*.weforum.org

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 04:db:fd:e1:79:0d:66:eb:70:0f:b7:dc:b8:96:ca:a3 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.weforum.org

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:db:fd:e1:79:0d:66:eb:70:0f:b7:dc:b8:96:ca:a3
Serial Number (int): 6459174308588968572835352475227048611
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 49:f1:5c:f8:49:2e:0a:99:3c:3c:d2:49:e3:eb:0d:d0:a0:26:08:f7
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): e3:34:f0:bd:82:42:66:01:df:41:c1:d9:34:14:07:f5:d6:91:7c:bd
Fingerprint (sha256): 10:e8:b7:2d:42:3b:ca:87:a8:5f:2e:09:27:46:97:eb:a0:04:c2:73:b5:df:e7:17:8a:e8:a3:87:08:95:70:8c

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.weforum.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.weforum.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.weforum.org
weforum.org

Other certificates including the domain name weforum.org

(limited to 100 certificates)
mypassword.weforum.org
virtela.simpplr.com
image.partnerapp1.myworld.com
tracker.weforum.org
dvf.simpplr.com
ssl276313.cloudflaressl.com
connect.weforum.org
5639274879778816-fe4.pantheonsite.io
image.partnerapp1.myworld.com
sni.cloudflaressl.com
5639274879778816-fe4.pantheonsite.io
image.20210419.200345.s6.et.yellsatcloud.com
ssl83833.cloudflare.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
virtela.simpplr.com
5639274879778816-fe4.pantheonsite.io
image.partnerapp1.myworld.com
5639274879778816-fe4.pantheonsite.io
prod.24.slot.cdn.salesforce-communities.com
cdn.intelligence.weforum.org
prod.24.slot.cdn.salesforce-communities.com
5639274879778816-fe4.pantheonsite.io
ssl83833.cloudflare.com
ssl83833.cloudflare.com
5639274879778816-fe4.pantheonsite.io
5639274879778816-fe4.pantheonsite.io
prod.24.slot.cdn.salesforce-communities.com
5639274879778816-fe4.pantheonsite.io
san-2-s6.tlsprovisioning.exacttarget.com
san-1-s50.tlsprovisioning.exacttarget.com
image.20210419.201008.s50.et.yellsatcloud.com
akamai-san8.exacttarget.com
intelligence.weforum.org
remotestatus.dpconsulting.com
prod.24.slot.cdn.salesforce-communities.com
prod.24.slot.cdn.salesforce-communities.com
prod.24.slot.cdn.salesforce-communities.com
intelligence.weforum.org
5639274879778816-fe4.pantheonsite.io
remotestatus.dpconsulting.com
ssl83833.cloudflare.com
5639274879778816-fe4.pantheonsite.io
image.partnerapp1.myworld.com
esms.weforum.org
image.partnerapp1.myworld.com
image.20210419.200345.s6.et.yellsatcloud.com
virtela.simpplr.com
5639274879778816-fe4.pantheonsite.io
*.weforum.org
5639274879778816-fe4.pantheonsite.io
image.20210419.200345.s6.et.yellsatcloud.com
5639274879778816-fe4.pantheonsite.io
san-2-s6.tlsprovisioning.exacttarget.com
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
5639274879778816-fe4.pantheonsite.io
5639274879778816-fe4.pantheonsite.io
aventailrp.weforum.org
image.partnerapp1.myworld.com
5639274879778816-fe4.pantheonsite.io
*.weforum.org
tools.weforum.org
sfwlanp01.weforum.org
dvf.simpplr.com
adfs.weforum.org
ssl83833.cloudflare.com
bearstatus.oostwestsl.com
click.e.weforum.org
image.20210419.200345.s6.et.yellsatcloud.com
ssl83833.cloudflare.com
5639274879778816-fe4.pantheonsite.io
image.20210419.200345.s6.et.yellsatcloud.com
cyberleadership.weforum.org
san-2-s6.tlsprovisioning.exacttarget.com
prod.24.slot.cdn.salesforce-communities.com
remotestatus.dpconsulting.com
5639274879778816-fe4.pantheonsite.io
image.20210419.200345.s6.et.yellsatcloud.com
image.partnerapp1.myworld.com
remotestatus.dpconsulting.com
prod.24.slot.cdn.salesforce-communities.com
image.20210419.200345.s6.et.yellsatcloud.com
toplink-v1.weforum.org
uplink.weforum.org
remotestatus.dpconsulting.com
image.partnerapp1.myworld.com
5639274879778816-fe4.pantheonsite.io
globalshapers.weforum.org
image.20210419.200345.s6.et.yellsatcloud.com
prod.24.slot.cdn.salesforce-communities.com
intelligence.weforum.org
reports.weforum.org
mailbj.weforum.org
bearstatus.oostwestsl.com
survey.weforum.org
prod.24.slot.cdn.salesforce-communities.com
prod.24.slot.cdn.salesforce-communities.com
5639274879778816-fe4.pantheonsite.io
image.partnerapp1.myworld.com

Certificate

The complete raw certificate details for *.weforum.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1dLjdPUt6TI5xHAJ7Mi+
GG7/NUEeEJHSHB2nD46RMSZZnsfGJyjKfi70razSGms0RFqgwA4HXrDHZPzq8VrT
U0PehQ05IrXQjLvqanIR6MpAl+W1BdHvLqhVvNEAlRqLJ1BXawnNLyUe74/tmFJ+
/cUSm9ICa2K+qY5uaP5vD0SqXV70kDm6V8e4PrsVBARiuWtKVo+17YHETCxsp03U
nW3mRhR14JeFZc9XyxUF1RK3i1KAmIssjqGW/cirLsp9BwgP6Z9yz+7AQnFHMiT3
i985mwmVQpBhb+SpUF7tEHM6iT0auGZSZAgOaJtpdE80i2U6iNWhfZPpyF0njnx0
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6459174308588968572835352475227048611
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.weforum.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26992751954660893261275816877987848944586908370394923724480696613354050482766504784755201419360692394575793604003879058768804546162362184035126367443800009912107938704107040744456558863013512584613618980733170279664129697535040767854187444648842561035610185190710323864250408186206732170745434600738984476233043598406604426524447113001432967806460230566828840121177377076680969477499008145347807802480441556522190439228131604661296352733799036407452853275728440628439120521723129469703865595538270773744339185454357792510058945388138415870180321365436278552800591242364931452741052028917200527717981533731340955710667
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							49f15cf8492e0a993c3cd249e3eb0dd0a02608f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weforum.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weforum.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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