbKRs6389ERrOGEOyKhHffTIPwxpYKS5+vhLd/x913WdY6ZEslYtdc
X4n9adlD9A1fAxfSZ+khT2c8irUpScuxkrM7hI7qDe6YLp8tm4Lv28CZ+mo6op2L
5dy6/ZFKMw9qZ5lzn7bIrtlFGAuonzn1bYSWR8zs1A9PrqN5j3ABQr7T0Z674Jev
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6591052349732255501843729835330284369
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app2.airview0-dev.dht.live'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22642407241103405912538252841124663161928167749179566059353805955745059255105597264635245512590247084122098488808609210156319911587872337377521321733396752123174006437615336127068939223401965914614349484679246528556694601657977202845284030340832732336278915568839007686507145974791119728027308854150162464057003860989182147882684494781492921047817230686430627235378235294074518478075086578725672737157083928472390965548216887418595782373664413460847928675972069139225601370211887357796973271098852686863622743020290204782807417992450252630374635701374670056912918899786781751100649440846671263427490914141866437357343
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cdf2825b4784d0c8f1db861722a0cd089d6e77e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app2.airview0-dev.dht.live'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0042b61103c4c9ca32f9ae4515458877c7ae5424d777374688f24653fed8638bacd2f28cd1e2465ee8f31622b87b65871ca48dd681364eb168f2311310e618f1c6c273432ff74b230a9c7c2342cbaac86774b14006b7fd4a0a1390a8f986257486c330067a2602a41cf73b142942274a9a1bdace682e79e979cd305032f8d59c72cc67d6ec203d22b8e3780694a49deb713110d86c58f9ce18a22f976bbeb95a09d35f9a86d6c331d539f4bca362268407b7a141b12f8aca5530c71afe45de30ec63195d5d997fee5d9da010ce108c0a7d7bfbc0e327780ce6da0fb8455aa9bd10934ca06864c0caa94a210d197299a456885b07c50ca9204296f76b31a1f1cc6d