mw-rmm.barracudamsp.com

Issued by Amazon

About this certificate

This digital certificate with serial number 08:5c:20:64:c9:7e:e2:c0:13:9e:c7:4e:35:fb:6a:6d was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mw-rmm.barracudamsp.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:5c:20:64:c9:7e:e2:c0:13:9e:c7:4e:35:fb:6a:6d
Serial Number (int): 11112172299547981830318167064481327725
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 32:e2:07:fc:57:de:73:07:2d:44:f7:31:42:fb:61:b9:9e:6a:fe:3b
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): d7:e4:35:df:94:ad:54:f5:31:2d:c9:a7:d4:03:da:dc:46:05:90:f2
Fingerprint (sha256): 09:23:67:d2:dd:a6:57:06:88:32:1f:6e:9c:03:34:8d:b1:e9:f6:24:ac:91:13:34:71:0b:18:a9:e1:4b:8d:3b

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate mw-rmm.barracudamsp.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mw-rmm.barracudamsp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mw-rmm.barracudamsp.com
*.mw-rmm.barracudamsp.com

Other certificates including the domain name barracudamsp.com

(limited to 100 certificates)
barracudamsp.com
manage.barracudamsp.com
insiders.barracudamsp.com
blog.barracudamsp.com
mw-rmm.barracudamsp.com
campaign.barracudamsp.com
blog.barracudamsp.com
campaign.barracudamsp.com
www.barracudamsp.com
barracudamsp.com
em.barracudamsp.com
whatsmyip.mw-rmm.barracudamsp.com
apitest102.barracudamsp.com
barracudamsp.com
www.barracudamsp.com
campaign.barracudamsp.com
mw-rmm.barracudamsp.com
em.barracudamsp.com
blog.barracudamsp.com
mw-rmm.barracudamsp.com
blog.barracudamsp.com
mw-rmm.barracudamsp.com
barracudamsp.com
manage.echo.barracudamsp.com
mw-rmm.barracudamsp.com
lp.barracudamsp.com
support.barracudamsp.com
blog.barracudamsp.com
barracudamsp.com
lp.barracudamsp.com
barracudamsp.com
www.barracudamsp.com
blog.barracudamsp.com
mw-rmm.barracudamsp.com
mw-rmm.barracudamsp.com
sni.cloudflaressl.com
mw-rmm.barracudamsp.com
barracudamsp.com
barracudamsp.com
mail.barracuda.com
barracudamsp.com
insiders.barracudamsp.com
em.barracudamsp.com
www.barracudamsp.com
campaign.barracudamsp.com
campaign.barracudamsp.com
blog.barracudamsp.com
mw-rmm.barracudamsp.com
*.mw-rmm.barracudamsp.com
barracudamsp.com
blog.barracudamsp.com
lp.barracudamsp.com
support.barracudamsp.com
mw-rmm.barracudamsp.com
barracudamsp.com
campaign.barracudamsp.com
manage.echo.barracudamsp.com
lp.barracudamsp.com
*.smp.barracudamsp.com
mw-rmm.barracudamsp.com
em.barracudamsp.com
campaign.barracudamsp.com
mw-rmm.barracudamsp.com
www.barracudamsp.com
campaign.barracudamsp.com
mw-rmm.barracudamsp.com
blog.barracudamsp.com
www.barracudamsp.com
mw-rmm.barracudamsp.com
barracudamsp.com
whatsmyip.mw-rmm.barracudamsp.com
mw-rmm.barracudamsp.com
mw-rmm.barracudamsp.com
www.barracudamsp.com
campaign.barracudamsp.com
apitest.barracudamsp.com
barracudamsp.com
*.mw-rmm.barracudamsp.com
manage.barracudamsp.com
*.mw-rmm.barracudamsp.com
insiders.barracudamsp.com
manage.barracudamsp.com
mw-rmm.barracudamsp.com
manage.echo.barracudamsp.com
sni.cloudflaressl.com
*.mw-rmm.barracudamsp.com
barracudamsp.com
www.barracudamsp.com
blog.barracudamsp.com
mw-rmm.barracudamsp.com
mail.barracuda.com
mw-rmm.barracudamsp.com
mw-rmm.barracudamsp.com
campaign.barracudamsp.com
mail.barracuda.com
manage.barracudamsp.com
blog.barracudamsp.com
blog.barracudamsp.com
mw-rmm.barracudamsp.com
insiders.barracudamsp.com

Certificate

The complete raw certificate details for mw-rmm.barracudamsp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqES8+vR7OhnIMJu5hWQR
T+CjnaEwp/iOMmQGWWlrojyiU8DmdOhzAiGNd4mzt1yjeCJ2lEZ+a3/7lawlbZtK
qxcaj2L6gJ7JUNS6tgqvfYq0YfS4lqs1uy51TFXEDVoOEQV1UgddmihmlVf16jmP
P1xxqBpkD0LHJoz2lWPAkuIk/b3PvnuB04Tvium7cR+YPeAa096Oxckdm+szH1G6
Ayf8RHgJ9nwbtc2Tu+QezYtkXBP1XsZAXH0dx7+Tn7zYB5JWaFIsat5MN7md50r9
dtq0e6aeU4veXM4RuBxm89caOW6ecigyOOf3yt/ghVswtAWbE3+Yom8TDrzycngW
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11112172299547981830318167064481327725
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mw-rmm.barracudamsp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21241931306147032551320498595412347239332877358895179585526980641953170076750535575707360305562712547932997709799903624561704859289449358885264940849021120736014356647492831267013962221094794049724834225940668765307055677939070428329416407211786943123057607696500152746828883325329642023272687833293854703539188157933935983024731670135615577870885014555554554415876856162392713943423992480655006121594535946367619528206198280713262923783528519233248886514292541720969075124313118797011307327426441145109166172599795678203098122330553181492502658444934844857240776363111307296306491061673818686679078866982635134523009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							32e207fc57de73072d44f73142fb61b99e6afe3b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mw-rmm.barracudamsp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mw-rmm.barracudamsp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016fcfc92097000004030047304502210087d296db7e75dfe5d8ef75abd6540499247c4abf71a516c96c2ad06eabc835b602203e7c7005c104c47edb72a0e2e725fe26eb3f890a9268ca480bff07aca6a1316b0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016fcfc920ee0000040300473045022100ec981637db88e62ef3e73031dd695e5ae548cf9091d80d35a4328e38fd4ddf1d022061914e481e4790cc4ef8a5e0ea1e58ee06447196eff80427b06972a2540d166d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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