web.opalastudios.com

Issued by Amazon

About this certificate

This digital certificate with serial number 01:d9:48:d8:4d:9a:dd:e5:ce:fc:b2:53:f0:42:1a:66 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=web.opalastudios.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:d9:48:d8:4d:9a:dd:e5:ce:fc:b2:53:f0:42:1a:66
Serial Number (int): 2457433884879107684338691566626544230
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 40:c0:74:37:52:c9:cf:90:a8:10:76:e6:4a:45:a3:e9:ca:55:58:95
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): f5:93:fe:83:54:fb:dc:13:32:66:c2:a6:09:92:dd:04:e0:aa:a3:97
Fingerprint (sha256): 0c:2f:2c:68:eb:34:37:f0:3f:72:1a:75:e7:ca:ce:25:60:a6:03:f6:6d:f8:49:cd:df:b0:2a:e9:30:74:76:1c

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate web.opalastudios.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for web.opalastudios.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

web.opalastudios.com

Other certificates including the domain name opalastudios.com

(limited to 100 certificates)
pietyhill.org
www.defencecurl.com
newsite.ladystartup.com
pops4u.pt
www.sharingsong.com
www.japjotsingh.dev
latest.explo.co
sni138101.cloudflaressl.com
mihaita.cf
opalastudios.com
opalastudios.com
www.proveyance.co.uk
ssl917866.cloudflaressl.com
clistack.co
admin.bee-data.net
sni.cloudflaressl.com
web.opalastudios.com
sni138101.cloudflaressl.com
sni138101.cloudflaressl.com
okaidosushi.es
sni138101.cloudflaressl.com
sni138101.cloudflaressl.com
ad.ayaami.com
www.keenn.app
sni44006.cloudflaressl.com
jette.inwatec.dk
knightlyescapes.com
api.tiles.opalastudios.com
sni138101.cloudflaressl.com
sni138101.cloudflaressl.com
ssl917866.cloudflaressl.com
domzastare-klisaric.rs
sni138101.cloudflaressl.com
sni138101.cloudflaressl.com
api.superpads.opalastudios.com
jivegraphics.com
sni138101.cloudflaressl.com
sni138101.cloudflaressl.com
sni138101.cloudflaressl.com
sni138101.cloudflaressl.com
opalastudios.com
sni138101.cloudflaressl.com
www.barataimoveis.com.br
api.lights.opalastudios.com
sni138101.cloudflaressl.com
office-dev.monde-delicious.com
lumos.games
sni44006.cloudflaressl.com
parkbrokenhill.parking.smartsys.io
evelynogvegard.no
sni138101.cloudflaressl.com
*.opalastudios.com
api.kondzilla.opalastudios.com
api.tiles.opalastudios.com
vet.ls.furmacy.com
inprose.info
taskd.dev
sni138101.cloudflaressl.com
sni138101.cloudflaressl.com
api.lights.opalastudios.com
sni138101.cloudflaressl.com
api.superpads.opalastudios.com
sni138101.cloudflaressl.com
sni138101.cloudflaressl.com
sni138101.cloudflaressl.com
www.arcadenoecj.com.br
qr.hocchoi.com
owl.cevs.dev
hc-fc.travizory.ch
esmp.se
sni138101.cloudflaressl.com
info.unfoldingstories.app
admin2.ooca.co
sni138101.cloudflaressl.com
ad.adaptivemedia.tech
makotopty.com
sni138101.cloudflaressl.com
next.api.tiles.opalastudios.com
sni138101.cloudflaressl.com
sni44006.cloudflaressl.com
sni138101.cloudflaressl.com
sni138101.cloudflaressl.com
sni138101.cloudflaressl.com
api.superpads.opalastudios.com
esmp.se
admin.mybiznez.app
sni138101.cloudflaressl.com
sni138101.cloudflaressl.com
www.ideafunding.org
www.elclamor.pe
truestock.smallblueidea.com
api.superpads.opalastudios.com
next-api-beatjump.opalastudios.com
missioncontrol.enoram.app
sni138101.cloudflaressl.com
www.wagzone.online
flightschool.swift.co
jacobkaufmann.com
sni138101.cloudflaressl.com
hard.services

Certificate

The complete raw certificate details for web.opalastudios.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PO07ffddbGlGvknvrUW
oPukGqLOejp9EBZPISI6yvOMJwt61RX+Zou+c9zFejmw+3jV1I+1nxAF/ZA/oQo1
YyRndSv9SmnHK3eFPXXeSfGVQhCHy8rJcOgl9GXuQCeMbtGWz6Y644yaJVqKKZTp
EG6DGMS2iKFEjRZ1VCF/qgtUKY8nOgimSiUszmXmZvFf89XWqzJb1h/d4Fxm5/ss
2JslfxY6O3pOUEDkv8GpQ5ru86JhQmh6s5loVjGLqxtleUqdsJpZxGZQLPv/Lvoe
QTAfA/u9+nyOgAOFyAXOJ5Y9YHYPj6trYZreArCjJF2ihCA0unFk+2g5hYxIaZQ0
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2457433884879107684338691566626544230
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'web.opalastudios.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29912416252457467450755016521633723666977313234743329722208413068656420396282991897168658527084851481639973087416235203700470462327521266614714806497452946978892542429004462201151807007913723860651254732589876936971099116515196812601787937169676310785207070297472388001519677401521553422843270253714577424982825296736346833526279914843479547795227828615158825035857861421226000310142403985874922400930988820903870879847987389220485343354778841284447500691177093168300524987989592720622153349332739919491076692630450085339561968384048446158774320042735685772456559936569135457012138033550216985416238857808002283746437
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							40c0743752c9cf90a81076e64a45a3e9ca555895
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.opalastudios.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000166906aeeb200000403004830460221009ddccf8e74f34ab37ef76384f3075808b72b4cf1554fb1aebb7e892c09aae2b9022100f4c36eb0df3537a2ba8a40431dc430d1745ccdec815a7ef21c43ec55586c67130075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000166906aefa7000004030046304402204d512c05ad90ec1718bd79552a067bb5d39a2bd1003920364b38bfd0e3d535f102205f181fe7332073b5bdc573142964b9c778942584189b11f5653d767d319472a7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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