us-west-2.aws.zwprod.io
Issued by Amazon
About this certificate
This digital certificate with serial number 04:81:d0:43:d9:00:48:46:64:0f:f1:26:a7:d9:5e:02 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=us-west-2.aws.zwprod.io
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:81:d0:43:d9:00:48:46:64:0f:f1:26:a7:d9:5e:02Serial Number (int): 5990942394533692698955440427474968066
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: d2:61:9c:c3:d7:31:b8:fe:71:ad:4e:10:e4:72:9d:b4:46:6e:04:69
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 15:0e:a2:bc:d2:de:27:d5:38:6c:51:9e:cb:dc:9e:98:6a:0b:0a:52
Fingerprint (sha256): e9:51:76:22:6e:a5:52:6b:be:22:2c:ef:4b:4d:e4:d4:59:a9:2d:63:eb:05:c2:f3:a9:c5:e9:34:18:4a:75:db
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl
Check the revocation status for certificate us-west-2.aws.zwprod.io
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for us-west-2.aws.zwprod.io
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
us-west-2.aws.zwprod.io
*.us-west-2.aws.zwprod.io
*.us-west-2.aws.zwprod.io
Other certificates including the domain name zwprod.io
(limited to 100 certificates)
cmg.us-west-2.aws.zwprod.io
*.us-west-2.aws.zwprod.io
zipwhip.com
*.us-west-2.aws.zwprod.io
us-west-2.aws.zwprod.io
graylog.zw-prod.us-west-2.aws.zwprod.io
toolkit.us-west-2.aws.zwprod.io
toolkit.us-west-2.aws.zwprod.io
*.comm-api.us-east-2.aws.zwprod.io
us-west-2.aws.zwprod.io
zipwhip.com
zipwhip.com
zipwhip.com
app.zipwhip.com
zipwhip.com
zipwhip.com
*.us-west-2.aws.zwprod.io
zipwhip.com
zipwhip.com
*.us-west-2.aws.zwprod.io
cmg.us-west-2.aws.zwprod.io
zipwhip.com
*.us-west-2.aws.zwprod.io
zipwhip.com
*.us-west-2.aws.zwprod.io
us-west-2.aws.zwprod.io
zipwhip.com
zipwhip.com
us-west-2.aws.zwprod.io
*.us-west-2.aws.zwprod.io
zipwhip.com
toolkit.us-west-2.aws.zwprod.io
*.us-west-2.aws.zwprod.io
zipwhip.com
*.us-west-2.aws.zwprod.io
us-west-2.aws.zwprod.io
graylog.zw-prod.us-west-2.aws.zwprod.io
toolkit.us-west-2.aws.zwprod.io
toolkit.us-west-2.aws.zwprod.io
*.comm-api.us-east-2.aws.zwprod.io
us-west-2.aws.zwprod.io
zipwhip.com
zipwhip.com
zipwhip.com
app.zipwhip.com
zipwhip.com
zipwhip.com
*.us-west-2.aws.zwprod.io
zipwhip.com
zipwhip.com
*.us-west-2.aws.zwprod.io
cmg.us-west-2.aws.zwprod.io
zipwhip.com
*.us-west-2.aws.zwprod.io
zipwhip.com
*.us-west-2.aws.zwprod.io
us-west-2.aws.zwprod.io
zipwhip.com
zipwhip.com
us-west-2.aws.zwprod.io
*.us-west-2.aws.zwprod.io
zipwhip.com
toolkit.us-west-2.aws.zwprod.io
Certificate
The complete raw certificate details for us-west-2.aws.zwprod.io in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIElDCCA3ygAwIBAgIQBIHQQ9kASEZkD/Emp9leAjANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjEyMTYwMDAwMDBaFw0yNDAxMTQy MzU5NTlaMCIxIDAeBgNVBAMTF3VzLXdlc3QtMi5hd3Muendwcm9kLmlvMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI9S+44vFWg2lJBegHzp7CkiitUX 5KvsZnWdQ8gZXw57Y7mhhEzz/Fn6HVt3fbGl3nf3PKWuo1aZZot6Fe9jrBmZM/I4 K53QKTcl3+omxJaYS3NAvzZ4dLE1GU0hXWXHGo1Dhbvu73fftyWVzd+ciJ85Dv3p 7+yUeyRAVoyVSb5sKJVcMR1TdXXPcl4NPbNd0cAVXksBzxwFeaxMOhz+nfnnzW+5 Sl6A+69LqNxUSdf8f45EVgffMn66i9FXT8u5Tkr8Y47wGv/fMYmlclHPL+dwgrF0 6AHN2PU5bsro9NzwxEXzw6aKvwDSJUy9zRopFED9qTJM1dn1Tum9ZACxawIDAQAB o4IBoDCCAZwwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0O BBYEFNJhnMPXMbj+ca1OEORynbRGbgRpMD0GA1UdEQQ2MDSCF3VzLXdlc3QtMi5h d3Muendwcm9kLmlvghkqLnVzLXdlc3QtMi5hd3Muendwcm9kLmlvMA4GA1UdDwEB /wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPQYDVR0fBDYw NDAyoDCgLoYsaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIt MS5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsG AQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYB BQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNy dDAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQClCSFQu0MiXixpX63eDYAy0m6MaEFcW4QcuuiaAu5COOReBnBbanSF 62wSFshEwpMywcXgb6wYDur1B+FBrm+ZVgjy1XJd2cmDmmb0Jt7ohs3rU8l+l0EC KS8XU87aR+i+6QaUrOg6Q0+TsGzljFOz0w/4FkPCJUyy6+iR/Nn9xHW1O31uKGu4 Bl4861EeWtXUALvTWSVhKNA2G23qGSFKXlXqKn5vCYTjTafdtXQnU/N5P6fKkLE7 IR+minhhjuZiELgZQcufdqpmEjbXzUm5LTraRvmxss+/yTDJ+fjODIkgn6uKCiRl uK59YChGRxauSghHuZ4Om4/ItMrAb28Z -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArI9S+44vFWg2lJBegHzp 7CkiitUX5KvsZnWdQ8gZXw57Y7mhhEzz/Fn6HVt3fbGl3nf3PKWuo1aZZot6Fe9j rBmZM/I4K53QKTcl3+omxJaYS3NAvzZ4dLE1GU0hXWXHGo1Dhbvu73fftyWVzd+c iJ85Dv3p7+yUeyRAVoyVSb5sKJVcMR1TdXXPcl4NPbNd0cAVXksBzxwFeaxMOhz+ nfnnzW+5Sl6A+69LqNxUSdf8f45EVgffMn66i9FXT8u5Tkr8Y47wGv/fMYmlclHP L+dwgrF06AHN2PU5bsro9NzwxEXzw6aKvwDSJUy9zRopFED9qTJM1dn1Tum9ZACx awIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5990942394533692698955440427474968066 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-16 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-14 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'us-west-2.aws.zwprod.io' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21783664227108229259197496114862480459839908904385190492062655801807345845484620790703264924175014475323138825936881285071442427721911284841508646563054863279142829159315409903180480132283864146957101124457151247518646946300941426588273857889544622768803785776415005952074824522266463851495021813536498067024608109176265384841214519636243415274283047311046946626021675625248676933167337196795482428786589455207765689448726767554991877167035447716917966341686198080053621696821480608096442075329866327134526779815419434020398907386105762976196182805203697061922886694755114690684402391113002625518082969038515016348011 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d2619cc3d731b8fe71ad4e10e4729db4466e0469 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-west-2.aws.zwprod.io' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-west-2.aws.zwprod.io' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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