www.nixchallenge.nl

Issued by Amazon

About this certificate

This digital certificate with serial number 09:df:ac:b7:f5:9c:0b:3a:27:13:08:cd:1b:43:e3:ae was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.nixchallenge.nl

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:df:ac:b7:f5:9c:0b:3a:27:13:08:cd:1b:43:e3:ae
Serial Number (int): 13124437310735550467830758468835599278
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ea:40:79:53:57:1e:dd:c6:e3:be:dc:da:3e:50:42:1b:bf:37:53:4b
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): d6:2b:b3:67:6e:e9:31:87:65:b4:f8:8a:48:a4:8f:0f:02:09:89:a2
Fingerprint (sha256): 15:84:96:a4:59:cc:3c:30:45:be:5b:6e:00:82:f5:11:fa:95:99:b3:25:68:84:cf:36:d8:81:8d:8a:7a:a7:ae

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate www.nixchallenge.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nixchallenge.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nixchallenge.nl

Other certificates including the domain name nixchallenge.nl

(limited to 100 certificates)
lokals.co.uk
digitalgoose.io
link.eco99-prod.moveodevelop.com
suludev.corp-internal.rxo.com
www.preguntaz.com
www.countingdowntocoble.com
schnelltest.care
01010000.tech
redthemes.net
mutcho.app
gaplite.redsos.com.ar
www.quehry.com
events-september-2022.amfa.net.au
www.nixchallenge.nl
nixchallenge.nl
www.federicofumo.com
premiocapitolium-roma.it
rustfish.com
www.gotakeout.ca
www.findhamza.xyz
firebase.hendrasaputra.com
www.federicofumo.com
inh-elgrancatire.elinmejorable.com
www.naoztd.com
e-learning.nixchallenge.nl
livego-stg.vonder.io
www.stissingtheatreguild.org
www.nixchallenge.nl
biotechhoney.com
dranna.takeaction.co
www.naoztd.com
beta.motormerchants.com.au
badassxxx.com
badassxxx.com
biotechhoney.com
blog.wharfstreetstudios.com
nixchallenge.nl
www.findhamza.xyz
gall-gall-finale.nixchallenge.nl
ozturkmakina.com.tr
liberty-live.anevent.co.za
moku-jp.com
www.oakwavephotography.com
comptametrics.com
subscription.timeyrd.com
www.quehry.com
lemonbox.nl
new.eestec.ro
www.nixchallenge.nl
e-learning.nixchallenge.nl
www.carvalhoneves.com.br
cgc.maresto.id
api.nixchallenge.nl
short.mimic.eu.org
ovellocapital.com
www.hellovia.id
link.eco99-prod.moveodevelop.com
hillcharts.speedledger.net
www.honest.poker
naoto.bando.page
hub.veamstudios.com
info.2cl.com.br
www.lighthousetowels.com
admin.golfinity-app.com
inh-creamburguer.elinmejorable.com
eymir.zeplinx.com
www.jesplumbing.com
products.candbdev.com
vestedinterest.app
vishalsingh.xyz
yadidi.donyaplatform.com
links.selectcitywalk.com
nicolatiani.com
bombayspice.com.au
admin.ppdb.edutech.web.id
ayaandhir.com
www.nixchallenge.nl
hello.glmachado.com
windupmusic.ca
comptametrics.com
www.jamieson.app
s-kino.cedricmeyer.eu
mgemipartner.com
www.countingdowntocoble.com
antiguacatcafe.com
www.nixchallenge.nl
www.epsmachineindia.com
hillcharts.speedledger.net
www.nixchallenge.nl
www.nixchallenge.nl
sandy.chabbaman.com
falcodev.com.br
www.hellovia.id
www.jamieson.app

Certificate

The complete raw certificate details for www.nixchallenge.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47x9CFcVP5uHpeTPpGnW
0lkKkLPY1fOtwPWodpcMvFOK9Qic8SAWPBP34ttsj7dHGdRkpg3X5FokYUnQkY1w
a+oTDlYvC2K0PtQgkjzvQiFRpqk5nl09IoEhBqt3N58AqeOd9Nd+BNNezbiQazQf
8kP6sQOWSSq7WQkOh146n24obbvlr50mmBma9/M51BFpV3PcX7nSjqE4GLaiXn4k
fwwjcjbnOESTubBWo4nZle7BNXUGbgY7wmLBvsZD37qgzl4Ouk6lq8ySTZB0nE6B
tnMSSTRy+sNwp5QaohLOhaB8ioQGIpivuYk+Vbid5GdHojDe0ZgF4/1luZy9xCTP
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13124437310735550467830758468835599278
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nixchallenge.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28749042325717813017624195376761633351799283883523511597716179225869418297122030380555671614210118955627046489010869636736624126622583031976121282311966007614040904747727409883472639945036328171273377966640215779896700365986782321217441403848777501371822095303205378546405844600007766931466568453937668029650192313284328654113795429214478411738886007588853808801119965949734120820325347095485906712694736070225632868607617020767420416169150234928058485655350938393023595252267652646180650564984584483921298716603517734015035436977628402013645398714923517380247787105497671328336733679791544148164627780747849552416579
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ea407953571eddc6e3bedcda3e50421bbf37534b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nixchallenge.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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