*.asana.biz

Issued by Amazon

About this certificate

This digital certificate with serial number 02:70:4f:fc:09:8f:bf:9a:ed:c4:aa:3f:1a:40:d6:4a was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.asana.biz

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:70:4f:fc:09:8f:bf:9a:ed:c4:aa:3f:1a:40:d6:4a
Serial Number (int): 3241615518540520827306414229797525066
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 77:09:87:95:fb:3f:8a:ca:df:58:0b:0a:9a:ba:10:5a:4b:8b:57:2d
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): a4:6a:a5:92:39:7c:fe:69:c1:df:23:4d:d0:8a:7d:88:85:51:73:04
Fingerprint (sha256): 07:cf:5b:e2:83:e6:fa:d1:6f:ce:dc:a1:76:2f:95:fa:cf:f8:54:9c:02:bd:db:ac:a9:72:dc:fd:2e:f3:c2:7f

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate *.asana.biz

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.asana.biz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.asana.biz
asana.biz
phab.asana.com

Other certificates including the domain name asana.biz

(limited to 100 certificates)
s7-sni.cloudinary.com
asana.biz
beta-us1-asana-exp-cell101-655d1191.cell.asana.biz
s7-sni.cloudinary.com
scuba5.asana.biz
s7-sni.cloudinary.com
canary-us1-asana-cell04-e301d759.cell.asana.biz
*.cell.asana.biz
scuba.asana.biz
*.cell.asana.biz
s7-sni.cloudinary.com
*.cell.asana.biz
s7-sni.cloudinary.com
interana.asana.biz
*.asana.biz
s7-sni.cloudinary.com
interana.asana.biz
testville.asana.biz
beta-us1-asana-exp-cell102-5abd4c54.cell.asana.biz
s7-sni.cloudinary.com
beta-us1-asana-cell01-59b8c258.cell.asana.biz
*.asana.biz
prod-jp1-asana-cell01-e80fd712.cell.asana.biz
beta-us1-asana-exp-cell101-115e9ce1.cell.asana.biz
testville.asana.biz
*.et-prod.asana.biz
*.cell.asana.biz
*.et-stage.asana.biz
s7-sni.cloudinary.com
s7-sni.cloudinary.com
*.et-dev.asana.biz
*.asana.biz
s7-sni.cloudinary.com
*.cell.asana.biz
s7-sni.cloudinary.com
*.cell.asana.biz
interana.asana.biz
*.cell.asana.biz
*.asana.biz
*.prod.asana.biz
s7-sni.cloudinary.com
s7-sni.cloudinary.com
s7-sni.cloudinary.com
*.et-dev.asana.biz
interana.asana.biz
testville.asana.biz
beta-us1-asana-exp-cell103-2c6e266d.cell.asana.biz
interana.asana.biz
argocd.prod.asana.biz
s7-sni.cloudinary.com
*.cell.asana.biz
calendarsync.asana.biz
scuba.asana.biz
scuba.asana.biz
*.cell.asana.biz
asana.biz
*.cell.asana.biz
interana.asana.biz
s7-sni.cloudinary.com
*.asana.biz
asana.biz
assets.asana.biz
s7-sni.cloudinary.com
cached-python-packages-prod.asana.biz
*.asana.biz
asana.biz
*.cell.asana.biz
*.beta.asana.biz
testville.asana.biz
*.cell.asana.biz
*.asana.biz
beta-us1-asana-exp-cell101-57272ca1.cell.asana.biz
cached-python-packages-prod.asana.biz
elinoodles.asana.biz
testville.asana.biz
s7-sni.cloudinary.com
lunadb-sync.beta.asana.biz
*.asana.biz
beta-us1-asana-exp-cell101-e1ac4c90.cell.asana.biz
s7-sni.cloudinary.com
s7-sni.cloudinary.com
*.asana.biz
*.asana.biz
s7-sni.cloudinary.com
beta-us1-asana-exp-cell100-acc16d27.cell.asana.biz
marketing.asana.biz
s7-sni.cloudinary.com
*.cell.asana.biz
*.asana.biz
*.asana.biz
assets.asana.biz
*.cell.asana.biz
testville.asana.biz
prod-us1-internal-cell02-b55b5910.cell.asana.biz
calendarsync.asana.biz
*.cell.asana.biz
brand.asana.biz
s7-sni.cloudinary.com
prod-us1-asana-cell03-7fad4376.cell.asana.biz
testville.asana.biz

Certificate

The complete raw certificate details for *.asana.biz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJqUSECdxw0zavolPr04
DC9YLCfGQ9VvifrwMFOF5R6VEnfh6rUJ3FjXhgvRw8i5xCMTghfYk2lkZhFcOe1u
4NmtKMSVYlTcSsuHAp6uAo2tKJgOcbQKrW6NJc4GLzs2zVXu435BsityvhsSsR9V
Ip+FeNp2DFuTfTOzWKkA+tn+jFitZuSMh/+F6aVppxstPLnb3qgMLFl77bRA5bkc
qXbzFUaSdwVj1b3lqDrcGZbMmxPk3tbNxWxbyH4ctVOrQY1IMNLI42+GgJijfgon
ogNfwgBckIyVyDkXXTiRWBoSDDnGSeoDK3H4vzSn1WD9FZ6VNzJXkb/ignTQv8Yi
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3241615518540520827306414229797525066
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.asana.biz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21789214312211199819022917044868868598133477998596804516914693564023877792256435679175447309522933323119709070444724544376478592982378792977956769398952313405027983760756450236413988036015184646347079174020850217379454679412416357642635538285459526549388265135111545710597454356267777521602219338792539347611726165704178445386455198939092705060946003398071075279516710843047578920106108226242854625403564445664778597824241619982967103593095551183711212190437120869074461389751709917586093188089063292056335537998548982216150817756143989288202871974195584226304484644302787201188324031751205630275987663346791753327359
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							77098795fb3f8acadf580b0a9aba105a4b8b572d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.asana.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asana.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phab.asana.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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