journee.live

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0b:94:be:33:af:3f:3a:74:b1:b8:2b:e9:0c:57:f8:61 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=journee.live

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:94:be:33:af:3f:3a:74:b1:b8:2b:e9:0c:57:f8:61
Serial Number (int): 15393825641394526231081619843230201953
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b5:38:06:ac:fe:24:87:60:1d:9a:41:0c:73:93:5a:12:d6:b4:19:91
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): c2:52:17:d8:68:56:79:a0:55:56:14:25:0a:a1:d7:41:6b:16:ce:88
Fingerprint (sha256): 15:24:5b:f8:32:53:a6:32:ee:2f:56:2a:01:6a:18:4c:a8:42:c4:99:2a:25:db:07:7a:f7:26:a7:f0:29:53:57

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate journee.live

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for journee.live

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

journee.live
*.journee.live

Other certificates including the domain name journee.live

(limited to 100 certificates)
journee.live
clqqiq48z001pxd0tiuil0wcc.go.journee.live
journee.live
clpqq441g011qxn0txhk6bgjb.go.journee.live
*.cluiicn7u03iixe0tfpi0fy68.go.journee.live
cls06c0wk00elx70sfwqxtk0t.go.journee.live
journee.live
api.roboflow.ai
www.3pondsdigital.io
www.wharft.app
*.clqqiq48z001pxd0tiuil0wcc.go.journee.live
web.journee.live
learnjournalism.in
ma.tapcast.io
*.clujme9fv03k5xm0t8x79a1fo.go.journee.live
d-olympus.store
web.journee.live
*.clpqq441g011qxn0txhk6bgjb.go.journee.live
mango.ghostkitchen.net
clmhfxo7h00aovx37d65gkgk3.go.journee.live
bodymap.ai
bodymap.ai
clujme9fv03k5xm0t8x79a1fo.go.journee.live
manual.journee.live
dev.link.block-chat.net
ws.heavenya.com
www.policies.tottak.com
www.blate.app
journee.live

Certificate

The complete raw certificate details for journee.live in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3hYdjRUs9Uvn+7hZCbtl
34GUuEBzEKPUHDH0+re/bVXJJlWK9QGaIZhlVRrkWca8PI13Wftg9g/i7/hmhW4Q
/31iwkLtbXTKu5hKtciFQ8OJEq4MDRIFkwfWmMFyKKqZJaDkYLTK0Nx7nUrU7sz9
Eq59tXmd4nW59f6jG3IQGrUHw/poN10PM+ehP0X60vXMtBk3P3hfSwYiY2LQ18GR
MKvx5h8kwBtWFSArLr54rz2ka9qEbl9saNcoa7cHJtc2Dw2ei4tTnYF9FFu/YOIR
5fO/k1hItgF6lZLCC5+hz/kJl9pa+S3ho0/lJ3F3xipVyNDMiZhhFKqD55f8YRJQ
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15393825641394526231081619843230201953
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'journee.live'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28035809229425671871821064021659122421639040106002123383697600126288460334128936218459392591615499404336514795762106976305579724153140572511058064482004220310069574814200062403722985723027482879639639611373586407513859462897718595480276319173253003415198947073692441687983094075191679266044190176810278225895475640521411270653092050830438375411883378076917382326012893206645994301120964228416735724566889594643341562536824923084841641227614851326344105892560825636902662391385288600858967772375584050072301082449216518949959895457248402038741543136261467716119038094517743989090279005320531340667463265458547802132519
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b53806acfe2487601d9a410c73935a12d6b41991
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'journee.live'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.journee.live'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008640d706bbfc69b7b51331cef84b9a18417794a2e1b963f731cccccac19468bfe88f9e4bfc2e85fb81da1a0ccf072713a1f3f3d4e5e0328c423f58f7d83c0df9057a386b89c6e49a7747b8e330edd57ca9e9b48c8948020efe7d9bd430319d15b21ba8f84f42299ed2ea330c053fbcbf36a8deeca53599c917cae126da5bb93a7accd2b79ecaef9acdc786cb0ad5ad0e7d71d336ab393640af67408228de3b3626a6cb9e03f6114c882b13ba982baa3ce55b1693fff4797db76102c657a3f96af1bae234296abbe0ee82d90c9b25185320f6fe438dcd801b7af898b611043d8cec82170ecf123627272cb763f9a8fe065b168d29a60231ba17b6a17847aaea21