folkefinans.com

Issued by Amazon

About this certificate

This digital certificate with serial number 08:4a:05:20:ca:95:08:21:fe:d2:1b:43:ed:3c:43:02 was issued on by Amazon.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=folkefinans.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:4a:05:20:ca:95:08:21:fe:d2:1b:43:ed:3c:43:02
Serial Number (int): 11018157943856263279623105568581632770
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3a:18:37:9b:10:3c:a9:ed:bb:ce:8d:c9:32:6c:0a:02:3a:d9:4f:0e
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): a1:f1:da:05:4f:0e:5a:04:b9:4b:70:8c:3f:5d:34:c4:0b:10:13:25
Fingerprint (sha256): 2f:8e:7a:dc:19:ae:6c:a5:d9:7c:2f:c5:80:7d:dc:97:c6:d1:00:ec:40:b4:ae:cd:54:70:18:e8:18:c6:02:54

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate folkefinans.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for folkefinans.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

folkefinans.com
*.folkefinans.com
frogtail.com
*.frogtail.com
frogtail.se
*.frogtail.se
frogtail.no
*.frogtail.no
apply.folkia.no
*.apply.folkia.no

Other certificates including the domain name folkefinans.com

(limited to 100 certificates)
login.folkefinans.com
www.depreciacioncarros.com.co
folkefinans.com
openvpn.folkefinans.com
internal.bfitec.com
www.finalspredictor.com
splunk.folkefinans.com
mydearestlovefriend.com
splunk.folkefinans.com
www.fujibeautyworld.com
folkefinans.com
services.sandbox.folkefinans.com
www.alvieapp.com
www.deseasdinero.com.mx
folkefinans.com
folkefinans.com
db.folkefinans.com
www.nurturewellness.co.in
ci.folkefinans.com
sandbox.folkefinans.com
squidbet.com
splunk.folkefinans.com
www.folkefinans.com
sandbox.folkefinans.com
app.cloudstickiez.com
www.francilisy.fr
derekbarnhart.com
sandbox.folkefinans.com
sandbox.folkefinans.com
blackboard-dev.klarway.com
splunk.folkefinans.com
splunk.folkefinans.com
folkefinans.com
www.depreciacioncarros.com.co
plataformaqueroestudar.com.br
www.moonka.space
text2speech.app
services.folkefinans.com
mahe.io
fancybeam.com
folkefinans.com
dna.darthvid.com
folkefinans.com
services.folkefinans.com
folkefinans.com
productplanet.io
folkefinans.com
opensalon.online
openvpn.folkefinans.com
admin.parksat.com.br
login.folkefinans.com
portal.kenolkobil.com
mydearestlovefriend.com
www.jobana.co
splunk.folkefinans.com
services.sandbox.folkefinans.com
*.folkefinans.com
joutu.tk
services.sandbox.folkefinans.com
app.frogtail.com
backup.cgi.fontys.me
sandbox.folkefinans.com
folkefinans.com
www.moonka.space
waiverhawk.app
folkefinans.com
*.folkefinans.com
demo.strongline.smplabs.com
www.segler.community
dailysprint.app
openvpn.folkefinans.com
tannerstechtips.com
salsanena.stage.freshfox.at
shoplink.app
www.journeytodev.com
sandbox.folkefinans.com
www.formstreamer.com
www.digimoxie.com
folkefinans.com
sandbox.folkefinans.com
www.fujibeautyworld.com
services.sandbox.folkefinans.com
demo.meprintz.com
justcodeit.co

Certificate

The complete raw certificate details for folkefinans.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAyUp1SLOZY6YUprIlUT
ynyM2a3Wk4mZcf9ESeFTJ0YOaUi6YafybXL+5VPPlb8IEJUr8hTFKN9o9U3l0P4G
LYJ9gvutCTTK775wCgTNdlFIK6TtNgCx0CGmZqPBppi1LzYG7dWMLI0CtwcbN8NK
WMZU8ANtmxe/fq+2uvLOuHxcGmWxiq4tN77JFJiUmRf6t705nWg/wBKSu92NXaRm
SNBiaUNQazhwHSqJHnxV2qjM+iKsMrhrCeuJ8sVIPdUa0ULXDcdlexFMjjQ5wNgP
tYjvBdE7eB1T7+C6UYkkn5bHrt4osT0ILrwcUZyYkA/s3Vu7jW/xF0G5Bk7i9fkM
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11018157943856263279623105568581632770
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'folkefinans.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23739005097284975800880274843089739148162316423932129350824404316253239379642582068564560685342125721294922025829677703509501426143854889465263021687588908953895914556363018133794242767383333129791626709305327809255682479469314092715122579227644946913146261860070471362568694134094612219067231271659575614043785822852154226930591120708784660513140294276588216539782591686645078399040799167055347200989115835191638433440933109325066174985154251577385159879981956285790750717001597060590709348938994174681372716269608048928267032339845204549986095942647954581997941007371596580829346628796433557886091158726749539863767
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a18379b103ca9edbbce8dc9326c0a023ad94f0e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'folkefinans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.folkefinans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frogtail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frogtail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frogtail.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frogtail.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frogtail.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frogtail.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.folkia.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.apply.folkia.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000174c2a5e3850000040300473045022100e02e023cb5ad37af3a2130bbad086b7c8a0a67cc9cd2c96224cf92514e79c25b022058b6c0d4a986179c2fc2c325de32ce07aac84c43a076c3813749977a4e27f24d0077005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000174c2a5e3d00000040300483046022100bbc1fea955ae53e32a27df0ffed06155a9cba2686ed4615fe875080d95ade550022100bb8df4b9f57b69317f8301a710445322370575afa274bb702a7f192ee0833c32
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00359b8f86ba6c418d30db329bdb985d938321bce21dff10148960a5ee3d595f9489e735a98d112dbef4788816cefa0c01322a50f18643c1e8e240291080926be6c847d3052b9d47ef73aa0007b2fc681fe24ea75843dd341ad77a74325cbe4a110982c82a55d92abdf4d988230541859beb643ddae856bd043e5e69ebc73662d214116a1087d04a66954f9e1772185ec895a00c99b10f3e5bd8ba1b9ff17475dec5b15bc94a3f668639cd21b05f2e759facbd82888cfc76e4fa741de4b36991efd7bdf32673f57b62dfbb53f9dd704c2c9ec7615eaf71b87082ffb7539e9dfd6aeeb4c62906d6912d7f128e60a59432c2153417e784d78c41cc714baa6a707687