academy.frdstr.com

Issued by Amazon

About this certificate

This digital certificate with serial number 02:fa:13:f7:ca:de:c6:41:66:3d:89:ad:f3:cc:af:9a was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=academy.frdstr.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:fa:13:f7:ca:de:c6:41:66:3d:89:ad:f3:cc:af:9a
Serial Number (int): 3956935204127438808804999291720216474
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 4e:78:a2:07:8c:ec:db:aa:61:ac:5e:a6:2c:9d:28:86:34:89:76:78
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 28:66:3a:d5:7c:ff:42:9e:cf:69:4f:34:de:db:63:58:e6:98:e9:32
Fingerprint (sha256): 18:e3:fe:6a:37:2c:00:03:c1:dc:1f:a4:05:25:d9:c6:09:7a:28:03:89:ea:f5:4d:24:aa:ee:49:b5:67:85:ce

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate academy.frdstr.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for academy.frdstr.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

academy.frdstr.com

Other certificates including the domain name frdstr.com

(limited to 100 certificates)
redash.frdstr.com
prod-accounts-es-writer.frdstr.com
orizon.coleta.relatoweb.com.br
monitor.frdstr.com
storm.frdstr.com
rfpxer.frdstr.com
stagingportal.frdstr.com
hq.frdstr.com
artifactory.frdstr.com
cr0n.frdstr.com
three-ds-new.frdstr.com
sites.use.frdstr.com
tableau.frdstr.com
dev.atlas.frdstr.com
prod-enrichment.frdstr.com
squid.frdstr.com
prodreindex.es.frdstr.com
*.es.frdstr.com
toolbox.frdstr.com
docu.frdstr.com
hq.frdstr.com
prod-sessions-es-writer-f.frdstr.com
squid.frdstr.com
spectator.frdstr.com
ptrend.frdstr.com
chuck.usw.frdstr.com
prod-sessions-es-writer-l.frdstr.com
monitor.usw.frdstr.com
geocodio.frdstr.com
estest.frdstr.com
redash.frdstr.com
hq.frdstr.com
sessions-persistence.frdstr.com
prod-enrichment.frdstr.com
sites.usw.frdstr.com
cr0n.frdstr.com
prodintents-euw.es.frdstr.com
artifactory.frdstr.com
cr0n.usw.frdstr.com
cr0n.frdstr.com
rugatkins.use.frdstr.com
stagingportal.frdstr.com
prod-vault-helm.pcimon.frdstr.com
prod-vault-helm.euw.frdstr.com
accounts-storm-realtime.frdstr.com
historun-enrichment-google-proxy.frdstr.com
prodfp.usw.frdstr.com
academy.frdstr.com
portal.frdstr.com
docu.frdstr.com
dev-consul-api-gwsame-vpc.frdstr.com
claims.frdstr.com
prod-consul-api-gwsame-vpc.frdstr.com
dev-vault-k8s.frdstr.com
monitor.frdstr.com
prod-sessions-es-writer-l.frdstr.com
confetti-ui.use.frdstr.com
squid.frdstr.com
tableau.frdstr.com
prod-kafka-rest-proxy.frdstr.com
techradar.frdstr.com
dev-confetti.frdstr.com
artifactory.frdstr.com
cr0n.use.frdstr.com
smart-logic-policy-payload-maintainer.frdstr.com
develop-netservices.frdstr.com
stagingportal.usw.frdstr.com
dali.lightstream.euw.frdstr.com
gozer2.frdstr.com
thanos-querier.use.frdstr.com
gozer.frdstr.com
adaptive-auth.frdstr.com
prodintents-euw.es.frdstr.com
sigmund.frdstr.com
logging-kibana-public.frdstr.com
prod-tasks-md-writer-high.frdstr.com
redactor-staging.frdstr.com
enrichments.frdstr.com
sigmund.use.frdstr.com
batchman.frdstr.com
confetti.frdstr.com
squid.frdstr.com
*.es.frdstr.com
o11y-cert-frdstr.frdstr.com
pushgateway.use.frdstr.com
stagingportal.frdstr.com
dev-cyber-ip-enrichment.frdstr.com
status.use.frdstr.com
portal.frdstr.com
historun-enrichment-google-proxy.frdstr.com
prod-eh-a-tp-es-portal-w.frdstr.com
heimdall-dashboard.frdstr.com
alertmanager.use.frdstr.com
stagingportal.frdstr.com
prod-consul-api-gw-okta.frdstr.com
stagingportal.use.frdstr.com
stagingportal.frdstr.com
dev-consul-api-gw.frdstr.com
redash.frdstr.com
stagingportal.frdstr.com

Certificate

The complete raw certificate details for academy.frdstr.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLl1ho0buBKRGs+/wTnh
q6Bo5rxNfzmOI7odzMGByMUsNZBPqbuyuFJzHqCggai/OTao+4kXCbM/92xan8XN
8wMX/Gon2OOV3P1VJRcG59jAf6lmftqIpvsHOObV5xp7aYB7k9yuHJbgLB5d7SzS
DCDmklCCR9/D2tSBd5NmFigs1j9Dc7CdbI42D65VmQpxauhSu0DTTY75PYadqrsg
PfuFOz7Zr3gi/u2s8Uz2OLgmnZ+Ln05ZtKVFdi7qZ3zTW2wvkl8yZD5zZvOBnvoK
W+k74PAFIrN2F0Dp4kKPCj+PWjAe7dCjBXu+ZtKR/K3V9rD+LF36LNrtb7C7+eOy
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3956935204127438808804999291720216474
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'academy.frdstr.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25844067496073780700844083930604214099163496192295319836205987176529666144788420949484714326656430487558974761883642507614983723443403603729952725540112825864116757859769035449860023323450895822026284152867167248058865806995974753981031709427992093989222223568384084298818305919028985293853735178660190537941897584549106301138685811988178778626047884227418694814321716465612894845977014515536048584587831911945059005536234786476713529648208804570241153995137404378856623962722038845195961003072325677118563799684668657321301824764082850929076242125918202095283318584551824052689117149204628636037106044143937494692449
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4e78a2078cecdbaa61ac5ea62c9d288634897678
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'academy.frdstr.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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