appstore.uva.tst.icts.education

Issued by Amazon

About this certificate

This digital certificate with serial number 02:69:12:54:3a:44:55:38:1d:10:d8:c3:a1:7a:02:0f was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=appstore.uva.tst.icts.education

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:69:12:54:3a:44:55:38:1d:10:d8:c3:a1:7a:02:0f
Serial Number (int): 3204018918287245536710238122305782287
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 7d:dc:76:3c:d4:09:f9:f3:75:25:11:24:f5:57:ef:aa:9b:b4:28:1f
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 1b:32:3d:f8:4e:14:77:a0:c5:5e:e8:41:aa:3b:88:7f:3b:2c:3e:80
Fingerprint (sha256): be:ea:cb:c1:d5:96:df:b0:b5:96:ae:ad:7f:34:5f:ce:1a:f8:a8:8c:de:50:35:2b:51:7b:71:1e:3a:6e:00:a9

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate appstore.uva.tst.icts.education

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for appstore.uva.tst.icts.education

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

appstore.uva.tst.icts.education
appstore.tst.uva.cloud

Other certificates including the domain name icts.education

(limited to 100 certificates)
redirect-auc-canvas.uva.acc.icts.education
mobiusportal.uva.dev.icts.education
pg-api.hva.tst.icts.education
redirect-auc-canvas.uva.acc.icts.education
praat-web-api.uva.prd.icts.education
fyv.uva.dev.icts.education
load-balancer.tst.adm.icts.education
fyv.uva.prd.icts.education
sonarqube.dev.icts.education
groupbatchenrollment.uva.tst.icts.education
appstore.uva.dev.icts.education
groupbatchenrollment.uva.tst.icts.education
pnid-api.uva.tst.icts.education
gartnerportal.uva.prd.icts.education
id.hva.prd.icts.education
admin.uva.dev.icts.education
redirect-auc-canvas.uva.acc.icts.education
groupbatchenrollment.uva.tst.icts.education
groupbatchenrollment.uva.dev.icts.education
canvasmonitoring.uva.prd.icts.education
pg-api.hva.tst.icts.education
tf-example-spa.hva.tst.icts.education
canvasmonitoring.uva.prd.icts.education
kassa.hva.dev.icts.education
tf-load-balancer.icts.education
gartnerportal3.uva.dev.icts.education
admin.uva.dev.icts.education
groupbatchenrollment.uva.tst.icts.education
groupbatchenrollment.uva.tst.icts.education
canvasmonitoring.uva.prd.icts.education
canvasmonitoring.uva.prd.icts.education
nexus.dev.icts.education
appstore.uva.tst.icts.education
example-ebs.tst.uva.icts.education
paper-extractor.uva.dev.icts.education
lunchlearn-api.uva.tst.icts.education
pnid-api.hva.tst.icts.education
kassa.uva.dev.icts.education
loadbalancer.dev.icts.education
cfne.uva.tst.icts.education
loadbalancer.dev.icts.education
pnid-api.hva.tst.icts.education
groupbatchenrollment.uva.tst.icts.education
admin.uva.dev.icts.education
sonar-network-loadbalancer.build.icts.education
loadbalancer.dev.icts.education
payment-form.uva.prd.icts.education
admin.dev.icts.education
nvd-mirror.uva.build.icts.education
groupbatchenrollment.uva.tst.icts.education
redirect-auc-canvas.uva.acc.icts.education
kassa.dev.icts.education
gartnerportal.uva.prd.icts.education
inqdomapper-demo.dev.icts.education
tf-example-ebs.acc.icts.education
admin.uva.dev.icts.education
admin.uva.dev.icts.education
groupbatchenrollment.uva.prd.canvas-ab.icts.education
tf-example-ebs.acc.icts.education
admin.dev.icts.education
kassa.dev.icts.education
groupbatchenrollment.uva.tst.icts.education
generic-lti.uva.prd.icts.education
mobiusportal.uva.dev.icts.education
load-balancer.tst.icts.education
discovery-canvas.uva.dev.icts.education
discovery-canvas.uva.prd.icts.education
gartnerportal.uva.dev.icts.education
admin.hva.dev.icts.education
redirect-auc-canvas.uva.acc.icts.education
discovery-canvas.uva.acc.icts.education
gartnerportal.uva.prd.icts.education
tf-load-balancer.icts.education
groupbatchenrollment.uva.acc.icts.education
mobiusportal.uva.dev.icts.education
blueocean.build.icts.education
groupbatchenrollment.uva.tst.icts.education
studiegids-lti.uva.acc.icts.education
groupbatchenrollment.uva.tst.icts.education
payment.hva.dev.icts.education
admin.uva.dev.icts.education
generic-lti.uva.acc.icts.education
oidc.adm.icts.education
loadbalancer.dev.icts.education
testvision-lti.uva.prd.icts.education
canvas-coursecopy.dev.icts.education
id.uva.acc.icts.education
groupbatchenrollment.uva.prd.canvas-ab.icts.education
admin.hva.dev.icts.education
redirect-auc-canvas.uva.prd.icts.education
groupbatchenrollment.uva.tst.icts.education
nvd-mirror.dev.icts.education
groupbatchenrollment.uva.tst.icts.education
fyv.uva.dev.icts.education
loadbalancer.dev.icts.education
redirect-auc-canvas.uva.tst.icts.education
admin.hva.dev.icts.education
payment-form.hva.prd.icts.education
kassa.hva.dev.icts.education
mobiusportal.uva.dev.icts.education

Certificate

The complete raw certificate details for appstore.uva.tst.icts.education in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuG75OQKmyAxlkyvEbGjz
al7yJRi9ZqKBLegRqKQad0AD9+pqrpMqOgoabIAYzL0j4c5IafnZDVyWSri9GIqu
rosc1zdQB78emiPU9VPJI6uV81yt9N780THAo6opnIVLyz0/tQ62QwwlZu8lAbmw
nn6xX8dco0KwqNNhHO4PRbULwWmSE5WPpiRjFVm7wTlMTa9V5PnESc3GlhkdW9vh
3K57vr0ePOZ6u918TRq4P+SB7yKRcqhVwh4RCqsjhvHxu98uZvtifplaEiCAiieJ
UiSGM8QhQgOuzUn5S7IFFR4gp9Fg5DuSowDHT4F05OOZ/sHUd6XVV/292WPcPKEg
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3204018918287245536710238122305782287
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'appstore.uva.tst.icts.education'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23282571199061118365576223954844719054696042329486317847654480220650426989163967729967198377374660974012451861806974106465629483978077037265306554946965462038939776196060944999409079651858732499475846737652793616363963438009208776793360797145276383319932615322691348159100041524420955434333206467148219752436065380305424036779742253126989778616196139329397713978233732083232940317229906140721453545667448271035484301690109141977513292464370169601954612570014257779427039983396931147096762522468342763742092777849750163796886387070408872240346568139744636136357198314681959220638422602358111784090043585335459108167687
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7ddc763cd409f9f375251124f557efaa9bb4281f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appstore.uva.tst.icts.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'appstore.tst.uva.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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