smb.ultradns.com

Issued by Amazon

About this certificate

This digital certificate with serial number 01:ad:2d:84:57:6b:c8:f7:f6:5f:ec:e7:34:2c:44:f0 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=smb.ultradns.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:ad:2d:84:57:6b:c8:f7:f6:5f:ec:e7:34:2c:44:f0
Serial Number (int): 2228418545916557225252538069270938864
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: b2:1e:43:62:e4:43:74:c2:d1:ad:e9:91:69:75:b7:f6:43:ca:38:cd
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 8b:06:cb:a4:3e:6f:05:ea:68:a9:16:97:38:9a:45:f7:a5:80:ab:46
Fingerprint (sha256): f7:d1:87:2a:99:9f:f5:74:f5:c1:09:3a:7c:2e:e7:9b:04:b4:d6:1d:7e:ef:12:50:23:be:af:60:1c:e8:1c:53

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate smb.ultradns.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for smb.ultradns.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

smb.ultradns.com

Other certificates including the domain name ultradns.com

(limited to 100 certificates)
smb.ultradns.com
*.ultradns.com
smb.ultradns.com
portal.ultradns.com
bdns-qa.ultradns.com
*.ultradns.com
*.ultradns.com
*.ultradns.com
*.ultradns.com
*.ultradnsfirewall.neustar
dnssec.ultradns.com
*.ultradns.com
bdns-dev.ultradns.com
smb.ultradns.com
*.ultradns.com
*.ultradns.com
*.ultradns.com
*.ultradns.com
*.test.ultradns.net
bdns-qa.ultradns.com
ultra-api.ultradns.com
*.ultradns.com
smb.ultradns.com
api.ddr.ultradns.com
bdns-dev.ultradns.com
basic.ultradns.com
*.sso2.ultradns.com
*.ultradnsfirewall.neustar
*.dev.ultradns.net
bdns-qa.ultradns.com
*.ultradns.com
*.ultradns.com
*.ultradns.com
*.ultradns.com
*.sso.ultradns.com
bdns.dev.ultradns.com
bdns-qa.ultradns.com
smb.ultradns.com
basic.ultradns.com
*.ultradns.com
*.sso2.ultradns.com
*.ultradns.com
bdns-dev.ultradns.com
bdns-dev.ultradns.com
*.ultradns.com
partner.ultradns.com
*.ultradns.com
*.sso.ultradns.com
portal.ultradns.com
*.ultradns.com
ultra-api.ultradns.com
*.sso2.ultradns.com
ultra-api.ultradns.com
*.ultradns.com
*.ultradns.com
*.ultradns.com
*.ultradns.com
smb.ultradns.com
*.ultradns.com
*.ultradns.com
*.ultradns.com
*.ultradns.com
www.ultradns.com
portal.ultradns.com
ultra-api.ultradns.com
bdns-qa.ultradns.com
*.ultradns.com
*.sso.ultradns.com
*.ultradns.com
bdns-qa.ultradns.com
smb.ultradns.com
*.ultradns.com
smb.ultradns.com
smb.ultradns.com
*.ultradns.com
*.ultradns.com
smb.ultradns.com
*.testsso.ultradns.com
smb.ultradns.com
*.ultradns.com
*.ultradns.com
*.ultradns.com
bdns-qa.ultradns.com
*.ultradns.com
bdns.qa.ultradns.com
*.ultradns.com
*.ultradns.com
*.ultradns.com
smb.ultradns.com
*.ultradns.com
*.ultradns.com
*.ultradns.com
bdns-dev.ultradns.com
portal.ultradns.com
*.ultradns.com
*.ultradns.com
smb.ultradns.com
*.ultradns.com
*.ultradns.com
smb.ultradns.com

Certificate

The complete raw certificate details for smb.ultradns.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofoVEi5hVFs69C0VuKbP
SZF36tg3kHQ/hxB+c07ltvrzrOgLrqlvyVhXrWphqEYonqJ265M7F5lo3/WIsZuH
6wnSTt69RWhXmSv9TtRN5w3EM9g3abXmSUYCVgXRi+/4yNUlyG/TEoZvu1rkK4R3
jkyT5nGs48RC5sfZQvfc3PqjuPl5gLKTgBG5xUFOkrorObdHcs4C+HS4Jen3SzaH
wG0glLdWD+BfVZHaZhKxBmmBTh/QpBiCwBawGYF0u0fpiVn9Tm4r+A95Cj7Uf0Zu
5VsH1KUWn44wd9BNv6+8eQtJbQ3AWVompM6ePPUOqUwWqJlosjWzRcUsn7hDDNmq
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2228418545916557225252538069270938864
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'smb.ultradns.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20447687282148084835106790652090460365222165944790276767741579646178126891335931116343583014647543168796159988720430967035461475087712099081469480478107268297171452598704073430730652998811442693312527787270981694189436487614797287873626360717224637960076727856381025083252226972747787984299321647000632266647683506354979155440993346518603957831971083275710370425899546199234408252630487468397022143361829023028987399618047949361812554224606821640898456303381893563136266097139868828013883361615570273220944865039863529686707451514662084349145534930853481216019491314496690653270568874775175653020478223933998850747053
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b21e4362e44374c2d1ade9916975b7f643ca38cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smb.ultradns.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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