old.test.aws.lacrossefootwear.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0a:03:f9:cf:dc:c7:3e:7e:df:3f:d3:7c:50:e7:4a:9f was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=old.test.aws.lacrossefootwear.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:03:f9:cf:dc:c7:3e:7e:df:3f:d3:7c:50:e7:4a:9f
Serial Number (int): 13312923636973286456474833276461599391
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 95:57:09:22:04:0e:c3:c2:64:6e:fc:f1:21:95:1b:b0:39:86:b9:eb
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 25:78:39:25:fd:65:a9:5c:92:fe:e4:f9:4e:7e:56:bd:ba:f7:2f:67
Fingerprint (sha256): c8:2c:f2:49:0c:96:d8:54:03:16:5c:93:04:59:3b:d4:86:f7:92:d1:c3:58:c7:65:01:07:ac:05:52:63:00:b9

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate old.test.aws.lacrossefootwear.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for old.test.aws.lacrossefootwear.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

old.test.aws.lacrossefootwear.com

Other certificates including the domain name lacrossefootwear.com

(limited to 100 certificates)
dealerservices.lacrossefootwear.com
www.lacrossefootwear.com
lacrossefootwear.com
support.lacrossefootwear.com
support.lacrossefootwear.com
dealerservices.lacrossefootwear.com
*.test.aws.lacrossefootwear.com
rabbitmq.review.aws.lacrossefootwear.com
www.lacrossefootwear.com
mail.lacrossefootwear.com
review.lacrossefootwear.com
www.lacrossefootwear.com
review.lacrossefootwear.com
rabbitmq.test.aws.lacrossefootwear.com
review.lacrossefootwear.com
www.test.aws.lacrossefootwear.com
www.review.aws.lacrossefootwear.com
mail.lacrossefootwear.com
*.test.aws.lacrossefootwear.com
www.lacrossefootwear.com
*.production.aws.danner.com
support.lacrossefootwear.com
dealerservices.lacrossefootwear.com
*.lacrossefootwear.com
*.lacrossefootwear.com
rabbitmq.review.aws.lacrossefootwear.com
rabbitmq.test.aws.lacrossefootwear.com
dev.danner.com
www.lacrossefootwear.com
review.lacrossefootwear.com
www.lacrossefootwear.com
media.danner.com
review.lacrossefootwear.com
www.review.aws.lacrossefootwear.com
review.lacrossefootwear.com
danner.com
lfi-awe.lacrossefootwear.com
www.review.aws.lacrossefootwear.com
lacrossefootwear.com
mail.lacrossefootwear.com
www.review.aws.lacrossefootwear.com
www.lacrossefootwear.com
www.review.aws.lacrossefootwear.com
*.test.aws.lacrossefootwear.com
rabbitmq.production.aws.lacrossefootwear.com
danner.com
support.lacrossefootwear.com
review.lacrossefootwear.com
mail.lacrossefootwear.com
*.review.aws.danner.com
review.lacrossefootwear.com
www.lacrossefootwear.com
www.lacrossefootwear.com
*.production.aws.danner.com
*.test.aws.lacrossefootwear.com
support.lacrossefootwear.com
*.review.aws.danner.com
*.production.aws.danner.com
www.lacrossefootwear.com
rabbitmq.production.aws.lacrossefootwear.com
global.lacrossefootwear.com
support.lacrossefootwear.com
rabbitmq.test.aws.lacrossefootwear.com
support.lacrossefootwear.com
danner.com
lacrossefootwear.com
www.lacrossefootwear.com
danner.com
*.test.aws.lacrossefootwear.com
review.lacrossefootwear.com
sslvpn.lacrossefootwear.com
www.review.aws.lacrossefootwear.com
www.production.aws.lacrossefootwear.com
mail.lacrossefootwear.com
www.review.aws.lacrossefootwear.com
*.review.aws.danner.com
support.lacrossefootwear.com
origin.global.lacrossefootwear.com
support.lacrossefootwear.com
support.lacrossefootwear.com
review.lacrossefootwear.com
cache.review.aws.lacrossefootwear.com
review.lacrossefootwear.com
*.review.aws.danner.com
danner.com
*.test.aws.lacrossefootwear.com
review.lacrossefootwear.com
www.review.aws.lacrossefootwear.com
old.test.aws.lacrossefootwear.com
*.review.aws.danner.com
*.lacrossefootwear.com
old.test.aws.lacrossefootwear.com
www.lacrossefootwear.com
rabbitmq.review.aws.lacrossefootwear.com
www.lacrossefootwear.com
support.lacrossefootwear.com
old.test.aws.lacrossefootwear.com
support.lacrossefootwear.com
www.lacrossefootwear.com
origin.global.lacrossefootwear.com

Certificate

The complete raw certificate details for old.test.aws.lacrossefootwear.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8KAWDQ7Fj5tmRTxtFqEJ
GNYAx633AtmqKoxrHGCQSXpOW3iNZ+BOoVLR8eHQaSgOZV1MDNRjCLRvMUMTltrY
XqdeMFJefgNdtgWprgWKkc7qMwu+4cXQyo3MGGl20G6ykamYRJ8Bi/ng3fePs6vV
6zK39ycRuJ7MTMFLHst1NXGJrEJUhdmUkL7q4ubT0FV56yvL+UjGZ2Gv9QAijpFD
wrKxuRh+pRKRtkpDdGOXGL50RBcBGv1ISzGnY5jD4oZT3Il6MLk6ZtakumQMH1W/
ldePg0gmsAjy6QFU+A6YhP/FC/Jm1YKTYGYwSqleQvpikQlwg+Yz4/8/rLNwLplc
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13312923636973286456474833276461599391
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'old.test.aws.lacrossefootwear.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30376134608069765686435760418427125619124064590454260227242540899074670819144016201106808464701682049486438583863556791546390324632785600974585279549039668665483218947818994862746707012704196802062519977736309502606334274185251052899269255278710918527923967223202845600101846848073818274761645340826527179740748968955004927270146136764251506179586334037483691349969738111790853093563478769578209964829984740427149186173027555924450660258030552573296084170486318235047030144834647644857726207364729902680309596439669457959417313713370875246398293986592137035555973212798875453121509255443475070405280166947958596131889
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							95570922040ec3c2646efcf121951bb03986b9eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.test.aws.lacrossefootwear.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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