share.asana.com

Issued by Amazon

About this certificate

This digital certificate with serial number 02:2e:9e:18:7a:9e:25:76:f2:58:c2:e6:15:01:42:d9 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=share.asana.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:2e:9e:18:7a:9e:25:76:f2:58:c2:e6:15:01:42:d9
Serial Number (int): 2900508207204069522432901379669443289
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 03:31:4a:9c:0c:e6:8f:17:93:a2:7d:7b:e3:1c:15:18:6e:29:99:51
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 4c:cc:a8:05:16:57:75:cb:86:ce:9e:fb:ec:d3:c4:c9:b1:8b:c2:a6
Fingerprint (sha256): 01:19:c1:b3:5c:06:7f:7e:e9:0a:69:08:00:b6:42:4f:f9:87:91:ec:43:75:bd:cc:fb:cf:90:92:1b:98:60:87

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate share.asana.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for share.asana.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

share.asana.com
share-beta.asana.com

Other certificates including the domain name asana.com

(limited to 100 certificates)
hello.asana.com
dns-vetting1b.map.fastly.net
partnerlearning.asana.com
dns-vetting1b.map.fastly.net
govcloud-status.elastic.co
dns-vetting1m.map.fastly.net
*.beta-us1-asana-exp-cell100-238a3931.app.asana.com
t.ssl.fastly.net
leapfrog-ssl-56.gcs-web.com
academy.asana.com
leapfrog-ssl-56.gcs-web.com
bistatus.mplatform.ch
kubeville000.asana.com
go.asana.com
share.asana.com
leapfrog-ssl-56.gcs-web.com
labpages.braze.com
webhooks.revenue.asana.com
dns-vetting1b.map.fastly.net
t-antenna.asana.com
wavelength.asana.com
*.prod-internal-internal.app.asana.com
t.ssl.fastly.net
hello.asana.com
godaddy-status.elastic.co
advisors.asana.com
govcloud-status.elastic.co
sales.asana.com
shop.asana.com
shop.asana.com
dns-vetting1b.map.fastly.net
dns-vetting1b.map.fastly.net
forum.asana.com
prod-au1.app.asana.com
t-antenna.asana.com
dns-vetting1j.map.fastly.net
wavelength.asana.com
statuspage.io
dns-vetting1j.map.fastly.net
dns-vetting1b.map.fastly.net
gtm-analytics.asana.com
customer-test.ssl.fastly.net
sepsbe.status.symantec.com
sepsbe.status.symantec.com
customer-test.ssl.fastly.net
aproposalfrom.freeman.com
customer-test.ssl.fastly.net
dns-vetting1b.map.fastly.net
gdrive.asana.com
wavelength.asana.com
customer-test.ssl.fastly.net
go.asana.com
prod-eu1.app.asana.com
*.prod-prod-prod-us1-prod.app.asana.com
customer-test.ssl.fastly.net
dns-vetting1j.map.fastly.net
partnerlearning.asana.com
partnerportal.kornferry.com
partnerlearning.asana.com
aproposalfrom.freeman.com
customer-test.ssl.fastly.net
dns-vetting1j.map.fastly.net
*.beta-us1-asana-cell01-0b7a99d5.app.asana.com
customer-test.ssl.fastly.net
labplaybooks.braze.com
forum.asana.com
t.ssl.fastly.net
t-antenna.asana.com
hello.asana.com
dns-vetting1b.map.fastly.net
govcloud-status.elastic.co
eng.asana.com
dns-vetting1b.map.fastly.net
t.ssl.fastly.net
value.kpmg.ch
t-antenna.asana.com
blog.asana.com
t.ssl.fastly.net
certifiedpros.asana.com
dns-vetting1b.map.fastly.net
community.asana.com
b2-alt.shared.global.fastly.net
dns-vetting1b.map.fastly.net
dns-vetting1b.map.fastly.net
*.asana.biz
advisors.asana.com
dns-vetting1m.map.fastly.net
dns-vetting1b.map.fastly.net
dns-vetting1j.map.fastly.net
customer-test.ssl.fastly.net
b2-alt.shared.global.fastly.net
customer-test.ssl.fastly.net
space.adlittle.com
customer-test.ssl.fastly.net
dns-vetting1b.map.fastly.net
wavelength.asana.com
portal.kearney.com
customer-test.ssl.fastly.net
dns-vetting1b.map.fastly.net
t.ssl.fastly.net

Certificate

The complete raw certificate details for share.asana.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhT1CaN6heW2da4xkUex7
pXQPUkDjorqCmcR68vZluUXq/mHzvqtUj0U3OLnyIDFgV7jzIiIQGu3igf+IezQp
nbKz5Ak7m20G7eajr6eoTnjGoCleLiRssz1DnAH7ig70G/n8mRBAgVD62hQGsuM6
qpG+gDXoreWuzDo7XKTmd2/YnMsIc1EyCXTG6TlL9bIaZCh884+BjHAtPBRe+Wkl
WapUsjgiRXv8qswJ/q9MgiZl5ddk/nHqiQDeJjQedURTiq7xgQqdifVKNmJ9xFR0
TSz2LNNORmqIBGJfdOAHIJsSo8ZOBXuq66MCCEtaNPAVjbyiZ3Rn7EQ4L/V8VLWe
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2900508207204069522432901379669443289
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'share.asana.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16819902702753103487539329178084353704611102128522453858088899111619185151690748236928305071830794472413422666818665048843893938302858429682535975697504206941906374564832210533248354264669257257681206655980376315584081836077190307552859936928262294784548468033869951287724282774061683957844688449434955549459033060877660191694995942726413251393418608467385451857760977159919446352006206588774677700773351555718183018337272228090007953352289858575944155562330477605177925280681210621670929380634097524159426839458316360386823502160349189849638690642672276067693171848197422180440773699770261857410471443752180491067097
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							03314a9c0ce68f1793a27d7be31c15186e299951
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share.asana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'share-beta.asana.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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