cappies.com

Issued by Amazon

About this certificate

This digital certificate with serial number 05:8f:ff:8c:0a:ac:95:c7:8c:7b:aa:37:f4:b8:6d:dd was issued on by Amazon.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cappies.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:8f:ff:8c:0a:ac:95:c7:8c:7b:aa:37:f4:b8:6d:dd
Serial Number (int): 7393821539390235541182322817097035229
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 49:ed:4d:74:95:e1:52:ba:5a:86:85:77:b3:69:dc:72:6c:eb:dd:16
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 9a:0f:af:be:82:10:e5:71:91:15:68:82:c0:e6:04:5c:af:ce:28:77
Fingerprint (sha256): 26:01:3d:ff:dd:e4:dc:86:8d:ee:85:40:40:10:ef:d1:17:d0:c1:ae:e8:6f:67:f9:bf:53:74:68:0f:ee:f8:ac

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate cappies.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cappies.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cappies.com
cappies.org
wwwnew.cappies.org
*.wwwnew.cappies.org
wwwnew.cappies.com
*.wwwnew.cappies.com
*.cappies.org
*.cappies.com

Other certificates including the domain name cappies.com

(limited to 100 certificates)
help.cambriacomputing.com
zoho.klar.technology
assist.nci.fr
subscriptions.virtualpethub.com
assist.nci.fr
assist.nci.fr
assist.gilesnet.co.uk
assist.investidom.com
cappies.com
assist.nci.fr
assist.evans-mfg.com
assist.digital-planets.net
yardim.novasisbilisim.com
assist.evssw.com
adfs.cappies.com
*.cappies.com
assist.investidom.com
ssl.smugmug.com
billing.chatt365.com
assist.nci.fr
assist.gilesnet.co.uk
assist.babirus.ae
assist.nexgendigital.solutions
asistencia.pbshon.com
assist.babirus.ae
assist.reignenterprizes.com
yardim.novasisbilisim.com
assist.aufcorp.cl
assist.elevategymnasticsut.com
help.altitudemedia.co.za
support.navsgroup.com
hari.assist-domain.com
assist.nexgendigital.solutions
ssl.smugmug.com
aide.info-mania.ca
zoho.klar.technology
assist.nci.fr
assist.evssw.com
cappies.com
gethelp.impactfoundry.org
assist.gilesnet.co.uk
assist.nci.fr
assist.evssw.com
assist.gilesnet.co.uk
assist.testcrew.com
help.dtgroup.ca
assist.nci.fr
my.collegetrackr.com
assist.oilbu.com
assist.gilesnet.co.uk
it.skilltechgroup.co.za
assist.gilesnet.co.uk
assist.gilesnet.co.uk
assist.nci.fr
assist.evans-mfg.com
assist.bird-x.com
nmm-qa.console-connect.com
remote.cpkncomputers.com.au
ssl.smugmug.com
subscriptions.weedbates.com
*.cappies.com
support.tmit.ca
plans.smartnersbusiness.com
remote.cpkncomputers.com.au
subscriptions.resolu.com.au
assist.evssw.com
assist.digital-planets.net
assist.gilesnet.co.uk
assist.bird-x.com
assist.reignenterprizes.com
assist.nexgendigital.solutions
assist.nci.fr
assist.investidom.com
it.skilltechgroup.co.za
*.cappies.com
subscriptions.weedbates.com
assist.nexgendigital.solutions
assist.nci.fr
assist.nci.fr
*.cappies.com
assist.gilesnet.co.uk
support.attune.ae
assist.gilesnet.co.uk
assist.gilesnet.co.uk
assist.nci.fr
aide.info-mania.ca
assist.nexgendigital.solutions
assist.reignenterprizes.com
adfs.cappies.com
assist.tbig.co.za
assist.oilbu.com
assist.nci.fr
remote.cpkncomputers.com.au
assist.gilesnet.co.uk
assist.gilesnet.co.uk
yardim.novasisbilisim.com
assist.gilesnet.co.uk
assist.digital-planets.net
klantenservice.zorgtotaalwinkel.nl
assist.nci.fr

Certificate

The complete raw certificate details for cappies.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0egkcOjr3LYhY6a9uHZz
fBzgiRSOkhrQrBiiaaB6ySFQllXstJTfrXuP7PSIN0HrA2Sj1woHtI76qk5zOCj6
QaE+VSrGEloIO5YyXYG5hMwKo9eNQVx+iqmJCMRxDanHZXrV9dUvydnw66VZDpvG
0hV3qqQj/Qp8DEeNM4nOHzwHBqf3eLqOzlQWE/xuY/IEAP4HStfgL2S5SKdFBS7+
0062aj8kVb1Q7zm2nhsHuqzDhZcK1QASiyoHPiHNemxkPzB+2vQo5D75oeJoVKJW
wjY6oFrTelwrHeXiAFjAbLgs38VQZdP0IWWm6avGZfdxlop98Cwxd/zEq/yrbVW4
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7393821539390235541182322817097035229
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cappies.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26498279396131419960177566800527690549690241185819977117009556462457923345763430506134050430563144518207259079666006032671035019878586175691168938776712832872211141000967886051943789143499828295529603154985706416153054129830628467383541946906517308464549539266628115424648554783678340109626168286230503022442038954237809023872426796140142352227419908657278059331256045623917565116766249830913027157025076264170193454733199723568558219329282167605902133088364580419005589594140027664174994937490897226989595883819825570289043512767879122685186922595612038998499018004475734109995864404702050739570236079961961015916741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							49ed4d7495e152ba5a868577b369dc726cebdd16
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (143 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cappies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cappies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwnew.cappies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwnew.cappies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwnew.cappies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wwwnew.cappies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cappies.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cappies.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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