content.waterloo.io

Issued by Amazon

About this certificate

This digital certificate with serial number 0a:3c:84:cc:7a:e6:8c:c6:b7:9f:84:f2:f7:fd:0f:2c was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=content.waterloo.io

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:3c:84:cc:7a:e6:8c:c6:b7:9f:84:f2:f7:fd:0f:2c
Serial Number (int): 13606511248009972250880562351434436396
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 05:de:9a:02:c6:1e:be:c6:79:e1:7e:9b:87:14:05:7d:90:66:30:7b
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): c2:d6:b9:cb:fc:4d:e7:6f:57:ca:d6:1f:da:49:dd:77:25:95:59:b6
Fingerprint (sha256): a8:c2:16:0d:be:28:c3:f3:1e:48:27:04:24:fe:16:12:e0:96:51:8b:ae:d4:bb:eb:ec:44:0a:e8:0e:28:3b:6f

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate content.waterloo.io

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for content.waterloo.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

content.waterloo.io

Other certificates including the domain name waterloo.io

(limited to 100 certificates)
dev.waterloo.io
app.waterloo.io
content.waterloo.io
app.waterloo.io
app.waterloo.io
demo.waterloo.io
app.waterloo.io
*.waterloo.io
waterloo.io
app.waterloo.io
demo.waterloo.io
waterloo.io
app.waterloo.io
waterloo.io
waterloo.io
demo.waterloo.io
app.waterloo.io
demo.waterloo.io
waterloo.io
waterloo.io
content.waterloo.io
waterloo.io
demo.waterloo.io
app.waterloo.io
waterloo.io
sni.cloudflaressl.com
demo.waterloo.io
sni.cloudflaressl.com
app.waterloo.io
demo.waterloo.io
dev.waterloo.io
dev.waterloo.io
app.waterloo.io
*.waterloo.io
demo.waterloo.io
demo.waterloo.io
demo.waterloo.io
demo.waterloo.io
start.waterloo.io
app.waterloo.io
dev.waterloo.io
demo.waterloo.io
demo.waterloo.io
waterloo.io
waterloo.io
demo.waterloo.io
app.waterloo.io
app.waterloo.io
*.waterloo.io
app.waterloo.io
demo.waterloo.io
app.waterloo.io
waterloo.io
demo.waterloo.io
content.waterloo.io
dev.waterloo.io
waterloo.io
dev.waterloo.io
demo.waterloo.io
content.waterloo.io
dev.waterloo.io
demo.waterloo.io
demo.waterloo.io
demo.waterloo.io
app.waterloo.io
app.waterloo.io
waterloo.io
app.waterloo.io
waterloo.io
app.waterloo.io
waterloo.io
content.waterloo.io
app.waterloo.io
app.waterloo.io
demo.waterloo.io
demo.waterloo.io
demo.waterloo.io
demo.waterloo.io
dev.waterloo.io
waterloo.io
demo.waterloo.io
app.waterloo.io
demo.waterloo.io
app.waterloo.io
app.waterloo.io
demo.waterloo.io
app.waterloo.io
app.waterloo.io
dev.waterloo.io
app.waterloo.io
help.waterloo.io
app.waterloo.io
sni.cloudflaressl.com
demo.waterloo.io
waterloo.io
waterloo.io
waterloo.io

Certificate

The complete raw certificate details for content.waterloo.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2MOoYSnvcydnIGJ4zJLM
v8Zn24mcx6T/kJ3SZSIOb8olYMWSoz3/+It18FUvlbx5zDukRzSjRkHnCDBP2NVy
OFuSr/zxeIf23O6v0edGtPVL1ohImIF0w7h3V+NCiMcn57MzpZ41AhLlooEZGSd/
+dVyfjL4/O0iWpsF34ebcRtWFqCyQrlnuY6LMdmGvw0y13IzUeNTkOuAwr8FQiH7
Xu2YGGMy516zEoQt8FiGRou55/FT3pa3NEMRX7T/rgbYQkH01R/4Js4H1OMbMTft
NxjZLDxITIxgnWKysqweCfdsj0ibgKEe/zPHtU1DX3rhfXNzOI91y0cWyYXdCcYz
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13606511248009972250880562351434436396
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'content.waterloo.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27363956296563932022673418201455521065149547627042927763330276688226022078796166861571456754028523009242104325232217539062228197990184768053422586422047246343206746096550834608664552198752663072339797483980159681378972563779727026977162166863508047917211942265163148442107618070257056662831132324361806806062919044879236378820788610755383366131777028022895675227808562752731904095000162127390611507852766660586343443792241258667646997342962610170146486324948884796156148775009032065660410539177295450380975086654399952548838097329247127680756609590519812473476083243527840495929017778036566155626280656598748128228109
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							05de9a02c61ebec679e17e9b8714057d9066307b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.waterloo.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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