tf-example-spa.uva.dev.icts.education

Issued by Amazon

About this certificate

This digital certificate with serial number 0f:96:64:d6:a7:d4:e6:fa:a4:92:14:e0:a6:05:02:4f was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tf-example-spa.uva.dev.icts.education

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:96:64:d6:a7:d4:e6:fa:a4:92:14:e0:a6:05:02:4f
Serial Number (int): 20719309713282485139205890128895869519
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 23:7b:20:61:83:c6:78:ac:ac:1b:ea:d9:b8:2a:b5:68:67:b3:a1:6a
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 91:0a:38:3d:74:ca:74:a6:e5:55:af:ff:79:ab:b8:af:05:05:df:db
Fingerprint (sha256): eb:b1:8d:df:42:fc:9d:ff:bd:0b:83:b7:fd:8b:c8:66:af:32:fa:93:4d:95:6c:86:b6:9a:8a:8b:b1:45:d8:d4

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate tf-example-spa.uva.dev.icts.education

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tf-example-spa.uva.dev.icts.education

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tf-example-spa.uva.dev.icts.education
tf-example-spa.dev.uva.cloud

Other certificates including the domain name icts.education

(limited to 100 certificates)
redirect-auc-canvas.uva.acc.icts.education
mobiusportal.uva.dev.icts.education
pg-api.hva.tst.icts.education
redirect-auc-canvas.uva.acc.icts.education
praat-web-api.uva.prd.icts.education
fyv.uva.dev.icts.education
load-balancer.tst.adm.icts.education
fyv.uva.prd.icts.education
sonarqube.dev.icts.education
groupbatchenrollment.uva.tst.icts.education
appstore.uva.dev.icts.education
groupbatchenrollment.uva.tst.icts.education
pnid-api.uva.tst.icts.education
gartnerportal.uva.prd.icts.education
id.hva.prd.icts.education
admin.uva.dev.icts.education
redirect-auc-canvas.uva.acc.icts.education
groupbatchenrollment.uva.tst.icts.education
groupbatchenrollment.uva.dev.icts.education
canvasmonitoring.uva.prd.icts.education
pg-api.hva.tst.icts.education
tf-example-spa.hva.tst.icts.education
canvasmonitoring.uva.prd.icts.education
kassa.hva.dev.icts.education
tf-load-balancer.icts.education
gartnerportal3.uva.dev.icts.education
admin.uva.dev.icts.education
groupbatchenrollment.uva.tst.icts.education
groupbatchenrollment.uva.tst.icts.education
canvasmonitoring.uva.prd.icts.education
canvasmonitoring.uva.prd.icts.education
nexus.dev.icts.education
appstore.uva.tst.icts.education
example-ebs.tst.uva.icts.education
paper-extractor.uva.dev.icts.education
lunchlearn-api.uva.tst.icts.education
pnid-api.hva.tst.icts.education
kassa.uva.dev.icts.education
loadbalancer.dev.icts.education
cfne.uva.tst.icts.education
loadbalancer.dev.icts.education
pnid-api.hva.tst.icts.education
groupbatchenrollment.uva.tst.icts.education
admin.uva.dev.icts.education
sonar-network-loadbalancer.build.icts.education
loadbalancer.dev.icts.education
payment-form.uva.prd.icts.education
admin.dev.icts.education
nvd-mirror.uva.build.icts.education
groupbatchenrollment.uva.tst.icts.education
redirect-auc-canvas.uva.acc.icts.education
kassa.dev.icts.education
gartnerportal.uva.prd.icts.education
inqdomapper-demo.dev.icts.education
tf-example-ebs.acc.icts.education
admin.uva.dev.icts.education
admin.uva.dev.icts.education
groupbatchenrollment.uva.prd.canvas-ab.icts.education
tf-example-ebs.acc.icts.education
admin.dev.icts.education
kassa.dev.icts.education
groupbatchenrollment.uva.tst.icts.education
generic-lti.uva.prd.icts.education
mobiusportal.uva.dev.icts.education
load-balancer.tst.icts.education
discovery-canvas.uva.dev.icts.education
discovery-canvas.uva.prd.icts.education
gartnerportal.uva.dev.icts.education
admin.hva.dev.icts.education
redirect-auc-canvas.uva.acc.icts.education
discovery-canvas.uva.acc.icts.education
gartnerportal.uva.prd.icts.education
tf-load-balancer.icts.education
groupbatchenrollment.uva.acc.icts.education
mobiusportal.uva.dev.icts.education
blueocean.build.icts.education
groupbatchenrollment.uva.tst.icts.education
studiegids-lti.uva.acc.icts.education
groupbatchenrollment.uva.tst.icts.education
payment.hva.dev.icts.education
admin.uva.dev.icts.education
generic-lti.uva.acc.icts.education
oidc.adm.icts.education
loadbalancer.dev.icts.education
testvision-lti.uva.prd.icts.education
canvas-coursecopy.dev.icts.education
id.uva.acc.icts.education
groupbatchenrollment.uva.prd.canvas-ab.icts.education
admin.hva.dev.icts.education
redirect-auc-canvas.uva.prd.icts.education
groupbatchenrollment.uva.tst.icts.education
nvd-mirror.dev.icts.education
groupbatchenrollment.uva.tst.icts.education
fyv.uva.dev.icts.education
loadbalancer.dev.icts.education
redirect-auc-canvas.uva.tst.icts.education
admin.hva.dev.icts.education
payment-form.hva.prd.icts.education
kassa.hva.dev.icts.education
mobiusportal.uva.dev.icts.education

Certificate

The complete raw certificate details for tf-example-spa.uva.dev.icts.education in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMTRcsgyV8e061YCY/NR
3HMyP2x+wrW9nhj5bmWpAaUFmGGO7NpPD5g6qA+vHwSgK8wU4N74rzxJi0xDlYUo
PC/37GaMtfEObJgYXhXZIcGebT86alEnGqL8RMWgE5HYzO114KH2FC2NfB9FJ720
zzWlUAUNiKuCTgymqdwrJwT+IJCu5b2BTS0EdfeehtJRntBHoRSeTEA+IqcTMxkZ
BOutUhDGpYWjoU8bszR6bUlDS2HUEG1JZsbi/3t+9hOtKLnCMsThpIusiEk26GMa
nYckia3V72hu+KzvSnOz0xl1txVTYApqAeGXxPAXjoXMDI3+dZ8fJJowG+t3+pwW
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20719309713282485139205890128895869519
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tf-example-spa.uva.dev.icts.education'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25344715644042375955297182058321469406550247619535096221542390950925766967636299429098621828908017208828641786984273327067929311606981135444119385901917706273813896781360435393547237633394445165219931464720629197425339496511709055635688894261413165368408490579506667259443716589330468066251573561195773659966698157970647273908048018870906842617184984543607569826661588501197959132444061773552104111970413712297759171777047332863991127583151624912078857626862708334852150153111354918849793346727281765476862225614782337739660036343605397918925191179803956305438513799735995042477844343996529803932484005793526886176379
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							237b206183c678acac1bead9b82ab56867b3a16a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tf-example-spa.uva.dev.icts.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tf-example-spa.dev.uva.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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