firmapp.ncrec.gov

Issued by Amazon

About this certificate

This digital certificate with serial number 01:bc:e5:fc:3a:08:3b:ea:d2:18:d0:07:d6:4b:11:6b was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=firmapp.ncrec.gov

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:bc:e5:fc:3a:08:3b:ea:d2:18:d0:07:d6:4b:11:6b
Serial Number (int): 2310044460445738221702310319815856491
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 45:ba:5b:dd:cf:08:c7:11:c5:83:5e:74:13:e3:3f:b7:3f:bc:70:33
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 1a:c9:0f:aa:21:87:1a:39:6f:d5:1e:d4:97:7e:11:1b:cf:09:d8:7e
Fingerprint (sha256): b8:c2:79:75:ac:30:86:00:28:94:88:f8:83:08:41:78:98:d6:8d:d5:3a:18:52:0f:65:cc:cc:4f:6b:b1:f4:a7

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate firmapp.ncrec.gov

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for firmapp.ncrec.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

firmapp.ncrec.gov
www.firmapp.ncrec.gov

Other certificates including the domain name ncrec.gov

(limited to 100 certificates)
ncrec-ex-01.ncrec.state.nc.us
www.rem.ncrec.gov
ncrec.gov
www.ncrec.gov
www.ncrec.gov
www.ncrec.gov
www.ncrec.gov
www.ncrec.gov
www.test.ncrec.gov
www.test.ncrec.gov
*.ncrec.gov
bulletins.ncrec.gov
firmapp.ncrec.gov
www.ncrec.gov
bulletins.ncrec.gov
www.ncrec.gov
www.ncrec.gov
ncrec.gov
firmapp.ncrec.gov
instructor.ncrec.gov
firmapp.ncrec.gov
mail.ncrec.gov
firmapp.ncrec.gov
firmapp.ncrec.gov
www.test.ncrec.gov
bulletins.ncrec.gov
mail.ncrec.gov
bulletins.ncrec.gov
bulletins.ncrec.gov
bulletins.ncrec.gov
bulletins.ncrec.gov
ncrec-ex.ncrec.state.nc.us
instructortest.ncrec.gov
*.ncrec.state.nc.us
*.ncrec.gov
bulletins.ncrec.gov
www.rem.ncrec.gov
www.ncrec.gov
www.ncrec.gov
*.ncrec.gov
www.ncrec.gov
*.ncrec.gov
*.ncrec.gov
www.ncrec.gov
instructor.ncrec.gov
instructor.ncrec.gov
ncrec.gov
ncrec.gov
bulletins.ncrec.gov
*.ncrec.state.nc.us
awstest.ncrec.gov
rem.ncrec.gov
www.ncrec.gov
www.phones.ncrec.gov
firmapp.ncrec.gov
bulletins.ncrec.gov
bulletins.ncrec.gov
*.ncrec.gov
bulletins.ncrec.gov
bulletins.ncrec.gov
rem.ncrec.gov
bulletins.ncrec.gov
*.ogletree.com
bulletins.ncrec.gov
www.remtest.ncrec.gov
firmapp.ncrec.gov
www.test.ncrec.gov
*.ncrec.gov
www.ncrec.gov
www.ncrec.gov
mail.ncrec.gov
www.remtest.ncrec.gov
firmapptest.ncrec.gov
bulletins.ncrec.gov
*.ogletree.com
www.ncrec.gov
instructor.ncrec.gov
bulletins.ncrec.gov
bulletins.ncrec.gov
instructortest.ncrec.gov
mail.ncrec.gov
mail.ncrec.gov
www.ncrec.gov
instructor.ncrec.gov
bulletins.ncrec.gov
www.ncrec.gov
bulletins.ncrec.gov

Certificate

The complete raw certificate details for firmapp.ncrec.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbEi/fvJ1E1i3ZGMhNLz
NIs49sh2+56s4+ZyhEigWugkXOkqC650q/4FbW6gJZyYicI8+eActRNGbupP6jUk
rPFMIAnvz5ndgvPJwSUEhF8mdJcd2lC4Ah1AHDhZZOohcZXXOEaFLn5sT5rE1mj1
fmg3v3R1PzClsMLsfpPx4DHAia/0/hmlZ3QAyusmo+y1o2BEKLNnVGik8rtq0FXk
oWsOOl8Dfz4nCmIHh+z97m6VywXe5oBgw384BDFN7+CyyAdnaF94cvX1ujcdCTLy
PMdf70q9f7PqW3I32Xz9yiWWZmBktTR2QwdrJrpelEANjcimlzloz0kylwQmWZ/1
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2310044460445738221702310319815856491
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'firmapp.ncrec.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22936482555255330826130134676203755666357209075080303396930525725313107109891059662431211294112828952313796686127801651359604499737101407553112650704093637962815249464886080314105489572328597136402554388484892083700139820281840203437758811169996838860404520424293216926057219330084069729427271296150372951417863683651430824832021038866123418984155025739677719245167871243466720990354593785117485002303473331249726356779255259534974216248156877536064831786225934646684718112402404410155991817653664551904472327908210793462527572641123260389899209334628805026423236995448189036789746778628170280255865932436995552835043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							45ba5bddcf08c711c5835e7413e33fb73fbc7033
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firmapp.ncrec.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firmapp.ncrec.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007b6f6f56172a1c75d413a7d00cce4b889eed95e0733e060bfb19beb56b9f57632adbcbe3b0660ce8f58279a307c390cc0a7439387584bd4d027245d8247387e8c7dcb5073030b7fc333df48b6a4d960a9a5e853e0c20aeaeea2aab3e6a4495c0754162457e3cf2d3b487963034713892b2d8fa6d7785685b959cc42de1423870ec57ea47c84b3981ece6918af03cb8de753f2d00fe85b083d4b56c992baf5e0ba57a2a5900f36320ba0424884656a1e8700af984a0f7f148b540b4242507178bc0cd19432ece7b4e2077fddafdd26bf1c3f30e03af6669b82d64243574b01508a21866ff327a81694b86f365c4c9b51cec347ab004a36b69a50d1ed559a430d0