static.accounts.f-secure.com

Issued by Amazon

About this certificate

This digital certificate with serial number 04:ab:20:75:b5:a2:ec:9c:65:d7:79:3b:80:71:d3:bd was issued on by Amazon.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=static.accounts.f-secure.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ab:20:75:b5:a2:ec:9c:65:d7:79:3b:80:71:d3:bd
Serial Number (int): 6205453108965200162436535384838099901
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 05:b3:6f:4a:71:f8:6a:1b:26:b7:13:de:e2:07:e5:a6:31:58:1e:31
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 1a:1b:9a:f4:0d:c7:7c:04:3b:5e:96:b1:f8:2f:d1:66:98:55:37:48
Fingerprint (sha256): 0b:1b:97:57:aa:cb:b0:ba:3f:e4:ed:5f:bf:a1:3a:f3:d9:35:a9:89:89:87:14:8c:7e:9b:72:59:da:6b:fc:78

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate static.accounts.f-secure.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for static.accounts.f-secure.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

static.accounts.f-secure.com
static.accounts-apac.f-secure.com
static.accounts-apac.withsecure.com
static.accounts-na.withsecure.com
static.accounts-na.f-secure.com
static.accounts.withsecure.com
static.accounts-emea.withsecure.com
static.accounts-emea.f-secure.com

Other certificates including the domain name f-secure.com

(limited to 100 certificates)
oneid.btinteg.ob.f-secure.com
fsio-d4eb-test.sp.f-secure.com
avain-tp.sp.f-secure.com
eu1.analytics.psb.f-secure.com
FSMSG0265.sp.f-secure.com
*.679.tp.cloud.f-secure.com
spi-tp.sp.f-secure.com
digital-life-test.f-secure.com
spi.f-secure.com
portal.radar.f-secure.com
internal-dev.connect.withsecure.com
services.sp.f-secure.com
ew1-rds-be-prd-rabbitmq-03.rds.f-secure.com
fsmsg0445.sp.f-secure.com
igbackup.ob.f-secure.com
guts.sp.f-secure.com
*.679.tp.cloud.f-secure.com
fsmsg0457.sp.f-secure.com
updates-api.radar.f-secure.com
frdm-stats.nc.f-secure.com
en.riws.status.ricoh.com
cgi.f-secure.com
helrdomaster02.fi.f-secure.com
fsmsg0757.sp.f-secure.com
se1gpgw01.f-secure.com
vivo.ob.f-secure.com
obus.sp.f-secure.com
scl.partners.f-secure.com
splunk.ci.infra-services.f-secure.com
fsmsg0071.sp.f-secure.com
*.safeavenue.f-secure.com
akamaisecure2.qualtrics.com
FSMSG0353.sp.f-secure.com
reliance-portal.sp.f-secure.com
secure05.stage.lithium.com
fsmsg0233.sp.f-secure.com
api.elements.f-secure.com
secure01.lithium.com
sebereports.sp.f-secure.com
fsmsg0031.sp.f-secure.com
freedome.f-secure.com
telia-portal.sp.f-secure.com
tsf-portal.sp.f-secure.com
beta.f-secure.com
uk.safeandsavvy.f-secure.com
*.smi.sp.f-secure.com
noms2.sp.f-secure.com
san-8-s51.tlsprovisioning.exacttarget.com
partnerportal.f-secure.com
FSMSG0259.sp.f-secure.com
www.backup.f-secureusa.com
fsmsg0121.sp.f-secure.com
movistar.pa.ob.f-secure.com
psb-live.sp.f-secure.com
test.www.europe.f-secure.com
ew1-rds-be-prd-rabbitmq-04.rds.f-secure.com
stg-download.f-secure.com
vip.f-secure.com
emea.psb.f-secure.com
msp-int.f-secure.com
researchblog.f-secure.com
mts.sp.f-secure.com
secure05.stage.lithium.com
labs.f-secure.com
mobile-dl.sp.f-secure.com
fsbwserver-pp.f-secure.com
secure01.lithium.com
f-secure.com
fsmsg0349.sp.f-secure.com
fsmsg0417.sp.f-secure.com
fsjira.f-secure.com
spi.f-secure.com
jenkins-staging.fi.f-secure.com
san-8-s51.tlsprovisioning.exacttarget.com
akamai-san18.exacttarget.com
cbeyond.sp.f-secure.com
fsmsg0275.sp.f-secure.com
guts2.sp.f-secure.com
*.business.f-secure.com
fsbwserver.f-secure.com
safeavenue-tp.sp.f-secure.com
en.riws.status.ricoh.com
fsbwserver.f-secure.com
doorman.sp.f-secure.com
FSMSG0123.sp.f-secure.com
iaps-tp.sp.f-secure.com
safeavenue.f-secure.com
oh-ci.fsxt.net
redirects.f-secure.com
cgi.f-secure.com
karhu2.nsense.net
smiws-internal.sp.f-secure.com
ticket.btstaging.ob.f-secure.com
fsmsg0267.sp.f-secure.com
clp-st-gw-nl.nc.f-secure.com
hibiki.f-secure.com
location-api.f-secure.com
partnersps.f-secure.com
cgi.f-secure.com
*.fusion.f-secure.com

Certificate

The complete raw certificate details for static.accounts.f-secure.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4wxQqfwLHpZCXwd4XWD
pN/RN0vXs/FbLbSwe/9sTJ8ShkodjAyJoafu+78ZYO+nIX+f4BW92DfltJ6mxmEy
ERXMKx0hMAwxeornoQ6yePDI9un86AFtk7qmNQT+0S7CtUnGhBJAMfoPzyji1Dv0
s0VgkF7p8jKktG/v4Ukcu7+zgAUjK0vvv32YAFQ0Q5BsnD8KHKARbzNpHPPYSzui
JXbyE0bJ+J51I+7JjkdAKmAzCPkkrj6byNpB35/jk/jdpiGZlwK6mtelZxUMyuV9
YLD8Oaay++33lnHAmkudOUNNa+0XVIWOwS0p2cm8kV3ibUr49N4XqzUGLEhE9UTN
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6205453108965200162436535384838099901
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'static.accounts.f-secure.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22160834829574018206347257201556300556037938108495853726265349445151211674579229624455357190052500879952113560928492544220066767835033121272718403795434639192465131971679567384853673969941422425123794989183910619629307543148121862534885717716434293064337772234782828783654750354494937728590111185304242350004848092282720501680713598331870811324046030650942852116901555374353769358817114835054950548860538576596051284401679268381121871926103050527264426205621750274970399749327914290842721598002664151349195357649073561549580741125265463676857581579997666233851025786296941332477989528753621446829891838656376369106309
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							05b36f4a71f86a1b26b713dee207e5a631581e31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (278 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.accounts.f-secure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.accounts-apac.f-secure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.accounts-apac.withsecure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.accounts-na.withsecure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.accounts-na.f-secure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.accounts.withsecure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.accounts-emea.withsecure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.accounts-emea.f-secure.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							016b007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000017f8d488fe100000403004830460221009a13f834eb9a3b8a2f18a7d0208ad5896a8b0929a2fb310118df014a75c42e61022100a6e3eaaea3463621aeb26536842da09420aba84c95e8d1096cdc9e392756f90200770035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c0000017f8d488feb0000040300483046022100dc0407463322cbde9c9a51cf414d330d8b64adebeccf48d8d000ae27e592a284022100a9b89712ee81cb7e35db06c9139f68b883a1b359e79a0609732aaf6d7a78b1cd007700b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000017f8d48901a0000040300483046022100d4a15fd00986f894b68c2bad49d070e5d96643ec4ef5e591805db377d35008e0022100da3b42e7edebb91b06bda2befb1375d90d33fece3fb8bba396d280302458b708
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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