leads.idigitalstrategies.com

Issued by Amazon

About this certificate

This digital certificate with serial number 08:5f:7c:94:c4:f4:40:84:8c:b6:30:0c:48:c2:6b:98 was issued on by Amazon.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leads.idigitalstrategies.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:5f:7c:94:c4:f4:40:84:8c:b6:30:0c:48:c2:6b:98
Serial Number (int): 11129618973353385027729455753212357528
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d9:d3:c1:20:41:b6:15:88:e1:49:0f:ba:b9:e7:7c:f1:79:f0:22:7a
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 93:fa:55:b8:81:e1:c1:33:c2:e9:9a:9b:f6:03:66:1e:57:11:de:ab
Fingerprint (sha256): 1f:4d:61:e7:b2:0f:7c:1e:e5:57:b7:2d:5c:6d:f0:93:6e:a2:83:62:2b:34:29:23:7a:af:cc:d3:d8:7f:3a:fd

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate leads.idigitalstrategies.com

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leads.idigitalstrategies.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

leads.idigitalstrategies.com
leads.ketaminemedia.com
leads.tmgusa.com
lunchboxwax.my-leads.net
leads.pplpractice.com
leads.jcidm.com
leads.seohermit.com
stats.thenewind.com
leads.beupstream.com
leads.puregoldads.com
digitalleads.rightnowheatcool.com
dumpstor.my-leads.net
leads.patternseo.com
leads.prolifikmarketing.com
leads.shiftmarketing.net
leads.pacificfinancialinc.com
leads.hypelegal.com

Other certificates including the domain name idigitalstrategies.com

(limited to 100 certificates)
leads.idigitalstrategies.com
leads.idigitalstrategies.com
calls.omg.re
calls.omg.re
leads.idigitalstrategies.com
leads.idigitalstrategies.com
*.idigitalstrategies.com
leads.idigitalstrategies.com
calls.omg.re
calls.omg.re
leads.idigitalstrategies.com
leads.idigitalstrategies.com
calls.omg.re
leads.idigitalstrategies.com
leads.idigitalstrategies.com
*.idigitalstrategies.com
leads.idigitalstrategies.com
*.idigitalstrategies.com
leads.glcdigitalmarketing.co.uk
calls.omg.re
calls.omg.re
leads.idigitalstrategies.com
leads.idigitalstrategies.com
leads.idigitalstrategies.com
calls.omg.re
calls.omg.re
leads.idigitalstrategies.com
mail.idigitalstrategies.com
calls.omg.re
leads.idigitalstrategies.com
leads.idigitalstrategies.com
support.idigitalstrategies.com
calls.omg.re
calls.omg.re
leads.idigitalstrategies.com
calls.omg.re
calls.omg.re
calls.omg.re
leads.idigitalstrategies.com
leads.idigitalstrategies.com
idigitalstrategies.com
leads.idigitalstrategies.com
calls.omg.re
leads.idigitalstrategies.com
leads.idigitalstrategies.com
leads.idigitalstrategies.com
leads.idigitalstrategies.com
leads.idigitalstrategies.com
calls.omg.re
calls.omg.re
leads.idigitalstrategies.com
idigitalstrategies.com
leads.idigitalstrategies.com
calls.omg.re
leads.idigitalstrategies.com
calls.omg.re
leads.idigitalstrategies.com
*.idigitalstrategies.com
calls.omg.re
leads.idigitalstrategies.com
calls.omg.re
calls.omg.re
leads.idigitalstrategies.com
leads.idigitalstrategies.com
calls.omg.re
calls.omg.re
leads.idigitalstrategies.com
leads.idigitalstrategies.com
calls.omg.re
leads.idigitalstrategies.com
leads.idigitalstrategies.com
leads.idigitalstrategies.com
calls.omg.re
calls.omg.re
leads.idigitalstrategies.com
calls.omg.re
calls.omg.re
calls.omg.re
leads.idigitalstrategies.com
leads.idigitalstrategies.com
calls.omg.re
leads.idigitalstrategies.com
leads.idigitalstrategies.com
calls.omg.re
calls.omg.re
calls.omg.re
calls.omg.re
leads.idigitalstrategies.com
calls.omg.re
calls.omg.re
leads.idigitalstrategies.com
calls.omg.re
leads.idigitalstrategies.com
calls.omg.re
leads.idigitalstrategies.com
calls.omg.re
leads.idigitalstrategies.com
calls.omg.re
leads.idigitalstrategies.com
idigitalstrategies.com

Certificate

The complete raw certificate details for leads.idigitalstrategies.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrhP+IEzOOQgiQdJg+Kv
rZtDpM8Qf+XM0QCozZOA0dw4hjESDOLzFBo/q3NGgYuLOjL5PZejKjgw6PFc/abF
959mwdaFLx8g5febr3gXiJp10cq/uoq/hAjE027FlKC1bhPqsCE7VkU2mgB7Bvn7
KOYik7F7S+t8msIOfALfaUM12YGqg/7g5dTLNf4Pn81KPrjsf2KiT6ys8QYraob1
unq41h7KasdgbA05+Qkqc1VkPYkEHGTpN0yjqcJymIzUJiLvQM18PIzHdbo0j23U
4K5IpaBlQnaMH7ZW1wTWcr9/0Pzrk0+su3onvbIow7NodExw1E7PTrD/gSo7i5WH
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11129618973353385027729455753212357528
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leads.idigitalstrategies.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22561306108748509362554363352071842795363057046419491701992547501236014305607161970485908390243894617513095467359253812904802861340286864285435699218852202445166250587136639557372125148612340506196277456029911784340079736493353588996153590388399148093245505372912520264604083899093839704877855673160568823047852160261437222083750981944572741501505377965048137561884741145998929861574717426740902312706333320827288684329290462011376981063303472371335375440393738330663120173022417469408017063885858184685240091720844907955228860403401741797881048856808010282528150453126239380433115728656640790362918608314968462165929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9d3c12041b61588e1490fbab9e77cf179f0227a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (417 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.idigitalstrategies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.ketaminemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.tmgusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lunchboxwax.my-leads.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.pplpractice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.jcidm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.seohermit.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stats.thenewind.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.beupstream.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.puregoldads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalleads.rightnowheatcool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dumpstor.my-leads.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.patternseo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.prolifikmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.shiftmarketing.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.pacificfinancialinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.hypelegal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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