witchernetflix.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 0c:c4:26:40:08:66:31:88:37:f1:21:3f:0f:98:9f:ce was issued on by Amazon.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=witchernetflix.com
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:c4:26:40:08:66:31:88:37:f1:21:3f:0f:98:9f:ceSerial Number (int): 16969201938458580787348725045187354574
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 8a:89:c8:85:59:3d:58:8c:8c:ec:39:5e:fd:b6:d7:be:1e:03:0d:ef
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): de:21:43:c2:43:aa:63:b3:2e:9c:31:5d:24:5f:e8:f8:25:64:32:0b
Fingerprint (sha256): 1f:00:f4:ac:b7:1c:32:9a:d5:ff:36:3f:74:71:a3:4f:eb:76:07:dd:18:e7:69:a6:fc:31:c8:1b:6a:58:e8:50
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate witchernetflix.com
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for witchernetflix.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
witchernetflix.com
www.witchernetflix.com
www.wiedzminnetflix.com
wiedzminnetflix.com
www.witchernetflix.com
www.wiedzminnetflix.com
wiedzminnetflix.com
Other certificates including the domain name witchernetflix.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for witchernetflix.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGFzCCBP+gAwIBAgIQDMQmQAhmMYg38SE/D5ifzjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMDIyODAwMDAwMFoXDTIzMTIxNzIzNTk1OVowHTEb MBkGA1UEAxMSd2l0Y2hlcm5ldGZsaXguY29tMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAo1W8ES335YnlCS+luiDf0+fkYtp1wldPKup2a+Nz8gm79ssz rNe0u1NhmMX6fHYEHXMeYxKgNd1ax03+xbnLqdZ1B95L/FahIv3m5W3H48Dr5kWg 7Oodi49H68kyFvFoCRtXvlGL0qMGa2ChYPJl+k47rAwzAFxTbkl0KJV7Bsoi5PSV RI7SdEdpbDVGt1zlvJZyGSKyq/YieGVSUl8v/BMYhovO8giCDrBnSfDpmyhvGOZz yJ22HPKqka4zkyvx0iWgFE6cA38fRzrbZQLrooetScnQX5jFEOlOMa2N8g7rd1rf FfOblIqxTd9MNb1/29Xjb0S7aq5Lhn1EFKHPaQIDAQABo4IDMjCCAy4wHwYDVR0j BBgwFoAUwDFSzVpQw4J8dHHOy+mc+XrrguIwHQYDVR0OBBYEFIqJyIVZPViMjOw5 Xv22174eAw3vMGMGA1UdEQRcMFqCEndpdGNoZXJuZXRmbGl4LmNvbYIWd3d3Lndp dGNoZXJuZXRmbGl4LmNvbYIXd3d3LndpZWR6bWlubmV0ZmxpeC5jb22CE3dpZWR6 bWlubmV0ZmxpeC5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAy LmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEw dQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMi5h bWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDIuYW1h em9udHJ1c3QuY29tL3IybTAyLmNlcjAMBgNVHRMBAf8EAjAAMIIBfwYKKwYBBAHW eQIEAgSCAW8EggFrAWkAdwDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9 bgAAAYaYNHfWAAAEAwBIMEYCIQCWU5jVcmSWq4pOMLse7fZS/Ln3fBD0qjCe1ohr nVCO2gIhALUdZhyPQ6Z5Sednp0HUv8KxMXHG0p18+alLb+AbVqfpAHYAs3N3B+GE UPhjhtYFqdwRCUp5LbFnDAuH3PADDnk2pZoAAAGGmDR4UAAABAMARzBFAiEA0XlA hX3PDT/NKiWZPXw0TN2cb/qmacYNoIkyi25hyr4CIBlaJXskvurqMpMgwZRvEapT rBNTSsH4qv+qfROf3cUYAHYAtz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXt tJkAAAGGmDR3/QAABAMARzBFAiBGcvrpblKexgXxWRayuYTm76I4jSO5R/bzUBRn PK5enwIhAPrcusozpCAiMFKekKfE22meJmQrVMEE3xzImwBOMz7KMA0GCSqGSIb3 DQEBCwUAA4IBAQCmNaRTA83LI25dZtL0pfBTiaQLYbQ8iaKbaR+TCGi9p++1FVMt rdqcC1ksNMs8r6985JdRmtB4+vbRhN5Ur4vKZiLw8nKH5kojGKNEA4+Sn6v+olgJ Zn28ehsHQy3Dv/JJLD0vDdWl4E3udG0LbSDB4Kwa2cP771whjabjJTGl38ReiYiO hmXhndOj3b/WKIoVbAqveWdCCFIND291z6jMk+AMwhVI8M553RIesyUipwHSnlPi KCOPguu+RFgbtiRRw/ilXwDGWDB/om2v64iNVUBnTd2vCu9mCCyvTXbU5FwYIRhF t0X2ezdvGFtakICUQgmCcrMyuKBKdIPcW+bI -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo1W8ES335YnlCS+luiDf 0+fkYtp1wldPKup2a+Nz8gm79sszrNe0u1NhmMX6fHYEHXMeYxKgNd1ax03+xbnL qdZ1B95L/FahIv3m5W3H48Dr5kWg7Oodi49H68kyFvFoCRtXvlGL0qMGa2ChYPJl +k47rAwzAFxTbkl0KJV7Bsoi5PSVRI7SdEdpbDVGt1zlvJZyGSKyq/YieGVSUl8v /BMYhovO8giCDrBnSfDpmyhvGOZzyJ22HPKqka4zkyvx0iWgFE6cA38fRzrbZQLr ooetScnQX5jFEOlOMa2N8g7rd1rfFfOblIqxTd9MNb1/29Xjb0S7aq5Lhn1EFKHP aQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16969201938458580787348725045187354574 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-17 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'witchernetflix.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20619121034738455844933757220296774931385973497211686342541105256236691494240868527590624782262390967025900113365331172759015364648916383060844960301022286165085225274084118180133229307715172560098860636127410871197935516301032577352665289258654171565137111104663429405257006952689423641201192110609586391746902685857300668634030374411459930155114761397099209790246014211474109359537382392461847449826175158914364305409082846456490949792104293711007017713892199940738580631716588655612509217330062395755453485584686024573458842763286528513531557347238860652532782229711318775407681062851312051010223835099190320549737 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8a89c885593d588c8cec395efdb6d7be1e030def . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'witchernetflix.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.witchernetflix.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wiedzminnetflix.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiedzminnetflix.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 0169007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000186983477d60000040300483046022100965398d5726496ab8a4e30bb1eedf652fcb9f77c10f4aa309ed6886b9d508eda022100b51d661c8f43a67949e767a741d4bfc2b13171c6d29d7cf9a94b6fe01b56a7e9007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000186983478500000040300473045022100d17940857dcf0d3fcd2a25993d7c344cdd9c6ffaa669c60da089328b6e61cabe0220195a257b24beeaea329320c1946f11aa53ac13534ac1f8aaffaa7d139fddc518007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000186983477fd000004030047304502204672fae96e529ec605f15916b2b984e6efa2388d23b947f6f35014673cae5e9f022100fadcbaca33a4202230529e90a7c4db699e26642b54c104df1cc89b004e333eca . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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