*.bcorporation.net

Issued by Amazon

About this certificate

This digital certificate with serial number 0f:a5:98:af:f2:e1:71:cb:70:ad:01:6a:c6:b8:d3:ff was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.bcorporation.net

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:a5:98:af:f2:e1:71:cb:70:ad:01:6a:c6:b8:d3:ff
Serial Number (int): 20798245784788097768827713340898333695
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f1:37:60:98:c6:b7:77:20:91:34:c6:8f:1d:78:f4:fb:7e:d0:42:ce
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): d6:9a:1f:cf:00:65:7a:57:ec:0b:60:1e:b8:78:87:3c:bc:26:83:b1
Fingerprint (sha256): 0a:c0:2a:17:a8:de:d0:51:0b:5e:ad:9b:4a:5c:e5:78:e5:6a:a3:43:79:08:19:a1:a7:67:02:cc:01:ed:56:5b

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate *.bcorporation.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.bcorporation.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.bcorporation.net

Other certificates including the domain name bcorporation.net

(limited to 100 certificates)
help.pbskids.org
best-for-colorado.bimpactassessment.net
bcorporation.net
www.bcorporation.net
giirs.net
pardot.bcorporation.net
giirs.net
fdus-48.freshdesk.com
*.bcorporation.net
help.pbskids.org
usca.bcorporation.net
best-for-colorado.bimpactassessment.net
giirs.net
giirs.net
rev.bcorporation.net
www.bcorporation.net
best-for-colorado.bimpactassessment.net
www.bcorporation.net
www.bcorporation.net
rev-uk.bcorporation.net
rev-au.bcorporation.net
beta.bimpactassessment.net
help.pbskids.org
rev.bcorporation.net
www.bcorporation.net
rev-au.bcorporation.net
connect.bcorporation.net
fdus-48.freshdesk.com
www.bcorporation.net
best-for-colorado.bimpactassessment.net
b-lab-kb.bcorporation.net
bcorporation.net
help.pbskids.org
fdus-48.freshdesk.com
connect.bcorporation.net
survey.bcorporation.net
rev-uk.bcorporation.net
b-impact.com
giirs.net
rev-au.bcorporation.net
www.bcorporation.net
bcorporation.net
help.pbskids.org
rev-uk.bcorporation.net
fdus-48.freshdesk.com
beta.bimpactassessment.net
bcorporation.net
rev.bcorporation.net
giirs.net
pardot.bcorporation.net
rev-au.bcorporation.net
rev-eu.bcorporation.net
bcorporation.net
www.bcorporation.net
giirs.net
survey.bcorporation.net
champions-retreat.bcorporation.net
champions-retreat.bcorporation.net
www.bcorporation.net
best-for-colorado.bimpactassessment.net
help.pbskids.org
rev.bcorporation.net
best-for-colorado.bimpactassessment.net
best-for-colorado.bimpactassessment.net
connect.bcorporation.net
bcorporation.net
help.pbskids.org
fdus-48.freshdesk.com
giirs.net
www.bcorporation.net
www.bcorporation.net
best-for-colorado.bimpactassessment.net
www.bcorporation.net
giirs.net
survey.bcorporation.net
bcorporation.net
champions-retreat.bcorporation.net
www.bcorporation.net
rev-au.bcorporation.net
fdus-48.freshdesk.com
help.pbskids.org
help.pbskids.org
www.bcorporation.net
b-analytics.net
help.pbskids.org
giirs.net
rev-eu.bcorporation.net
rev-eu.bcorporation.net
fdus-48.freshdesk.com
www.bcorporation.net
connect.bcorporation.net
champions-retreat.bcorporation.net
giirs.net
giirs.net
help.pbskids.org
rev-eu.bcorporation.net
help.pbskids.org
bcorporation.net
bcorporation.net
survey.bcorporation.net

Certificate

The complete raw certificate details for *.bcorporation.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmEkVrlRJP1R5IJtWnXc
ouJKuAUZSIYOMGF8nCz8RYB+dOlbF3RR2WW7o2AcVQuhyumMmU+s5Za8dMANCkjk
RJhokvx7ZxiXH5Z1yK4YWl95k5Ecqh2S8mUj/p6jOLmD7F5/lS9c4RHeeuOM+DQ0
rKQUPBfJz7S/e4gWYPPJWwLXkqo65i5RZTPtWleu33sd2PHBwNd1FfVde6hF7c9o
xv6TefnZJCBW+DP2N5CMDqkQLDCEXNqjDoBgFXerBWt54tAsO4k49pr+uI0Aq+bB
3iIa5nmvcpT2JbhrFBo5lRW0oMXowN6A56nWfZtLgjWUVkhS2UQzsiMTCdgrpoCk
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20798245784788097768827713340898333695
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.bcorporation.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22518320764015840792549043356789388431260956603625883516046533461354060471234460588510204654255637414000415861837425117913473741369516412824765208147776220949445931592241981554501411493634214512689069867187972522946073477111445552696475962498894955618215515660637084031425966298949443330403238978087349293329246951005253030125446175704367705552761750958061822279536561202954848576602644647819542267740066775726014778082742379155188823178242140642481495601023440217479922782872197262651913011696258476753052380329189743461955539465447874362759700427080867037894482444726558956093917989887280029905683856017894282405083
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1376098c6b777209134c68f1d78f4fb7ed042ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bcorporation.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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