fibr.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0b:cf:e8:a3:38:78:7d:4d:d1:a5:d1:ec:44:00:c9:e6 was issued on by Amazon.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fibr.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:cf:e8:a3:38:78:7d:4d:d1:a5:d1:ec:44:00:c9:e6
Serial Number (int): 15701031854046144313338516981801863654
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: aa:2b:06:eb:0c:26:91:39:62:6a:1c:02:f8:e3:36:71:a0:ec:e8:a4
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): ab:6f:75:22:0f:6b:c4:9a:5b:b7:df:eb:65:f2:4a:ca:79:1b:4f:8c
Fingerprint (sha256): 27:6f:29:ba:c0:db:6e:6e:bf:ba:d4:62:b3:e0:7b:e4:f9:bf:09:88:0b:99:f8:b1:ce:f8:d6:85:75:21:d9:10

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate fibr.com

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fibr.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fibr.com
www.atbank.at
www.fibrbank.com
atbank.nl
atbank.co.uk
fibrbank.com
atbank.at
www.fibr.com
fibr.co.uk
www.atbank.de
www.fibr.co.uk
www.amsterdamtradebank.com
amsterdamtradebank.com
www.atbank.nl
www.atbank.co.uk
atbank.de

Other certificates including the domain name fibr.com

(limited to 100 certificates)
image.audi-hirlevel.hu
san-1-s51.tlsprovisioning.exacttarget.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
san-1-s51.tlsprovisioning.exacttarget.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
image.audi-hirlevel.hu
image.audi-hirlevel.hu
image.audi-hirlevel.hu
image-s51-1020.productiontestzone.et.yellsatcloud.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
sni.cloudflaressl.com
image.audi-hirlevel.hu
fibr.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
san-10-s50.tlsprovisioning.exacttarget.com
sni.cloudflaressl.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
fibr.com
image.audi-hirlevel.hu
image.audi-hirlevel.hu
san-10-s50.tlsprovisioning.exacttarget.com
fibr.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
image.audi-hirlevel.hu
image.audi-hirlevel.hu
image.audi-hirlevel.hu
assets.prd.fibr.com
image.audi-hirlevel.hu
image-s51-1020.productiontestzone.et.yellsatcloud.com
san-1-s51.tlsprovisioning.exacttarget.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
image.audi-hirlevel.hu
fibr.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
san-10-s50.tlsprovisioning.exacttarget.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
san-1-s51.tlsprovisioning.exacttarget.com
san-1-s51.tlsprovisioning.exacttarget.com
fibr.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
fibr.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
image.audi-hirlevel.hu
image-s51-1020.productiontestzone.et.yellsatcloud.com
image.audi-hirlevel.hu
image.audi-hirlevel.hu
san-10-s50.tlsprovisioning.exacttarget.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
image.audi-hirlevel.hu
image-s51-1020.productiontestzone.et.yellsatcloud.com
san-1-s51.tlsprovisioning.exacttarget.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
image-s51-1020.productiontestzone.et.yellsatcloud.com
savings.prd.fibr.com

Certificate

The complete raw certificate details for fibr.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA829R3amIiwd6smo/ANJV
6K4g15cHHq4D6Whu62jeJp6dnYZoH+DgBSYCp8e9kKUIwamx5RFTnHDr4UiO493l
GbC0G9uCwwUBL1GlYN0cFpQB+cZlrM2zOYuDechCgoxnHWy0yv0Pr/9AoadrUO3O
cz2Je9ABeW0RHoA6wABZQ+E1kkp8tVSpBPKIxkhnIAIYoJ8d31Okmw3WMJj/u7uB
X5iPaadYd03+eONs5rGocTD/MIwyMp52dBcTllbdaLRDfsK8iiJCD9z/e1kP8VQf
5JkxQgbY0Tgwl1sLAw7Budi+pdRqrUSdHZe4zit6Rajd/Igp+lyCMgMHOz7xvtED
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15701031854046144313338516981801863654
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fibr.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30730801940406146343297986622499215263156520550653796130787569524599065802330926591502205790854259847560778441785249712444324863520650298866415466821720055362022810384283814074397929213281858722023672399562219057442118680304073355848575051754577066566242902860039385172318984396176996480264126416712900585669492367833670181604865465358789781061671456113653852336125569249970094601348973413641682019914374307732085149555470954568102903674239997046768350128718016554068099021863669018533196404172375996186047869358043757834387915298269010049117223179550173610516886711600032787818832969145297414924887311647557700092917
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa2b06eb0c269139626a1c02f8e33671a0ece8a4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (249 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fibr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atbank.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fibrbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atbank.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atbank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fibrbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atbank.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fibr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fibr.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fibr.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amsterdamtradebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amsterdamtradebank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atbank.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atbank.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atbank.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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