ireadarabic.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:c3:e5:f5:cd:be:49:aa:71:d7:02:b6:65:e4:f5:62 was issued on by Amazon.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ireadarabic.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:c3:e5:f5:cd:be:49:aa:71:d7:02:b6:65:e4:f5:62
Serial Number (int): 16967897983206804885704214721568503138
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 09:61:fc:6e:7d:b0:81:a4:19:d6:23:12:6e:b3:b7:98:67:96:27:fd
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 2e:8b:d4:54:60:2d:97:ea:15:7d:7b:e6:42:d0:6e:53:63:3a:20:36
Fingerprint (sha256): 35:f6:3a:bb:55:44:2c:8b:a3:e8:73:e8:8c:01:f8:b7:d1:e3:f5:58:9d:f8:66:d8:c3:50:b8:78:dc:55:30:22

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate ireadarabic.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ireadarabic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ireadarabic.com
*.ireadarabic.com
littlethinkingminds.com
*.littlethinkingminds.com
istartarabic.com
*.istartarabic.com
dramainarabic.com
*.dramainarabic.com
kgarabic.com
*.kgarabic.com

Other certificates including the domain name ireadarabic.com

(limited to 100 certificates)
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
*.ireadarabic.com
www.darnelleaton.com
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
ireadarabic.com
cfo.chat
sni237450.cloudflaressl.com
www.ireadarabic.com
loyaltoken.io
joytasker.com
sni237450.cloudflaressl.com
pickmycollege.co.in
sandbox.dr-almond-app.de
sni237450.cloudflaressl.com
www.istartarabic.com
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
sergey-arzumanyan.com
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
ireadarabic.com
sni237450.cloudflaressl.com
www.compramostumoto.es
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
ordernow.asianchefjasminegarden.com
11521820.peerly.app
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
lucasmanfield.com
sni237450.cloudflaressl.com
eliezerbarbosa.com
www.dope.domains
sni.cloudflaressl.com
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
ireadarabic.com
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
www.smartdream.es
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
program.ireadarabic.com
sni237450.cloudflaressl.com
webs.fr.catoblepon.com
sni237450.cloudflaressl.com
skiaverse.net
sni237450.cloudflaressl.com
ireadarabic.com
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
vodafone.ireadarabic.com
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
stellar.bcb.network
sni237450.cloudflaressl.com
siahonline.com.br
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
program.ireadarabic.com
sni237450.cloudflaressl.com
www.nieuwsbriefprogramma.nl
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
*.ireadarabic.com
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
ireadarabic.com
adawaifus.com
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
*.ireadarabic.com
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
www.loogia.tech
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com
sni237450.cloudflaressl.com

Certificate

The complete raw certificate details for ireadarabic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Grsr46l0itpzcKZENm/
YXR2Flq7BZqCvkdMdkKeD21yUfpjp5L4EvS0hCZFPmCpHuiMRpVXIJHcT8M3dqRl
26ewuxjlXQuTGJEwodtGMoiidj1nYKAwNctFZ7wK+juZCBfyfc38XskKIZbuqJ3k
+oXW+qR0HQwN2onzteslvc4mJcLASfcUeAeh+NdwTi7xRnLOEXbWTK5P0jwsTBI8
TwadzBhuWpPug9FpG6zmge5PPewF37NoBoDTevGpRYuFLzhNXB+WPbGq4lIkK0w8
Px2huqkTcBMed3J6U4VGDyeiTVNN+Xw08p7O3NZkxnCJb8fxnR6An7Nf7XN8uK/d
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16967897983206804885704214721568503138
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ireadarabic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29340013214741895903076564446339797390529353453848137381417804782771838938874573487643346924457158257832840424938332257687205920756217354376238448413372150741369395614940682336416863358049483108796862079929184150411915363924000396117943631949696127170841869754299732490535701491574277154304820008527335936592806177124950452632790943463536989088134179434282171958482946545057607331173496554887233036880239626174036197909360609359058445052903378992257215419438081077273609144740014081406500867058257105380710074091883415057582617795851518574980776769669169269649236241496133592625027494307396726177012578398906717560209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0961fc6e7db081a419d623126eb3b798679627fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (199 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ireadarabic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ireadarabic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'littlethinkingminds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.littlethinkingminds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'istartarabic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.istartarabic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dramainarabic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dramainarabic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kgarabic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kgarabic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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