fire.com

Issued by Amazon

About this certificate

This digital certificate with serial number 07:cf:1d:0b:73:cf:f7:38:e4:1a:c0:f3:a0:f7:2e:77 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fire.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:cf:1d:0b:73:cf:f7:38:e4:1a:c0:f3:a0:f7:2e:77
Serial Number (int): 10379990517441605232872980176650579575
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 04:4f:3b:b4:4e:83:5e:e1:ff:09:e9:a5:87:c5:b7:ca:1d:ae:ee:d6
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): e6:a7:55:25:e5:7f:82:73:31:3b:e8:ef:c3:bc:14:b6:a5:a7:53:41
Fingerprint (sha256): 2f:19:c4:d1:be:51:ac:d3:a0:3a:ee:61:78:82:4c:76:b9:a8:60:42:9f:d2:77:69:bb:5e:c2:49:fe:8c:40:2c

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate fire.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fire.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fire.com
www.fire.com

Other certificates including the domain name fire.com

(limited to 100 certificates)
*.test.fire.com
fire.com
fire.com
www.viveportstatus.com
fire.com
www.viveportstatus.com
*.test.fire.com
docs.fire.com
www.viveportstatus.com
business.fire.com
business.fire.com
business.fire.com
www.viveportstatus.com
fire.com
www.viveportstatus.com
dia-api.fire.com
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
dia.fire.com
docs.fire.com
www.viveportstatus.com
fire.com
upload.fire.com
www.viveportstatus.com
www.viveportstatus.com
fire.com
fire.com
*.fire.com
fire.com
www.viveportstatus.com
www.viveportstatus.com
fire.com
fire.com
fire.com
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
docs.fire.com
dia-api.fire.com
donate.fire.com
dia-api.fire.com
fire.com
www.viveportstatus.com
www.fire.com
www.viveportstatus.com
donate.fire.com
fire.com
fire.com
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
fire.com
fire.com
www.viveportstatus.com
fire.com
fire.com
www.viveportstatus.com
fire.com
fire.com
fire.com
fire.com
fire.com
www.viveportstatus.com
upload.fire.com
fire.com
www.viveportstatus.com
www.viveportstatus.com
fire.com
fire.com
www.viveportstatus.com
status.fire.com
www.viveportstatus.com
donate.fire.com
www.viveportstatus.com
donate.fire.com
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
fire.com
bol-gateway.test.fire.com
fire.com
www.viveportstatus.com
www.viveportstatus.com
*.fire.com
fire.com
www.viveportstatus.com
donate.fire.com
fire.com
docs.fire.com
www.viveportstatus.com
www.viveportstatus.com
www.viveportstatus.com
*.fire.com
www.viveportstatus.com
www.viveportstatus.com

Certificate

The complete raw certificate details for fire.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcbnj+N6YQOuLE/P4al/
tk/Hh2HoFrPBE/1w4FP7cGg3Dp0MRIklqeukiQpf6AFbYtqCFQ11ky27J+v9EX8g
eZaxXO7yIesAHHoU+PF7brUDugtxKp8yXPhK4LpA+SgIFLn3/5WcLtdgE7LbOW04
655851OblC8+FFw2Rkbp/u/sjtzDNKpYf9w8nG5yFpaLbds+nrwQYd4jTPvPakem
73oN4pMPggABYhal7g9ifSd5Z7LfIq4dpXL8+T5+YmNeo+DdJgpP508HdUFY01q2
ZaGp5dNMF/19D7+w+yl3D8T2LTGFpeZ/klPtv/LbLMy0hdE4CLs8goWXWFe2WXVs
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10379990517441605232872980176650579575
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-12 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fire.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24967029562271572314418795821202773321534653604106148184501393625362120626773489280744489056432662970718699045129403369224861098490213187837366426087898882587412158924373863431020026454396562420065771866771944497783001239403683215718808661580496723584593522187259657125046499662336360861660300311032706860713517150488467960273917195664518538558701115209339706347489756692291209866720437466278720173936688194487444402069241620534088813719794935546933289470381638498797039294591796484995289163151553431520711940312947409361513323672146486244226781868021658403522668010322285963085632461964509219320601531390804660415519
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							044f3bb44e835ee1ff09e9a587c5b7ca1daeeed6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fire.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000167a2e9267c000004030046304402205b3deb4b9f6f119df8d422ac150ae8100c7d51d4dc48e5ad1d8afe640d9c076402200f2c578bf9d0089114fba5d373e11301856b243dc70914e805108f641f74108b0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000167a2e9273d000004030046304402203e091c6be19c66d3dfc224d9e53dcd9c4e2b9d48aa34bbec7b71b3e96b12974302206b1344e059900b7dc8e91ffdce17d68a41f514e7ae69131766d6bae82ee1186d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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