*.invest.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 04:4c:82:05:c3:57:d3:cd:78:e8:43:c2:32:27:98:12 was issued on by Amazon.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.invest.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4c:82:05:c3:57:d3:cd:78:e8:43:c2:32:27:98:12
Serial Number (int): 5714163714233351350951816798151350290
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 02:b3:d6:c2:64:19:b5:95:ab:ef:97:37:be:cd:52:69:9e:45:58:2e
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): d5:7b:be:4f:fd:b2:75:4f:81:54:6a:ff:b1:e8:bc:a8:12:2e:07:e9
Fingerprint (sha256): 23:0e:35:84:f8:39:27:cd:7f:72:5d:17:e5:6f:1e:4b:b3:e1:ab:8a:40:80:6d:e8:f3:ca:28:f8:f5:95:58:51

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate *.invest.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.invest.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.invest.com
stockstech.com
www.invest.com
invest.com
www.stockstech.com
*.stockstech.com
stocks.com
www.stocks.com
*.stocks.com
app.invest.com

Other certificates including the domain name invest.com

(limited to 100 certificates)
sni240153.cloudflaressl.com
sni240153.cloudflaressl.com
sni240153.cloudflaressl.com
blentburgerbar.pedix.app
sni240153.cloudflaressl.com
partners.invest.com
invest.com
sni240153.cloudflaressl.com
sni240153.cloudflaressl.com
sni240153.cloudflaressl.com
lpi.invest.com
invest.com
sni240153.cloudflaressl.com
sni240153.cloudflaressl.com
lpi.invest.com
invest.com
*.invest.com
sni240153.cloudflaressl.com
lpi-global.invest.com
lpi.invest.com
sni240153.cloudflaressl.com
invest.com
lpi.invest.com
gi.placerda.dev
sni240153.cloudflaressl.com
ez-sys-uat.ezrepairloan.com
sni240153.cloudflaressl.com
partners.invest.com
sni240153.cloudflaressl.com
magazine.invest.com
sni240153.cloudflaressl.com
sni240153.cloudflaressl.com
sni240153.cloudflaressl.com
sni240153.cloudflaressl.com
sni240153.cloudflaressl.com
lpi.invest.com
sni240153.cloudflaressl.com
sni240153.cloudflaressl.com
sni240153.cloudflaressl.com
invest.com
sni240153.cloudflaressl.com
magazine.invest.com
resume.innoverse.co.za
sni240153.cloudflaressl.com
sni240153.cloudflaressl.com
magazine.invest.com
lpi.invest.com
sni240153.cloudflaressl.com
magazine.invest.com
*.invest.com
sni240153.cloudflaressl.com
sni240153.cloudflaressl.com
sni240153.cloudflaressl.com
magazine.invest.com
sni240153.cloudflaressl.com
magazine.invest.com
sni240153.cloudflaressl.com
*.staging.stocks.com
sni240153.cloudflaressl.com
lpi.invest.com
sni240153.cloudflaressl.com
sni240153.cloudflaressl.com
partners.invest.com
sni240153.cloudflaressl.com
sni240153.cloudflaressl.com
invest.com
sni240153.cloudflaressl.com
*.invest.com
lpi.invest.com
sni240153.cloudflaressl.com
lpi.invest.com
invest.com
sni240153.cloudflaressl.com
sni240153.cloudflaressl.com
lpi.invest.com
gi.placerda.dev
sni240153.cloudflaressl.com
demo-stage.astroline.app
beta.essenceofthequote.com
sni240153.cloudflaressl.com
www.louislawson.co.uk
sni240153.cloudflaressl.com
sni240153.cloudflaressl.com
www.invest.com
magazine.invest.com
sni240153.cloudflaressl.com
sni240153.cloudflaressl.com
sni240153.cloudflaressl.com
app.invest.com
sni240153.cloudflaressl.com
sni240153.cloudflaressl.com
sni240153.cloudflaressl.com
www.skillway.co.uk
magazine.invest.com
sni240153.cloudflaressl.com
sni240153.cloudflaressl.com
lpi-global.invest.com
lpi.invest.com
sni240153.cloudflaressl.com
sni240153.cloudflaressl.com

Certificate

The complete raw certificate details for *.invest.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/zm+O9jFyu7XA2xsBOo
1TsJPfx3sgA/OcNSzuBqXovqugeztnBidPmgHa0MimBiTEKczmzahMgrM4RzuMRH
Di6q6QhNah7w+uJ6iWEviI477YAlqfKWKnANYzaVfqml20L9X1eyvsl88iqAhCMm
uzb9ZxiMigI+CkqV1x+N4njJqsK1ZgXXSgFyhVODPX4I8T3J5UVYGSZDGSJOyvYt
inFrKy80weUkq6ldrUVSexdKl0qHRr/4nvMDbARLX3gKXlrxOf0c9pWxqoELAzNu
Zt4qQIztLxtK7E7p/vlYvu27DcFJ5o3yJz5cX4fYVgtbZ0B0ULKHhjMMAqWjkeE6
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5714163714233351350951816798151350290
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.invest.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23731273769232008006419629957680793780297505629153881746433599231461468172184307688245903612155719042750394994439451909349482667576164299762607069141979148332331289968516937677878179910420510474922461195296741636689995636129024063328838953085043798409983341126828109735183785699797763030471535184706423934552463310921774904285025443855743337085034234031080061153394818704776740175178740359876789872372242489534738519797065577103585213842632311201649368120810876416698926659260670450631123353449841169230907238416416169470997812985861042083256531346523775341480849657838233722527090139046412889716707214821699893672459
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							02b3d6c26419b595abef9737becd52699e45582e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.invest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stockstech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.invest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stockstech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stockstech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stocks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.invest.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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