*.fao.org

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 05:3d:99:df:3f:04:1e:ba:4c:84:9f:38:86:13:d7:46 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.fao.org

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:3d:99:df:3f:04:1e:ba:4c:84:9f:38:86:13:d7:46
Serial Number (int): 6965990983347339666007331421849638726
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 49:52:a2:50:3e:47:7a:95:4e:fb:74:be:24:b4:6e:8b:db:81:5d:ac
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): ec:3d:c3:4c:1e:e7:c5:cf:17:71:9a:b6:38:92:d1:50:34:ee:47:bd
Fingerprint (sha256): 13:73:15:ef:9e:c4:7c:ca:e3:03:52:c2:79:57:25:d1:00:09:9d:ee:1c:da:58:76:e7:c9:20:15:61:22:d1:05

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate *.fao.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.fao.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.fao.org

Other certificates including the domain name fao.org

(limited to 100 certificates)
cds4.cvent.com
*.fao.org
cognito-poc.apps.fao.org
*.fao.org
api-digital.apps.fao.org
mediabase.fao.org
sni.cloudflaressl.com
sni.cloudflaressl.com
signin.fao.org
*.fao.org
www.castleislandband.com
signin.fao.org
people.hivemint.xyz
sni.cloudflaressl.com
sni.cloudflaressl.com
*.fao.org
*.apps.fao.org
averyano.com
sni.cloudflaressl.com
accentreductiontampabay.com
www.anriar.com
merchant.engagesystems.io
auth.data.apps.fao.org
sni.cloudflaressl.com
keeptweaking.com
cds4.cvent.com
digital-assets.fao.org
cds4.cvent.com
mediabase.fao.org
gismgr.review.fao.org
www.emere.tk
api-digital-edge.review.fao.org
ciomsdev.apps.fao.org
fimisqa.fao.org
excitation.app
faolex.fao.org
gaez.fao.org
sni.cloudflaressl.com
forms.apps.fao.org
cds4.cvent.com
intro2db.mkss.net
cds4.cvent.com
www.qbila.org
scan.watdrinkje.be
sawickiphu.pl
cds4.cvent.com
cds4.cvent.com
heraldbox.com
alb-auth.aws.fao.org
*.fao.org
www.vaporpassadoria.com.br
*.fao.org
sincelast.app
petnoter.com
coact.space
agris.fao.org
miembros.marcelodaluz.com
link.trueid.net
*.fao.org
www.direct-law.co.kr
*.fao.org
netex-validation-reports.dev.entur.org
io.apps.fao.org
account.alwaseet-poultry.com
chintpatel.com
www.newbrains.net
*.fao.org
cds4.cvent.com
*.fao.org
mediabase.fao.org
www.utupay.africa
auth.data.review.fao.org
*.fao.org
mediabase.fao.org
www.ragstorichies.io
app.furbol.nai.dev
grablabs.com
cds4.cvent.com
bussiness.menupool.com
preportal.bee-fulfilment.nl
agris.fao.org
*.fao.org
assets.aims.fao.org
fapda.review.fao.org
sni.cloudflaressl.com
faolex.fao.org
api-globalrecord-staging.review.fao.org
co-fest.ideators.cc
submatch.io
canoe.orchidisland.tw
ciomsdev.apps.fao.org
invite.indiafintech.com
forms.apps.fao.org
fimis.fao.org
viewsme.com
sni.cloudflaressl.com
impuls.dev
sni.cloudflaressl.com
www.michelyraul.com
www.sudoku100.de

Certificate

The complete raw certificate details for *.fao.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VhdufFAPX6rOKSzpi2+
3w1tXoJX6udI01MyAxThfMym+AivQw95leFGzJTb/evjoQmA3FZRWv3lBHNPnG2R
YerMBQfOUDtXZA/Ejsmp51ws1G5qptR4nLmnwcNhLS5wi81AuqW2r+K+od9MfI5W
boXItDc3243lg9F8dmGGSB2GhqyES0YBZxflJmND1T2FA073E3r20vu7JFtpq/U2
7NYqLcP7HvmyRQyFHKY2NOAwKdFfTb+Uuphf0f3GqhalrxJMnKgIQhZ0i/bT77Rz
1F6CSt5AZ6SXXiw6iQp4t/XK/PLdKnIJs6evRBtzpBlDkjs7BpI7FeJxEQsugKZe
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6965990983347339666007331421849638726
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.fao.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27942240354594984839114065433714821413768087348853318394357062024354836417084470034970252353638150055813967952246885735979101552489814930239878036837863438063733722929263610861782063381034062999537587590802603653934786441196528929761998251492001817363401396868445751905575681508618255091647062619680539453450040150387137803851247386870842903037338452218944999580716578033162585282664431315022891891310521495406869153207175536659293104821306223989628102706046696217983365751800853954899189094194965369005209247216917783436251047126227913918387325864168530408820263660098931848591510912612485658329881690878629460205201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4952a2503e477a954efb74be24b46e8bdb815dac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fao.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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