syndic8.io

Issued by Amazon

About this certificate

This digital certificate with serial number 09:06:d7:2a:e7:8f:0a:65:02:78:5b:60:76:f1:4f:f1 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=syndic8.io

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:06:d7:2a:e7:8f:0a:65:02:78:5b:60:76:f1:4f:f1
Serial Number (int): 11998569860527025278048349752046735345
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 9e:bd:d8:0e:f6:67:8d:0e:f2:83:e6:40:68:6d:e8:b6:7e:7c:48:2a
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 7e:b9:bd:a0:93:55:9f:82:f3:5d:69:1c:e7:38:df:b2:31:0f:d1:0b
Fingerprint (sha256): 06:d1:90:f2:fe:5e:73:ff:1e:46:af:77:c4:38:13:67:01:dd:bb:b2:86:fb:7d:38:c1:a7:ff:5a:c6:cc:ec:50

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate syndic8.io

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for syndic8.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

syndic8.io
*.syndic8.io

Other certificates including the domain name syndic8.io

(limited to 100 certificates)
sni236658.cloudflaressl.com
sni236658.cloudflaressl.com
cwl.status.cloudsigma.com
www.syndic8.io
syndic8.io
syndic8.io
support.syndic8.io
sni236658.cloudflaressl.com
sni236658.cloudflaressl.com
*.green.syndic8.io
sni236658.cloudflaressl.com
www.syndic8.io
sni236658.cloudflaressl.com
*.syndic8.io
sni236658.cloudflaressl.com
sni236658.cloudflaressl.com
syndic8.io
*.green.syndic8.io
sni236658.cloudflaressl.com
sni236658.cloudflaressl.com
*.yellow.syndic8.io
sni236658.cloudflaressl.com
sni236658.cloudflaressl.com
sni236658.cloudflaressl.com
sni236658.cloudflaressl.com
sni236658.cloudflaressl.com
syndic8.io
support.syndic8.io
sni236658.cloudflaressl.com
tls.automattic.com
syndic8.io
sni236658.cloudflaressl.com
sni236658.cloudflaressl.com
sni236658.cloudflaressl.com
sni236658.cloudflaressl.com
syndic8.io
*.yellow.syndic8.io
tls.automattic.com
sni236658.cloudflaressl.com
sni236658.cloudflaressl.com
sni236658.cloudflaressl.com
support.syndic8.io
www.syndic8.io
*.syndic8.io
sni236658.cloudflaressl.com
*.syndic8.io
www.syndic8.io
*.syndic8.io
syndic8.io
*.green.syndic8.io
support.syndic8.io
sni236658.cloudflaressl.com
sni236658.cloudflaressl.com
*.okd-ue2-dev.syndic8.io
syndic8.io
syndic8.io
tls.automattic.com
tls.automattic.com
sni236658.cloudflaressl.com
syndic8.io
syndic8.io
www.syndic8.io
tls.automattic.com
tls.automattic.com
*.orange.syndic8.io
sni236658.cloudflaressl.com
sni236658.cloudflaressl.com
sni236658.cloudflaressl.com
cwl.status.cloudsigma.com
tls.automattic.com
sni236658.cloudflaressl.com
tls.automattic.com
syndic8.io
sni236658.cloudflaressl.com
auth-dev.syndic8.io
syndic8.io
syndic8.io
sni236658.cloudflaressl.com
tls.automattic.com
sni236658.cloudflaressl.com
www.syndic8.io
tls.automattic.com
syndic8.io
www.syndic8.io
*.infrared.syndic8.io
syndic8.io
*.black.syndic8.io
sni236658.cloudflaressl.com
syndic8.io
sni236658.cloudflaressl.com
sni236658.cloudflaressl.com
sni236658.cloudflaressl.com
*.syndic8.io
*.green.syndic8.io
tls.automattic.com
sni236658.cloudflaressl.com
*.syndic8.io
sni236658.cloudflaressl.com
sni236658.cloudflaressl.com
sni236658.cloudflaressl.com

Certificate

The complete raw certificate details for syndic8.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypdKexGXVgDovxqRkN/n
0QVnnga35B0T2CKtYQFDrGfUMazUHd/TVYz7tnl6TZiTe2IaHU+K/2YTaQFpim2z
wM7gaJ2auYAMBdBW0w1YgsQNwnTBU5U0t+4Tcgovud4I4di58kjZt7yl85sbberb
xVYPr/u4I6n0wgfDrey7F7bvelHgDSaXwsigqooKxkvqXIxXzouDbh3VnR2KsKms
siyoX+TkX7yQU5tM0vO10JF/Hs8H45LytAGh9lb5W4F86WtuiAdlP6dHL2nUIwlB
fv+OViH2k0qX/KnhSMrj2OBtD1Jevapbvi6pEeNxvsKt+CSBPMsG98pvAMX81lWM
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11998569860527025278048349752046735345
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'syndic8.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25574741946386958344930584413136747807306852476044018301475718192439454518878492057010682636788840341228158516141945705060341048757471140577077299037706206651189177310511114863402746655910212258398063716087030431302608958951357106629851513791407301619743633114247369427657527305957019471443708046950941911682758797299526030285238916995067031929712554065218153333557463429795512281635141293858579474277209307954688058167600808413622263521299940383031340326015777413574493048692618601571445928202188198196328491350794327218559860832604496211038864275254016805623750039240564129012289263029538609171622093532317162507421
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9ebdd80ef6678d0ef283e640686de8b67e7c482a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'syndic8.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.syndic8.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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