admin.web.fitpregnancy.com

Issued by Amazon

About this certificate

This digital certificate with serial number 08:0d:38:3b:3f:9d:5a:e6:3e:e4:b2:6f:b7:a1:95:71 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.web.fitpregnancy.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:0d:38:3b:3f:9d:5a:e6:3e:e4:b2:6f:b7:a1:95:71
Serial Number (int): 10702464334527458810231786648977380721
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ed:4a:56:f2:63:a6:d6:55:f5:c6:43:26:73:dd:90:a1:f1:7d:ab:bf
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 99:aa:72:bc:5b:1c:1d:3d:21:81:14:88:2f:fe:ce:a6:a6:fe:cc:ae
Fingerprint (sha256): 20:ea:4e:9f:7b:b6:e5:7d:50:f2:ef:44:58:3b:e4:5a:61:09:9c:0c:59:2a:b2:db:b7:dd:3c:a5:54:9d:d7:3b

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate admin.web.fitpregnancy.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.web.fitpregnancy.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.web.fitpregnancy.com
*.admin.web.fitpregnancy.com

Other certificates including the domain name fitpregnancy.com

(limited to 100 certificates)
qa4.ugc.marthastewart.com
*.secure.meredith.com
secure.meredith.com
my.meredith.com
qa4.ugc.marthastewart.com
fitpregnancy.com
*.agriculture.com
dev.fitpregnancy.com
dev.secure.meredith.com
secure.meredith.com
dev.fitpregnancy.com
mywedding.com
secure.meredith.com
mywedding.com
login.fitpregnancy.com
qa2.ugc.marthastewart.com
mdp.api.meredith.com
secure.meredith.com
fitpregnancy.com
admin.web.fitpregnancy.com
qa4.ugc.marthastewart.com
ugc.marthastewart.com
secure.meredith.com

dev.fitpregnancy.com
secure.meredith.com
qa3.ugc.marthastewart.com
ugc.marthastewart.com
test.secure.meredith.com
www.fitpregnancy.com
qa3.ugc.marthastewart.com
ugc.marthastewart.com
secure.meredith.com
*.secure.meredith.com
origin-dev.fitpregnancy.com
secure.meredith.com
fitpregnancy.com
qa3.ugc.marthastewart.com
origin-www.fitpregnancy.com
api.meredith.com
ugc.marthastewart.com
qa2.ugc.marthastewart.com
*.secure.meredith.com
origin-www.fitpregnancy.com
secure.meredith.com
fitpregnancy.com
ugc.marthastewart.com
my.meredith.com
qa3.ugc.marthastewart.com
my.woodmagazine.com
secure.meredith.com
qa3.ugc.marthastewart.com
www.fitpregnancy.com
secure.meredith.com
mywedding.com
*.agriculture.com
dev.fitpregnancy.com
qa2.ugc.marthastewart.com
qa2.ugc.marthastewart.com
*.secure.meredith.com
my.woodmagazine.com
ugc.marthastewart.com
qa3.ugc.marthastewart.com
secure.meredith.com
qa3.ugc.marthastewart.com
www.fitpregnancy.com
qa2.ugc.marthastewart.com
qa4.ugc.marthastewart.com
qa4.ugc.marthastewart.com
origin-www.fitpregnancy.com
my.meredith.com
*.secure.meredith.com
www.fitpregnancy.com
*.secure.meredith.com
www.fitpregnancy.com
secure.meredith.com
dev.secure.meredith.com
dev.my.meredith.com
my.woodmagazine.com
dev.fitpregnancy.com
qa3.ugc.marthastewart.com
qa4.ugc.marthastewart.com
secure.meredith.com
secure.meredith.com
qa2.ugc.marthastewart.com
ugc.marthastewart.com
qa2.ugc.marthastewart.com
test.secure.meredith.com
my.woodmagazine.com
*.secure.meredith.com
qa2.ugc.marthastewart.com
ugc.marthastewart.com
fitpregnancy.com
mywedding.com
*.secure.meredith.com
qa3.ugc.marthastewart.com
mywedding.com
origin-www.fitpregnancy.com
qa2.ugc.marthastewart.com
*.secure.meredith.com

Certificate

The complete raw certificate details for admin.web.fitpregnancy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6G6trgHaI6BU6sI2L+T
wi7ExILDLneLJnfdwA5M+/CxfmYd5kIZsOZp+teP3SaE7tNvHtaCpmJc/B0DDzqF
3PWbOQqwElVwhiwqI2vLeyjf93dqF9bqK8ORiNji7kf57/5RrXQY2dCV4FNUNpev
aw0QcffBXR7mXVCFeZpjAKeaWBv0j1az5KJk2Y/yyjMYXK9aCGCYha9OowxoeQBr
lS5RaFtLY/sdtEBAViw8CMn/Kx8KbZym3J/66+iGoxi580hv5V5ch4cdZYnIOxYO
RG36nCs9lmrQZudVeswRx8xjfbXxLjX5P5wTJHAtHWGwYD06mTQbYRDDd63BUxLX
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10702464334527458810231786648977380721
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.web.fitpregnancy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21666501864348524934326453283859822810367888240018891862967927835422494264612600218967846699699122994086876840424821650318824586743901619807259746552504216956566757737937355547794219217438055170445936248725545883215834486411740519727549003070706218418946807076256876742904427621447099883646457602414892800605141847713625348144486346530938423343572249833431960234569170395971956651432000996236602126825273726474547543579631216806711367097484675608654262019171184450148705498260891032885263935454908657353221553535330354483957372993326181430729778344508675127202004090522707404014686336481124181403126354947857045444541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ed4a56f263a6d655f5c6432673dd90a1f17dabbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.web.fitpregnancy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.admin.web.fitpregnancy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016c910216fa0000040300483046022100e49342312271b40017f50e5b935ba88839993943dcce6fac6ca2dc08c092d073022100e2136a252c2929992c1d4ab0e2c288a03c2f9319e4a27f59fbc3198d32c3fcf10076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016c9102174100000403004730450220766fc1a0ff3b9f95d4366f7d57bd7152c5c602cc3d092c61521e7c3a54b3b4f4022100b0c59f78910ec6c66089cf403f6746209a7a19755a5daceedb92f341a863849c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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