*.newgen.co

Issued by Amazon

About this certificate

This digital certificate with serial number 0f:ca:73:b7:32:55:37:64:db:02:73:d9:ab:42:01:a3 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.newgen.co

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:ca:73:b7:32:55:37:64:db:02:73:d9:ab:42:01:a3
Serial Number (int): 20989610893633204103339565255657390499
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 37:b4:b8:9f:4f:e6:10:9d:ca:94:6e:3d:01:18:5d:0e:24:27:45:3b
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 7a:e7:5a:e8:82:03:82:09:b2:b5:29:a3:a6:c8:43:0f:f8:de:3f:c0
Fingerprint (sha256): 1d:cd:c3:ca:3d:55:1f:3a:ba:3f:8f:d5:95:c1:ad:9d:67:ef:c2:b1:6b:5b:20:b1:b2:09:a0:d6:31:fa:a0:1e

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.newgen.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.newgen.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.newgen.co

Other certificates including the domain name newgen.co

(limited to 100 certificates)
www.zeroinbox.app
*.newgen.co
app.coughresearch.ai
terrapinchallenge.com
rdm.planoboard.de
cadmiamedical.com
staging.poznej.pingl.app
www.thinkwithin.app
160th.stvincents.nsw.edu.au
findjobfor.me
tri.newgen.co
duck-tap.com
ibakurov.com
customer-connect.cookdup.com
lifeium.app
showroom.next-audit.de
www.houstonathleticscamps.com
trailseeker.app
weekincardano.com
glamup.cl
jerrypenaflorida.com
app.campaignguru.app
genrephile.com
get.meterie.com
worksp.com
analytics.playshifu.com
demo.redacted.ai
demo.redacted.ai
app.divdot.com
advisor.im
leaderonline.uz
www.mandawin.co
www.eatingkindly.com
bookin.newgen.co
airtables.app
staging.wayfind.health
brianwool.com
www.telstonandmereworth.cc
*.newgen.co
mob.newgen.co
t.vipaylife.com
giacapp.com
sourcethe.coffee
payee-link.likid.co.jp
smart-0000sm.ekitan.biz
www.fastapp.com.ec
timothyjordan.me
ebcard.business
thecompendium.cards
fl-moldexperts.com
www.ovidiu.nl
mellow.love
giacapp.com
prefeituras.nfe.io
web.remote-work.app
myownbook.newgen.co
www.frycsa.com.mx
note.doando.club
holidaysportsmanshow.com
lane-test.oresundsbron.com
www.kamdhenusweets.co
app.bitpong.it
www.lantheusvirtual2020.com
*.newgen.co
findjobfor.me
bloo-management.com
www.selvam.net
ey3k0n.io
nicenboim.com
www.organizados.com.br
*.newgen.co
astrofetus.space
pepperwinervpark.org
trindiasourcing.newgen.co
tabingo.com
staging.givebee.co
www.daedalus-cnc.com
kruispunt.citolab.nl
apnetruck.com
dev.tomilkieway.com
www.tacstorm.com
www.adop.co.jp
tabilabo.co.jp
ajhp.newgen.co
0b.sk
www.cercanosapp.com
*.newgen.co
zeropad.net
get.pixapuzzle.app
memeshoot.com
admin.civitime.com
slugtrack.org
www.findmy.contractors
ys.app.qnnre.work
www.hungryguygames.com
www.writeboardtechnologies.com
analicebarreto.com.br
toi-life.com
www.elarose.com
daviddevdunn.co.uk

Certificate

The complete raw certificate details for *.newgen.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPKlMAdLfwSkOjQX8fdk
hF+nPba6RNFHDTo31UhuOksRXv4nxQxGF1YKZ/8h49VmOptWq7322Rm2vQc1IpwX
Z8SSspRL+SyeqO1v87X1B07tJYig4NudC7JZwXvW6jydVkDvsE8dfCyT4BSDc4H0
9fFAWpG02TlG6ovmxmJ6HmNUm+asVy2Zyfu5sJKeJnWP+eOQZpG8A3JWzNBriI/d
m+F2NeETzMK7kEwptxqGunPumynfsNPjLRyQm7N+JHUK/i01FM3IHSPamvPcmfJM
W6Bg9xYjBtvNAq7iwp1WgXvMoTXj/DUM3TUBCBsHEbLTM85cFbcBIPHPFQJdi/zS
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20989610893633204103339565255657390499
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.newgen.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18802921974230072897175303660996584532548123919982079719111434395128733891883381611636837169008656547550658561216245880288216996134774754946121159545456689464031106111874443121175371352143692839401196945176020727430325118310937883083741274978814018726642622130183647392583362536118301568435734236278297402079350358607992257523256767312193274922448806614029896940214407540165532124160843120202950376867134762191124900978023596318755860566649192722765540294094301312110621570442321523846698096635343337969835315630075384916138765532132246287140413018496120499719803507402996330737769520166424515979678214061914006016617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							37b4b89f4fe6109dca946e3d01185d0e2427453b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newgen.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000168b78562250000040300483046022100e80651beaeff31777f01ace7a507bdc187057598517eabf9c672b70de5c2d190022100f835f3f943bb5943ae60fd041a315fee4dca6645d627b66da8d695654391b4ec0077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000168b785630d000004030048304602210086f6de348023e74ccbf992106a3aecee7e7415b23ce05b00a8b2c67604c1c1f0022100c2f38385e7a50efa179fce821cea68af7a6cc3709bb4a8366b4e5780a9bbe254
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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