fanhattan.tivoservice.net

Issued by Amazon

About this certificate

This digital certificate with serial number 0b:88:8c:ec:76:6e:6c:f8:08:99:e8:e9:3c:d6:df:55 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fanhattan.tivoservice.net

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:88:8c:ec:76:6e:6c:f8:08:99:e8:e9:3c:d6:df:55
Serial Number (int): 15330518598238403349733839887989661525
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 82:0c:e2:c5:f8:0d:ab:87:5b:48:94:07:67:8b:4e:8c:24:f9:27:48
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 37:c1:f9:72:c2:c1:75:77:80:9e:95:ce:cd:34:29:ea:41:f0:00:d4
Fingerprint (sha256): f7:5f:a0:65:89:d9:bf:14:a7:64:ea:c3:31:1b:02:e1:66:9a:4f:b4:d4:b4:01:a4:f0:d2:26:87:c8:89:b9:e5

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate fanhattan.tivoservice.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fanhattan.tivoservice.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fanhattan.tivoservice.net

Other certificates including the domain name tivoservice.net

(limited to 100 certificates)
cc-branding-service-pr-192-4.dev.tivoservice.net
api-cloudcore-onepass-internal-snemtisor.dev.tivoservice.net
entitlement-dispatcher-pr-59-1.dev.tivoservice.net
fanhattan.tivoservice.net
api-callback-policy-master-84.dev.tivoservice.net
api-callback-policy-pr-66-2.dev.tivoservice.net
atlantis-ext.ue1.tivocloud.tivoservice.net
pr-116-1-1.anon.dev.tivoservice.net
api-callback-policy-pr-53-11.dev.tivoservice.net
fanhattan.tivoservice.net
jenkins-cloud.engr.tivoservice.net
api-service-registry-internal-pr-175-1.dev.tivoservice.net
atlantis-ext.ue1.tivodev.tivoservice.net
api-cloudcore-rating-lambda-pr-40-1.dev.tivoservice.net
atlantis-ext.ue1.tivodev.tivoservice.net
*.sls.tivoservice.net
sls-production.tivoservice.net
pr-77-1.anon.dev.tivoservice.net
pr-116-1-ng.anon.dev.tivoservice.net
atlantis-ext-tivodev-ue1.tivodev.tivoservice.net
pr-78-1.anon.dev.tivoservice.net
atlantis-ext-ue1.tivodev.tivoservice.net
api-messaging-interface-pr-106-3.dev.tivoservice.net
api-authservice-proxy-pr-1-2.dev.tivoservice.net
api-cloudcore-partnerinfo-lambda-pr-45-8.dev.tivoservice.net
atlantis-rob-test.tivoservice.net
pr-116-1.anon-apigw.dev.tivoservice.net
api-service-registry-internal-pr-174-1.dev.tivoservice.net
api-cloudcore-onepass-internal-main-14.dev.tivoservice.net
atlantis-ext-tivocloud-ue1.tivocloud.tivoservice.net
api-softclient-cert-pr-217-1-private.dev.tivoservice.net
atlantis-rob-test.tivoservice.net
api-cloudcore-partnerinfo-lambda-main-45.dev.tivoservice.net
atlantis-ext.ue1.fanhattan.tivoservice.net
deptrack.engr.tivoservice.net
inception-serverless-atlantis-d.tivoservice.net
atlantis-ext-ue1.tivocloud.tivoservice.net
api-excluded-partners-lambda-int-stable.dev.tivoservice.net
jenkins-qe.engr.tivoservice.net
tivodev.tivoservice.net
api-cloudcore-bookmarks-internal-snemtisor.dev.tivoservice.net
tivodev.tivoservice.net
jenkins-tcd.engr.tivoservice.net
user-catalogue.dev.tivoservice.net
atlantis-ext-ue1.fanhattan.tivoservice.net
tivodev.tivoservice.net
api-cloudcore-bookmarks-internal-pr-10-3.dev.tivoservice.net
inception-serverless-atlantis-d.tivoservice.net
api-authservice-proxy-pr-1-1.dev.tivoservice.net
api-cloudcore-bookmarks-internal-pr-10-4.dev.tivoservice.net
entitlement-dispatcher-pr-59-2.dev.tivoservice.net
fanhattan.tivoservice.net
messaging-targeting-info-pr-38-7.dev.tivoservice.net
api-cloudcore-onepass-internal-pr-10-8.dev.tivoservice.net
cc-branding-service-pr-192-3.dev.tivoservice.net
entitlement-dispatcher-pr-60-1.dev.tivoservice.net
api-cloudcore-onepass-internal-pr-10-9.dev.tivoservice.net
api-cloudcore-onepass-internal-snemtisor.dev.tivoservice.net
tivodev.tivoservice.net
inception-serverless-atlantis-d.tivoservice.net
api-softclient-cert-master-221-private.dev.tivoservice.net
entitlement-dispatcher-venkatramanap.dev.tivoservice.net
api-channels-service-internal-pr-155-1.dev.tivoservice.net
api-cloudcore-partnerinfo-lambda-pr-45-6.dev.tivoservice.net
tivocloud.tivoservice.net
atlantis-ext-fanhattan-ue1.fanhattan.tivoservice.net
*.sls.tivoservice.net
api-service-registry-internal-pr-174-2.dev.tivoservice.net
atlantis-ext-ue1.tivodev.tivoservice.net
api-authservice-proxy-mhall.dev.tivoservice.net
inception-serverless-atlantis-d.tivoservice.net
api-cloudcore-rating-lambda-staging.latam.tivoservice.net
api-channels-service-internal-pr-150-8.dev.tivoservice.net
api-cloudcore-onepass-internal-pr-10-7.dev.tivoservice.net
api-callback-policy-pr-65-1.dev.tivoservice.net
api-callback-policy-pr-66-1.dev.tivoservice.net
entitlement-dispatcher-master-48.dev.tivoservice.net
api-channels-service-internal-rvk.dev.tivoservice.net
api-cloudcore-rating-lambda-production.prod.tivoservice.net
api-callback-policy-master-86.dev.tivoservice.net
api-callback-policy-master-85.dev.tivoservice.net
tivodev.tivoservice.net
atlantis-ext-ue1.tivodev.tivoservice.net
fanhattan.tivoservice.net

Certificate

The complete raw certificate details for fanhattan.tivoservice.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzKi2PggIFXsDqe9iEu17
gLV3GNTj98gCCHSn1jl3YyoPwvdnj+GLBdxYP7pycggwQrmCPqjnnmaMxszZo4wr
wv06a1WO0GXIAt54/AtH50sZKa8znhpWtfs8fG1BRfjuvNi8UfnAiptnA1l14f01
+hX7QheEVDrQs7la1ZfBawxizCI+0Ep/RHDF/+5Z93LtbmftHLmOMiFRMZsKue3j
L85RLelJSWZ3mTU19BW0OvPHa/m7nlAoYjRTkp8zy0V6ZZ94fwION1clyQxYtdnw
Q+InMIqD/Bc2aM5dLa56xXZ1rTfFIOwTRU9GRvDwXYh3URQ3BdqLC3qRRUipTGXb
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15330518598238403349733839887989661525
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-30 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fanhattan.tivoservice.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25835809143805547743921130867336743706102857492997341735033223077097193994494330159751284466147050906245098728282785558530420869321379380808831730950791786577059986078605134811442013384112971251197902347164789458183883966787516969942857004749972210067086935050951853929161029473852316549571408505115812348981942103433636280898486483330297654914251957023501600466225250646276915020217718338057442898492381431742065563161291601483273510081231477686234116031785011660371796459143737250719283887431366587809078642340244730182514423427734221028811043197420155700888734388172479232994471235266057606180156066657855875701743
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							820ce2c5f80dab875b489407678b4e8c24f92748
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanhattan.tivoservice.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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