*.farill.io

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 05:fe:a3:05:20:0f:a2:c8:b8:ff:a1:ad:f1:42:27:0f was issued on by Amazon.

With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.farill.io

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:fe:a3:05:20:0f:a2:c8:b8:ff:a1:ad:f1:42:27:0f
Serial Number (int): 7968289819821056303393425190440544015
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ce:2d:f3:42:b6:09:e3:b8:14:c8:27:46:d4:9d:a7:73:6e:eb:cf:04
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 5d:3d:cb:58:94:91:9a:af:1a:53:67:6b:18:a2:e6:7e:05:9c:a6:e7
Fingerprint (sha256): 33:1a:96:c4:5c:b5:89:a8:94:0b:19:0b:f8:5b:0f:aa:d7:e0:90:a4:8f:70:1c:60:75:af:c5:27:9a:6c:ad:8c

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate *.farill.io

28

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.farill.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.farill.io
www.mytafiya.com
www.dashouseholdlaw.co.uk
www.dasbusinesslaw.co.uk
www.directlinegroup.farill.io
*.common.farill.io
mytafiya.com
www.bcarm-business-law.co.uk
www.hiscox.farill.io
farill.io
allianzcommerciallegal.co.uk
simplybusinesslaw.co.uk
www.allianzcommerciallegal.co.uk
*.thirdpartyaccess.com
www.allianz-legalassistance.co.uk
www.thefed.farill.io
jamesrcroft.com
www.aviva.thirdpartyaccess.com
bcarm-business-law.co.uk
law.jamesrcroft.com
allianz-legalassistance.co.uk
www.simplybusinesslaw.co.uk
dashouseholdlaw.co.uk
www.legaldepot.admiral.com
cutredtape.co.uk
dasbusinesslaw.co.uk
www.tescomobile.farill.io
legaldepot.admiral.com

Other certificates including the domain name farill.io

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.farill.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6kvlvp2z72UR6EYENC8
nK6UMsZMsd+wa3npFuHXxbsfmcMij7+yeeqSi06PB1B1e2q+4PdLIrDrDjJt5bzr
v5gLFUtFmeeQq2HupvfcOly1TYXkMUSelAaNOWZ3vAPVafEr1DmRK5w7gsYO4pU6
lu0/gA2TWfFE5GfRus9SHedmbzoUz3Fchp9K4cd7Vy3ZVFt2uwIKlP/2Cun9Nk4K
RS+uIoHFuW2crr3p2ltH9ImC+b4XTbq6JVdnbBt/NYZVqY6aUwyzDaj0qnKzIkUT
gTXTCOFrajkInx35I/IDfb1FUkLCEVt2oG2Kzmxa0wa+EGyi4Se4ns3ffar0j1eL
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7968289819821056303393425190440544015
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.farill.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26214757803459313668370544449693488708762155679798254685247118833950593442522417648471125351713842904097996267731808680458120710005273393934751613200169071894459304069284062298952487623370499029558905436458176419180119103803689895434352692485778344251756074168702361496578857966220986633376188220444343117986210555176241354526127206515747283351849438398941491415256817308372915077769677914138481154774333136456528224847259323332192372413056634685753342034246355706522448618821793453312169895084785086668513080708458019241023752840458361818527535657664718763107391084631384962227891277744063047404138207931321168661301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ce2df342b609e3b814c82746d49da7736eebcf04
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (684 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.farill.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mytafiya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dashouseholdlaw.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dasbusinesslaw.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.directlinegroup.farill.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.common.farill.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytafiya.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcarm-business-law.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hiscox.farill.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farill.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allianzcommerciallegal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simplybusinesslaw.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allianzcommerciallegal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thirdpartyaccess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allianz-legalassistance.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thefed.farill.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jamesrcroft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aviva.thirdpartyaccess.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcarm-business-law.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'law.jamesrcroft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allianz-legalassistance.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simplybusinesslaw.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashouseholdlaw.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.legaldepot.admiral.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cutredtape.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dasbusinesslaw.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tescomobile.farill.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legaldepot.admiral.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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