*.weatherflow.com

Issued by Amazon

About this certificate

This digital certificate with serial number 06:91:f8:57:2c:1e:29:c2:1b:45:83:68:b9:b6:38:e0 was issued on by Amazon.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.weatherflow.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:91:f8:57:2c:1e:29:c2:1b:45:83:68:b9:b6:38:e0
Serial Number (int): 8733287963282695003209165038532573408
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: cc:3d:ae:d5:ec:be:05:d2:e0:93:9e:30:9a:e3:51:ff:67:9f:d4:d6
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 6d:3f:c1:dd:1c:b7:cc:44:95:59:06:67:b7:d3:7e:d8:84:93:57:72
Fingerprint (sha256): 1f:03:7e:26:4a:c8:79:1f:65:77:0c:c4:0e:e6:31:27:25:62:ad:ac:ce:56:62:9b:20:8b:cd:70:a5:f4:d9:e0

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.weatherflow.com

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.weatherflow.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.weatherflow.com
*.iwindsurf.com
windalert.com
stormprint.com
iwindsurf.com
fishweather.com
sailflow.com
*.sailflow.com
*.stormprint.com
ikitesurf.com
tempestweathernetwork.com
*.ikitesurf.com
*.tempestweather.com
*.fishweather.com
weatherflow.com
tempestweather.com
*.windalert.com
*.windx.com
windx.com
*.tempestweathernetwork.com

Other certificates including the domain name weatherflow.com

(limited to 100 certificates)
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
www.idiconsultoria.com.br
www.sentoo-sud.tn
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
api.weatherflow.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
laughsavers.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
*.weatherflow.com
firebaseapp.com
firebaseapp.com
*.weatherflow.com
shop.weatherflow.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
mymecho.com
firebaseapp.com
firebaseapp.com
asto.bmapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
*.weatherflow.com
dev.swd.weatherflow.com
help.weatherflow.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
*.weatherflow.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
nike.collagia.ai
firebaseapp.com
user.titanurban.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
viewsme.com
api.weatherflow.com
firebaseapp.com
help.weatherflow.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
live.fruenshus.dk
firebaseapp.com
firebaseapp.com
staging.smartweather.weatherflow.com
firebaseapp.com
*.weatherflow.com
firebaseapp.com
firebaseapp.com
blog.weatherflow.com
firebaseapp.com
firebaseapp.com
dev.coworksapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
help.weatherflow.com
*.weatherflow.com
firebaseapp.com
firebaseapp.com
firebaseapp.com

Certificate

The complete raw certificate details for *.weatherflow.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLiuTYjYS2ko/SmRplh5
HjniYld8+ItOsyfZnOEF2JxHmNN+oGguP62xciZQrHBWKsZ6xq9o7zqY8LeIrGeK
8WfPmSsW5ZVzyvjt0vrOGLbBilLJDaaTvcz4q4tC0YLQjmyLW5Iby70riOzjjtVh
6eslzcL78BxjBzsZpz+MvsuJFaqpeqbRPur6AGxZu1GZCior73e5sHFTZaNy7gD/
Fc/6PqA6VprmppMvcDjbGrl2iILxBHvvedB5VPy9i7cqsGjiYrRm6VNmgYB/M/wo
8am1XjOqkOlUT6QSadjdjqEgq3XfY86odjOcsAqPhf5ndUlgIze1VwDt4kPaIdFC
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8733287963282695003209165038532573408
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-08 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.weatherflow.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21804057985654653654225264632209496522859342812458151951461031073328687721095794151684947184367610594582550262779282487686264448529044944191637077436867356826579464760252405235402567356134554496389848626345982687906565076444461510698128597366663293249962622898367449885970952182362495895173535951310293929341101902607966626312908977901584082591858379308257252953723022682315456420276752764288507780748662284900324205448169107134544558886423408702710028076235619735881048495031293830162361082785539503340093486612881757839636793401862598367724261689505566126639368768583735305508826453992775611032797643032034850980543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc3daed5ecbe05d2e0939e309ae351ff679fd4d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (358 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weatherflow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iwindsurf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stormprint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iwindsurf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fishweather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sailflow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sailflow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stormprint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ikitesurf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tempestweathernetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ikitesurf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tempestweather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fishweather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weatherflow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tempestweather.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.windalert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.windx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'windx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tempestweathernetwork.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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