dr.movember.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:c1:a3:bf:67:c1:2c:d2:74:e9:a5:9c:2b:59:f0:11 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dr.movember.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:c1:a3:bf:67:c1:2c:d2:74:e9:a5:9c:2b:59:f0:11
Serial Number (int): 16956170440571138015069768204657750033
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 08:c1:33:23:79:83:5e:7a:53:32:7a:6f:4d:b7:ed:4f:6c:ec:74:75
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): e4:09:26:01:8d:88:35:ef:94:ae:d6:2e:c1:d5:6c:a6:b3:2e:34:7c
Fingerprint (sha256): 11:1e:b3:f2:d6:7a:3f:9a:69:e7:83:59:d7:0d:37:c6:38:46:b5:89:31:4b:5b:f4:45:80:63:b3:48:3f:42:b7

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate dr.movember.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dr.movember.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dr.movember.com
*.dr.movember.com

Other certificates including the domain name movember.com

(limited to 100 certificates)
www.movember.com
ca.shop.movember.com
app.classquest.com.br
api.familyman.test.movember.com
toolkit.movember.com
community.movember.com
us.shop.movember.com
broadcast.movember.com
us.movember.com
cloud.email.movember.com
form.mymoons.mx
wonday.co
api.familyman.movember.com
h.ssl.shopify.com
*.movember.com
uat.movember.com
dr.movember.com
selfservice.movember.com
brushly.bullet-mobile.store
mo.movember.co
www.movember.com
cms.familyman.test.movember.com
www.meninmindlearning.movember.com
api.aotg.staging.movember.com
selfservice.movember.com
selfservice.uat.movember.com
shop.ca.movember.com
san-30-s12.tlsprovisioning.exacttarget.com
api.aotg.movember.com
uat.movember.com
dr.movember.com
mo.movember.co
*.staging.movember.com
aotg.test.movember.com
meninmind.test.movember.com
nz.shop.movember.com
san-30-s12.tlsprovisioning.exacttarget.com
truenorth.staging.movember.com
uat.movember.com
selfservice.movember.com
*.uat.movember.com
meninmind.test.movember.com
api.familyman.test.movember.com
mo.movember.co
api.meninmind.movember.com
petetest2.test.movember.com

ca.shop.movember.com
api.meninmind.test.movember.com
san-30-s12.tlsprovisioning.exacttarget.com
truenorth.staging.movember.com
dr.movember.com
api.meninmind.movember.com
api.movember.com
uk.shop.movember.com
mo.movember.co
truenorth.staging.movember.com
*.mrporter.p.uat.movember.com
*.movember.com
truenorthtracker.test.movember.com
t5.mobx.agency
uk.shop.movember.com
awards.movember.com
talent.gravitonweb.com
cms.familyman.test.movember.com
us.shop.movember.com
uat.movember.com
us.shop.movember.com
*.staging.movember.com
mo.movember.co
mo.movember.co
speakeasy.movember.com
pierinasanchez.nyc
api.meninmind.test.movember.com
uat.movember.com
dr.movember.com
ca.shop.movember.com
san-30-s12.tlsprovisioning.exacttarget.com
familyman.test.movember.com
uat.movember.com
uat.movember.com
mo.movember.co
www.movember.com
h.ssl.shopify.com
www.filipmarko.se
nz.shop.movember.com
business.etable.app
api.aotg.movember.com
uk.shop.movember.com
sonarqube.movember.com
uat.movember.com
uk.shop.movember.com
www.movember.com
uat.movember.com
*.demo.movember.com
*.uat.movember.com
aotgadmin.movember.com
dr.movember.com
cms.familyman.test.movember.com
demo.movember.com

Certificate

The complete raw certificate details for dr.movember.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEhzCCA2+gAwIBAgIQDMGjv2fBLNJ06aWcK1nwETANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODA1MjAwMDAwMDBaFw0xOTA2MjAx
MjAwMDBaMBoxGDAWBgNVBAMTD2RyLm1vdmVtYmVyLmNvbTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAKSCOWoWh4cLE3VYwnF/34H9WtNQSN3wg6btKI2A
8qJSFhNdp3wYbm50pmeGeq8Qad8dRvli1wZ5L07HJ2VAIoACGA9sTwBwojTCgkLS
tS6hiohZyLMqPl5Rlagjc8BTlTZsNPgUoLDmhlaPByslcWHpj2wdc8Epz7IlzO4L
f4Lr7j/oOxKmHcN3ITFy62EAcsO+8HxJ/VtJGThgDKBqSvLTWXUtd6tvh911diFN
dDkhQa/6U5tgwTxUQ4eBBK34E5ZJnweGkiYLhIxLzezwc7JwSPu5ms5xpRhy00ET
9wh2bVDIpr4jWwLaH7nDxwBSGg0K6ncX9+S/+O9hc6PlIGECAwEAAaOCAZswggGX
MB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBQIwTMj
eYNeelMyem9Nt+1PbOx0dTAtBgNVHREEJjAkgg9kci5tb3ZlbWJlci5jb22CESou
ZHIubW92ZW1iZXIuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5zY2Ex
Yi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3JsMCAGA1UdIAQZMBcwCwYJYIZIAYb9
bAECMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6
Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDov
L2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB/wQC
MAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAKo8CeBi
Zau7q0QXBwbTPkQ1JBJuxQ5abr6pcRcuyZbY+Ed8uTyi+/jyzdjCm+Oi0jx+7Td2
ps6GNxZItI9ICsuZ3ePB7dNwHoiu8mFU6EjySt/q0zo1gR0OZhcgBw6hRsf9Lm9M
7/lHQmOPVInsYMthb4qfbohuerfODKU1qH4xHCJht7+A4qI3r0c8cZrEXVB2pDZG
OhFweR4YStU9hkNNoPyX7yWGbl2iGmaooLO6BmOzzO3lt97M9x2vti13WsojSgMk
E2z7Amoq1qvteKYpxIVLyiBKIZ2IUAqjf9VQJm9aknMvOr+wOHBve+73ZfftDTSh
JjYwoXQ0KsCLzWg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApII5ahaHhwsTdVjCcX/f
gf1a01BI3fCDpu0ojYDyolIWE12nfBhubnSmZ4Z6rxBp3x1G+WLXBnkvTscnZUAi
gAIYD2xPAHCiNMKCQtK1LqGKiFnIsyo+XlGVqCNzwFOVNmw0+BSgsOaGVo8HKyVx
YemPbB1zwSnPsiXM7gt/guvuP+g7EqYdw3chMXLrYQByw77wfEn9W0kZOGAMoGpK
8tNZdS13q2+H3XV2IU10OSFBr/pTm2DBPFRDh4EErfgTlkmfB4aSJguEjEvN7PBz
snBI+7maznGlGHLTQRP3CHZtUMimviNbAtofucPHAFIaDQrqdxf35L/472Fzo+Ug
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16956170440571138015069768204657750033
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dr.movember.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20767297997810670459876304971662012835686378535173870273141266961904126900843548622067652913712275182304680611813667901409989321062533583095610773728689586904185695751776432461960021126508511422687216135830425108257054063975424189494714334486237562039360290247153146689867647182421524192769662655588199708620781788998779794181890753595787262087544108903593083312988921811848838306509052962236742385693124257301780126606848897733543656284038771306005550837627251183125235153024101681769989932525145437544163829056608610221032045716447703340863393168752878055020706983747045075262910212980655419864191610248681429999713
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							08c1332379835e7a53327a6f4db7ed4f6cec7475
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr.movember.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dr.movember.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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