synap.ac

Issued by Amazon

About this certificate

This digital certificate with serial number 05:e4:8b:17:b6:9f:0e:42:5a:48:26:72:87:1b:da:5e was issued on by Amazon.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=synap.ac

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:e4:8b:17:b6:9f:0e:42:5a:48:26:72:87:1b:da:5e
Serial Number (int): 7832804796371723804017571305526909534
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 5c:69:f7:ad:2c:e2:0b:52:00:db:6b:94:88:71:0c:88:d6:d7:91:50
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): c5:a3:82:05:d4:a9:d9:0e:06:e1:fe:49:9a:89:b3:90:19:8b:ed:4d
Fingerprint (sha256): 0f:10:0c:ea:cb:70:74:54:b7:8c:40:5d:82:67:93:07:fb:2f:21:17:4b:eb:e7:8a:5f:f3:09:cd:22:62:1e:03

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate synap.ac

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for synap.ac

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

synap.ac
practice.gpstcourses.co.uk
practice.law.ac.uk
*.synap.ac
manual.free-now.com
synap.themdu.com
manual.mytaxi.com
courses.purplebeelearning.com
*.staging.synap.ac
www.manual.mytaxi.com
join.docabode.com
courses.beautifulnewbeginnings.co.uk
www.passle-academy.net
testprep.crimsoneducation.org
practice.liftlessons.co
www.courses.purplebeelearning.com

Other certificates including the domain name synap.ac

(limited to 100 certificates)
bannerman.totemapp.net
synap.ac
about.ksting.com
synap.ac
*.synap.ac
archmission.totemapp.net
archmission.totemapp.net
archmission.totemapp.net
synap.ac
synap.ac
archmission.totemapp.net
archmission.totemapp.net
updates2.synap.ac
*.staging.synap.ac
about.ksting.com
synap.ac
academy.synap.ac
archmission.totemapp.net
archmission.totemapp.net
app.synap.ac
business.synap.ac
synap.ac
about.ksting.com
academy.synap.ac
synap.ac
about.ksting.com
auth.powermyanalytics.com
about.ksting.com
*.synap.ac
oauth2.kyl191.net
www.synap.ac
business.synap.ac
about.ksting.com
*.synap.ac
about.ksting.com
synap.ac
about.ksting.com
synap.ac
about.ksting.com
synap.ac
academy.synap.ac
updates.synap.ac
archmission.totemapp.net
synap.ac
business.synap.ac
synap.ac
archmission.totemapp.net
academy.synap.ac
*.synap.ac
synap.ac
archmission.totemapp.net
synap.ac
updates.synap.ac
updates.synap.ac
about.ksting.com
archmission.totemapp.net
archmission.totemapp.net
help.synap.ac
archmission.totemapp.net
assets.synap.ac
academy.synap.ac
assets.synap.ac
synap.ac
docs.synap.ac
business.synap.ac
about.ksting.com
bannerman.totemapp.net
synap.ac
archmission.totemapp.net
marketing.synap.ac
archmission.totemapp.net
*.staging.synap.ac
archmission.totemapp.net
synap.ac
about.ksting.com
assets.synap.ac
synap.ac
synap.ac
archmission.totemapp.net
docs.synap.ac
*.synap.ac
synap.ac
synap.ac
marketing.synap.ac
about.ksting.com
synap.ac
staging.synap.ac
archmission.totemapp.net
about.ksting.com
about.ksting.com
synap.ac
business.synap.ac
synap.ac
staging.synap.ac
docs.synap.ac
archmission.totemapp.net
assets.synap.ac
academy.synap.ac
about.ksting.com
archmission.totemapp.net

Certificate

The complete raw certificate details for synap.ac in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wejgK3Q0I2nE+k7w1/X
SnmlCrrLT9MeGncSnbtj93cHcEyskSz8R5eGod/G7O/Lp7sfbeOx3M0dHujZR7nZ
Fu1SHDQv9X1XYkxiFPMu245X1heGTA1hflJ8VJ2P2ecqIF8Cczwe900OGCBYsniR
Nn1RSmcvwFk8Gp8/iqukVdx12Qwuz8JcxcrvDcMa9i4kVw0vQewKYqfyBMh3f7Gz
YxvfLAlS6LBIruFlkfZY5MCUydcr2DMHSXkGcbRLb9dAg+GGbobMfTRxNe7aLbsB
P33T4p42paHs8Sev5K3TSggl2kMxo0fesVn7vjkDhbZ6WozHbQ6+2aGz8WvVZDQm
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7832804796371723804017571305526909534
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'synap.ac'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26640049122438169177342379999216750004007575271094945412001750575964075070600552646620469386252453632520100379163425079135170318290955306553735410648979857061139996497247398381381142715242059467353305242019176190973438719319671770063533718088833693591646694524054599784923359164849499875122921127299891358628483028822201845472494536702050884440215265615637969247195700177644752648918438821753811471995262408957136624604881246242789102300084295545984514315521935839681465286354642339052053148226873153345300717562521013768666669982669858803111958233852356974259444908219755867168384478499433583842785541247441015416539
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5c69f7ad2ce20b5200db6b9488710c88d6d79150
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (378 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synap.ac'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'practice.gpstcourses.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'practice.law.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.synap.ac'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manual.free-now.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synap.themdu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manual.mytaxi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courses.purplebeelearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.synap.ac'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manual.mytaxi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.docabode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courses.beautifulnewbeginnings.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.passle-academy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testprep.crimsoneducation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'practice.liftlessons.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.courses.purplebeelearning.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016c05ae7d85000004030046304402201e7d8d5ad8e391adf4823ef0a19ccefe3865efc5e4f221070d4469527c9aefbc02201c566564923d26dc4dfddec896586b564ea78444c7231486eb574d4fff4cc0bf0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016c05ae7dc70000040300473045022100df53e000a4dbe896724251d80a5bc654ad1a519c6d6db5ec0805589f4859dd94022054b906926c96b89662ae37ae6c9da8aed1f65ce3c19c56088a539d5f73911a79
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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