upload.fire.com

Issued by Amazon

About this certificate

This digital certificate with serial number 08:a3:91:d3:58:5a:75:30:28:c1:b8:ae:ed:1c:31:e5 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=upload.fire.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:a3:91:d3:58:5a:75:30:28:c1:b8:ae:ed:1c:31:e5
Serial Number (int): 11483126048099361481970357426632536549
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ec:40:de:0b:0f:c2:83:3f:b4:33:22:a3:35:93:93:f5:9f:c2:47:68
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): e7:d1:24:fa:76:11:04:af:a2:bc:2f:99:67:fd:7c:45:ef:4a:a2:0d
Fingerprint (sha256): 15:6a:0b:35:50:52:14:09:55:2b:9c:6d:f7:28:ac:b8:da:0d:2f:cb:b7:8b:da:57:5f:b1:81:df:0a:0c:da:4e

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate upload.fire.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for upload.fire.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

upload.fire.com
static-upload.fire.com

Other certificates including the domain name fire.com

(limited to 100 certificates)
*.test.fire.com
fire.com
fire.com
www.viveportstatus.com
fire.com
www.viveportstatus.com
*.test.fire.com
docs.fire.com
www.viveportstatus.com
business.fire.com
business.fire.com
business.fire.com
www.viveportstatus.com
fire.com
www.viveportstatus.com
dia-api.fire.com
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
dia.fire.com
docs.fire.com
www.viveportstatus.com
fire.com
upload.fire.com
www.viveportstatus.com
www.viveportstatus.com
fire.com
fire.com
*.fire.com
fire.com
www.viveportstatus.com
www.viveportstatus.com
fire.com
fire.com
fire.com
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
docs.fire.com
dia-api.fire.com
donate.fire.com
dia-api.fire.com
fire.com
www.viveportstatus.com
www.fire.com
www.viveportstatus.com
donate.fire.com
fire.com
fire.com
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
fire.com
fire.com
www.viveportstatus.com
fire.com
fire.com
www.viveportstatus.com
fire.com
fire.com
fire.com
fire.com
fire.com
www.viveportstatus.com
upload.fire.com
fire.com
www.viveportstatus.com
www.viveportstatus.com
fire.com
fire.com
www.viveportstatus.com
status.fire.com
www.viveportstatus.com
donate.fire.com
www.viveportstatus.com
donate.fire.com
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
fire.com
bol-gateway.test.fire.com
fire.com
www.viveportstatus.com
www.viveportstatus.com
*.fire.com
fire.com
www.viveportstatus.com
donate.fire.com
fire.com
docs.fire.com
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
*.fire.com
www.viveportstatus.com
www.viveportstatus.com

Certificate

The complete raw certificate details for upload.fire.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF7jCCBNagAwIBAgIQCKOR01hadTAowbiu7Rwx5TANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjAxMjgwMDAwMDBaFw0yMzAyMjYy
MzU5NTlaMBoxGDAWBgNVBAMTD3VwbG9hZC5maXJlLmNvbTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAMHbKLCGyUM3DqcIi7+1oiwEOt01cMs6XLHVksZc
SWlr1uQQ2efH0bbZEq/mme6pbh2opOqb9NKUH0Sb83LTdM941EGNiuYShH+xzI/s
8FdmXNEHso5BgnV0S6ayXSLUO3X8cQA7vIpTMvxaRN/i8AF8ABk7LZ0ffnVaAsxT
eunknBn/+y3m2Gyw5cLrWhDNxewE4U/owpdjY4vmdu4MhhXDxsn5u3t3dT0TNyJV
xuAJV5oVQB54IGX/nhL6XuujkJw8T6qqupy9Lrj3M0LGnDYFf5f/k4NjFBWrlbMv
1Rpdoqy5vfVcC/phc1B10UBM3Kp37jwaUbeDH8NotSM7SbkCAwEAAaOCAwIwggL+
MB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBTsQN4L
D8KDP7QzIqM1k5P1n8JHaDAyBgNVHREEKzApgg91cGxvYWQuZmlyZS5jb22CFnN0
YXRpYy11cGxvYWQuZmlyZS5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjA9BgNVHR8ENjA0MDKgMKAuhixodHRwOi8vY3Js
LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi0xLmNybDATBgNVHSAEDDAKMAgG
BmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3Nw
LnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5z
Y2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAwggF+
BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2AK33vvp8/xDIi509nB4+GGq0Zyldz7EM
JMqFhjTr3IKKAAABfp4T8ZcAAAQDAEcwRQIhAJRgsOcUPmgPxrOcJzoPFu8ZlhPw
UjXx6LGHKCdOdzcSAiBGEdb3CJ+Mhlj4D+12KZhVh4iIvyRdZK34yMt1G8MvmAB2
ADXPGRu/sWxXvw+tTG1Cy7u2JyAmUeo/4SrvqAPDO9ZMAAABfp4T8YMAAAQDAEcw
RQIhAPSWtI5vkv9W4zk/o+Li7s8n/lf5VsVKWlLSv7Pm5RtEAiAEzI40wI9yDoZy
VeaZYjBWNV1DnY21c5nfqa4/N/O+zAB2ALNzdwfhhFD4Y4bWBancEQlKeS2xZwwL
h9zwAw55NqWaAAABfp4T8bQAAAQDAEcwRQIgZCSYpQM1xbyCSnSi4az2TAibxW6k
0+HVeBR0ZljHEpsCIQDjwxpLxGXSL4aYP2oPgDhZ++MTArpTa0JEaPnGqFPjqzAN
BgkqhkiG9w0BAQsFAAOCAQEAOJP8suCYlzEfUBeVLbaLHNSq2Q1kT1z9iw23NfgY
HQvqG5R0IIJKHCqD1uKSeb1QzWyJwOVmmopK8vGrvXeWu5mpYxTERHVyQCGzb5Bb
N/TjvZ4LWL4kepTwex3+v/UKCXujYB8ONDmrkZkrz1IR85bYsjsOTAuT0q57sInV
r/Mw+UXlAH7kFHT+2zdjJUmEtv1QqL0vtFsL+C9mV0s/p1kfVaeXXZuzVDDcqf38
NrcOvFaf43JuhidD8wucrjVe/xcHaHq193B+PN8DPNZGNcMkpSEw2byTp0BMw1VQ
RlcpRQ0+W38nwJwHeMT/B4j83IGeIQ7DeOuxy+eoOijvzQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdsosIbJQzcOpwiLv7Wi
LAQ63TVwyzpcsdWSxlxJaWvW5BDZ58fRttkSr+aZ7qluHaik6pv00pQfRJvzctN0
z3jUQY2K5hKEf7HMj+zwV2Zc0QeyjkGCdXRLprJdItQ7dfxxADu8ilMy/FpE3+Lw
AXwAGTstnR9+dVoCzFN66eScGf/7LebYbLDlwutaEM3F7AThT+jCl2Nji+Z27gyG
FcPGyfm7e3d1PRM3IlXG4AlXmhVAHnggZf+eEvpe66OQnDxPqqq6nL0uuPczQsac
NgV/l/+Tg2MUFauVsy/VGl2irLm99VwL+mFzUHXRQEzcqnfuPBpRt4Mfw2i1IztJ
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11483126048099361481970357426632536549
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'upload.fire.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24472064161401606675131302372736223518330138541028594319520367234697410144141017750914085702772238790253437410328694059914489295779163129944049482299687075335491651229066479481646070217962906144081312819904146125471070449916292431755799188253776097451142104436818254355460724778721109961858723518850673060739856855773421447254728154236457693904674928595207835125919156949041278245374943547351702328595384211929546930739952685403863690742595895338687015012547174840869013487973085672893786935881808803168238354408699800201509014480351743914288540986547344004095944894443138377022685909819800876826905685501473927678393
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ec40de0b0fc2833fb43322a3359393f59fc24768
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upload.fire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-upload.fire.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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