bagelcode.com

Issued by Amazon

About this certificate

This digital certificate with serial number 07:5b:b9:40:19:d8:96:4a:9b:68:c7:46:df:9e:b9:87 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bagelcode.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:5b:b9:40:19:d8:96:4a:9b:68:c7:46:df:9e:b9:87
Serial Number (int): 9780852308999119850269258918037207431
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 10:f4:a9:0e:08:a6:d7:bc:bf:12:b4:44:c8:8e:2e:b8:2c:4e:1e:cb
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 1e:f3:37:17:78:a6:5e:fc:ed:34:09:6c:f3:bd:ac:a5:6a:25:8f:86
Fingerprint (sha256): 27:0c:08:8e:6f:80:13:27:6f:af:67:a7:1a:01:d0:f8:96:7c:75:dc:0c:f8:8c:b5:2c:12:eb:8a:65:1f:cc:79

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate bagelcode.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bagelcode.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bagelcode.com
www.bagelcode.com
gingercode.com
www.gingercode.com

Other certificates including the domain name bagelcode.com

(limited to 100 certificates)
tls.automattic.com
prometheus.data.bagelcode.com
www.focusfriend.xyz
*.events.slots3.data.bagelcode.com
grinninghermit.com
sso-auth-dev.data.bagelcode.com
*.events.slots1.data.bagelcode.com
bagelcode.com
locust.data.bagelcode.com
www.firaskudsy.com
tls.automattic.com
gamesadmin-slots1-gs.v2.bagelcode.com
wsp.data.bagelcode.com
wehead.com
wsp.data.bagelcode.com
ecovie-export.com
web.rcm.demos.felixai.xyz
sauravmaskey.com.np
excitedenergy.com
kibo.trestlelabs.com
*.events.slots2.data.bagelcode.com
www.rxspectra.com
kibana-amundsen-internal.data.bagelcode.com
admin.strap.cloud
bagelcode.com
wsp.data.bagelcode.com
aerobiczive.cz
bookaclub.com
admin.projectmumbai.org
*.events.slots4.data.bagelcode.com
prometheus.data.bagelcode.com
gamesadmin-jpj-st.v2.bagelcode.com
gamesadmin-sss-prod.v2.bagelcode.com
data.bagelcode.com
pickmo.app
jiffyfavors.com
commander.kiadrummondville.com
gehandicaptenzorg.cao.app
claw-crane-staging.data.bagelcode.com
dl.checkmd.net
lookback.gg
school.subashreepublishers.com
prod.mutant.one
cage.prosim.ca
bingo.remotesocial.app
*.slots1.bagelcode.com
arrivage.pro
cashbillionaires.bagelcode.com
gamesadmin-sss-st.v2.bagelcode.com
clubvegas-qa.bagelcode.com
sso-auth-eks.data.bagelcode.com
anuncio1.jom.mx
*.bagelcode.com
www.uat.allez.app
the-agcorp.com
jenkins-dl.bagelcode.com
a.replaythat.com
anantadigi.com
www.takowasabi.io
*.events.dragons1.data.bagelcode.com
flower.data.bagelcode.com
kibana-amundsen-external.data.bagelcode.com
kibana.data.bagelcode.com
www.latency.hestiatkmce.live
*.events.dragons1.data.bagelcode.com
bmwlog.pp.ua
tls.automattic.com
*.events.slots1.data.bagelcode.com
link.bulldocs.de
bagelcode.com
www.northernfoodmachinery.com
dayblog.co.il
bagelcode.com
lesliepan.com
sbgdigitalhub.com
register.chasesthlm.se
wehead.com
*.shepherd.data.bagelcode.com
api-doc.clivi.com.mx
kikenyatours.com
gamesadmin-jpj-devlondon.v2.bagelcode.com
gamesadmin-slots3-team.v2.bagelcode.com
www.lucidfrontier.com
techsalvation.net
imoveisjaguare.com.br
link.chevenansante.com
*.slots2.data.bagelcode.com
www.busoft.com.tr
tls.automattic.com
wojciechkabat.com
*.events.nmg1.data.bagelcode.com
jenkins.bagelcode.com
cheatsforhiguesswho.apptget.com
www.manzardapartman.hu
jenkins-dl.bagelcode.com
cashbillionaires.bagelcode.com
hotelhortensia.it
phoenix.dev.consortium.net
*.bagelcode.com
*.events.slots1.data.bagelcode.com

Certificate

The complete raw certificate details for bagelcode.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6S8aYGtv50owl4lKxSO
0dD2Qq/NwZLUwBQnV7tp+7tVF5EoFINe1xSaOIPkLONTJmd2wxulzJdH2hdqPWOb
4Xz+TACK3dWN1tLWV6OxkKOluIZ+mBbD0bRhoeZa5hvzmrdFtuhCP6HD3HyKH3zS
xm7KNAQkfKNrx+yJb06dM4ozEVISN8eElSDXf2YoRODxHjSW/tqQA3Wrx1NRJbDN
+pIQqG+doyLOpoqfxxIvSH0u3BHmel79iaaL3WuLULJms9nFW8CJV98gd30RUgnb
ZlxxSm0AvAaamqRGPkCOF3EUw5N6KRpz3bBicF2pkT0FnXfNiorKR5qK4wVShRTO
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9780852308999119850269258918037207431
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-04 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bagelcode.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26212563469774842509210399515174196658197656246555997246343784082461582817663554406258841679853307724451215279456626066611805395510144627859064353062024353972897434502440931118544921017576384189073959506669736149181502159216656044238422918007662172624833738426523063593163974474731126572598968978453885215199044089041879073202142326240267181814417904833835610917546064702736682692824225607094741813778058205648568291718076515824356990830533882139950502632959412167615717742981464753700111462072496806575780029963222018820719952234460067922525131178364256205966190169491863321499948390608366443060894996044227041087109
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							10f4a90e08a6d7bcbf12b444c88e2eb82c4e1ecb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bagelcode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bagelcode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gingercode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gingercode.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017142b7c79f0000040300473045022034438e8baf94dae41031dbbf53c972b41c51d20a6609e568a83501b70a58474a0221009e0af349846005000b119cb13e571896873254e83bdce4fd6c04440c229fdd200076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca0000017142b7c7d9000004030047304502202db9d60258468e9eb54b480830037feba0b7a36ab9e9ea3868a12e53fd62f62b022100c4737f76979c5508dea35c4770f5dd992ddd6d5527e360d4297d71a178a0170f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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