*.hayden-homes.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0a:3c:71:d5:b9:98:5f:a4:87:4a:52:76:e5:f7:92:cf was issued on by Amazon.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.hayden-homes.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:3c:71:d5:b9:98:5f:a4:87:4a:52:76:e5:f7:92:cf
Serial Number (int): 13606126614684011765172570914129679055
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 5d:ed:be:31:74:58:6a:61:eb:73:89:81:39:94:8f:7a:f2:fa:32:99
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): d4:65:2a:fd:dd:74:37:77:f6:2e:c0:84:9e:6a:5b:51:75:6d:d8:ec
Fingerprint (sha256): 9c:78:17:7e:4c:bd:01:b8:63:ac:e7:bb:bc:d6:bb:37:80:0d:b2:1c:93:4d:7d:80:90:46:0b:bd:9c:be:79:66

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate *.hayden-homes.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.hayden-homes.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.hayden-homes.com
*.stg.hayden-homes.com
hayden-homes.com
aws.hayden-homes.com
*.aws.hayden-homes.com
*.prd.hayden-homes.com
or.hayden-homes.com
*.dev.hayden-homes.com
*.or.hayden-homes.com

Other certificates including the domain name hayden-homes.com

(limited to 100 certificates)
hayden-homes.com
kova.hayden-homes.com
kova.hayden-homes.com
gateway.hayden-homes.com
gateway.rdm.hayden-homes.com
gateway.rdm.hayden-homes.com
hayden-homes.com
*.hayden-homes.com
helpdesk.aeainvestors.com
eedesk.hayden-homes.com
hayden-homes.com
*.hayden-homes.com
hayden-homes.com
*.hayden-homes.com
hayden-homes.com
gateway.va.hayden-homes.com
onbase.hayden-homes.com
hayden-homes.com
servicedesk.intranerve.com
eedesk.hayden-homes.com
hayden-homes.com
eedesk.hayden-homes.com
gateway.va.hayden-homes.com
*.hayden-homes.com
hayden-homes.com
eedesk.hayden-homes.com
hayden-homes.com
hayden-homes.com
kova.hayden-homes.com
hayden-homes.com
*.hayden-homes.com
*.hayden-homes.com
*.hayden-homes.com
hayden-homes.com
hayden-homes.com
gateway.rdm.hayden-homes.com
*.hayden-homes.com
gateway.hayden-homes.com
hayden-homes.com
*.hayden-homes.com
*.hayden-homes.com
helpdesk.aeainvestors.com
gateway.hayden-homes.com
*.aws.hayden-homes.com
gateway.rdm.hayden-homes.com
hayden-homes.com
hayden-homes.com
kova.hayden-homes.com
imoit.ciraconnect.com
gateway.va.hayden-homes.com
hayden-homes.com
helpdesk.aeainvestors.com
*.hayden-homes.com
*.hayden-homes.com
helpdesk.aeainvestors.com
*.hayden-homes.com
hayden-homes.com
*.hayden-homes.com
hayden-homes.com
gateway.va.hayden-homes.com
kova.hayden-homes.com
hayden-homes.com

Certificate

The complete raw certificate details for *.hayden-homes.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/vg3JTjaTASveKD8Fzh
vYfvTGqNG8R37h6mXcS3odVCbCwiMDZOVsuXCGcOs0NHn5wFIftMADrgj3MlFBAx
Au9ZkftCobIXYq6v0PzN/1y98PURxQuGdB4Aty4Ui+QfKpIOWvhbEOP+alZqlFCN
hppac16olPO2AngF7K8oku5vq8Qp8uHpFw27zaVe5T+MuTzH2+vO9pxerTwXrPaa
kJg+AjdO2xWGtSRI7lXWFgU6BEKxkxyxZqIn8kzMUmUjQuqmaK6vOwd2A/AKRNpo
7ahCWQ0EMrYbjmdgyAJv8HOJjF/bLZJ0i01CeSD7dt13kfT4Hugom7fRQVLvx6Y5
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13606126614684011765172570914129679055
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.hayden-homes.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20701049560862971399149578553787866459408212753180815347693702059341594554503106133916008130680356044154511329183418471092540174274653819417812616608908706870907876239836588238174112351008697430135915146165697480549077681415353143078411424333851117184127572339079869992550587513733193577151070889635268914754661389149682030003739340444750046920964218158501362577419935861181831195114896466366606494212680542184966810552911425567327309568160368572809821984806813125053891946484036265149635296683286599751187619979348188580629313646120263902234584846115082122728600832735866436748436316104114698121968693063197298932073
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5dedbe3174586a61eb73898139948f7af2fa3299
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (203 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hayden-homes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stg.hayden-homes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hayden-homes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aws.hayden-homes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aws.hayden-homes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prd.hayden-homes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'or.hayden-homes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.hayden-homes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.or.hayden-homes.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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