leads.topa.agency

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 01:b8:08:e7:41:53:c2:7b:8f:86:91:1b:14:ec:bc:ae was issued on by Amazon.

With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leads.topa.agency

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:b8:08:e7:41:53:c2:7b:8f:86:91:1b:14:ec:bc:ae
Serial Number (int): 2284791198955479064783548677381471406
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 59:66:f9:3c:1a:53:9e:97:b4:d4:f5:86:c7:42:63:96:87:f3:44:00
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 60:69:36:80:dd:ad:c3:97:75:56:7a:f4:ca:4d:0c:a6:56:21:f0:ca
Fingerprint (sha256): 06:7f:d5:5f:f2:51:00:5b:4f:98:64:b7:68:45:4b:4a:44:54:e2:2c:1d:cb:6d:88:d0:fc:95:3f:5c:03:8d:28

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate leads.topa.agency

29

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leads.topa.agency

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

leads.topa.agency
leads.dmpmarketinggroup.com
app.quemclicou.com.br
homesteady.my-leads.net
crm.precisioncreative.com
leads.ascenddigitalexperts.com
leads.spcweb.uk
leads.intellectualninjas.com
leads.seekmomentum.com
leads.skullmedia.de
leads.stradegy.ca
leads.puregoldads.com
leads.alignedagency.com.au
leads.themodernfirm.com
leads.getdeclare.com
leads.strategexe.com
leads.seodentals.com
leads.slsmarketing.net
leads.rsmconnect.com
leads.radicalwebs.com
leads.zymbyo.com
leads.uniqueamb.com
leads.webgrowth.io
hub.cbtpsychology.com
leads.royalsadvertising.com
leads.mtec.digital
leads.brandsthatlast.com
login.hvacserviceleads.com
leads.point.dog

Other certificates including the domain name topa.agency

(limited to 100 certificates)

Certificate

The complete raw certificate details for leads.topa.agency in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdqX10MjXqgUAnLKjInE
et7VoawGY6a5EcbHrq15Rla7R6E5c2LlyEE4KJFVQxR0LdxxkFifB2xxtT8kJhLT
k1UVfYzJiMBTGTJ1EazQkV3X3bXwyGbbgUvRN0UTsx/EBUGm78TQLXrMYlhiQREu
VgA2ZSCdSTnSk82Qrs4G4Z+3Alz7j9aBbivDoItrhLyL5rAKYPBezzjJO+++2bM3
GwpepY6u/IKdUIJ0/oMmwND6bX9QcIG+DbkQ3Fe1AO3wLAezDQXFSj/4nN71cdkX
gMfDjQbCCtfIhx0ASSlK1WgWwp63enb987sesNnxRQqyosP7zk2hyAXj1HhWFTLx
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2284791198955479064783548677381471406
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leads.topa.agency'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16897486849569225293531175923715011606866321917737433725994551254921561464118112132624786388528830758801357082260625549572984000009040652446087124712596823189779349786904150489783536213675955403806433500950614326495591562674774450801518388676319078906053737304903555440419466613149902173970180939155856998552994504095425068688966061935693681793392686721086582026110398386873440988261788648081455156050673097685525472744757030484443180854337978209296643484673749261907856525548746116070177507453241960551579600521422229554095008245179425702161559367800627203495529326132957652912547717988500948664562675341520251580673
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5966f93c1a539e97b4d4f586c742639687f34400
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (683 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.topa.agency'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.dmpmarketinggroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.quemclicou.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homesteady.my-leads.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.precisioncreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.ascenddigitalexperts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.spcweb.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.intellectualninjas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.seekmomentum.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.skullmedia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.stradegy.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.puregoldads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.alignedagency.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.themodernfirm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.getdeclare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.strategexe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.seodentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.slsmarketing.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.rsmconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.radicalwebs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.zymbyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.uniqueamb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.webgrowth.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hub.cbtpsychology.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.royalsadvertising.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.mtec.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.brandsthatlast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.hvacserviceleads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.point.dog'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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