whynot.com

Issued by Amazon

About this certificate

This digital certificate with serial number 02:1e:d6:d5:d7:85:cd:e4:f1:4d:63:2c:4c:9d:2e:be was issued on by Amazon.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=whynot.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:1e:d6:d5:d7:85:cd:e4:f1:4d:63:2c:4c:9d:2e:be
Serial Number (int): 2818582275280710124410396464446779070
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 38:68:82:44:c9:ae:37:21:06:99:8a:c1:45:36:11:a5:11:3f:2e:bc
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): a9:4e:aa:97:82:72:79:25:ec:69:4d:c8:74:9b:35:6d:8a:00:b1:e4
Fingerprint (sha256): 37:be:91:b3:8d:37:a6:e3:13:a5:3f:c5:79:b8:51:cc:39:a8:db:22:0f:6c:96:3e:e3:dd:f9:a0:18:31:10:7b

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate whynot.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for whynot.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

whynot.com
whynot.nl
whynot.be
*.whynot.nl
*.whynot.be
*.whynot.com

Other certificates including the domain name whynot.com

(limited to 100 certificates)
www.holtmon.dev
snm-tech.com
whynot.com
link.psu.care
my.kyndwellness.com
dev.whynot.com
whynot.com
*.test2.whynot.com
media.whynot.com
whynot.com
images.whynot.com
start.freshnow.app
*.test.whynot.com
whynot.com
whynot.com
blprt.studio
whynot.com
*.test2.whynot.com
images.whynot.com
images.whynot.com
testing.troveswallet.com
www.inspirationalcare.com.au
whynot.com
whynot.com
images.whynot.com
www.inspirationalcare.com.au
media.whynot.com
whynot.com
goto.whynot.com
newidentity.com.mx
www.griffinw.com
ribeiroribeiro.adv.br
link.psu.care
whynot.com
whynot.com
richresults.whynot.com
kale.ink
whynot.com
www.androidaudioplugin.org
media.whynot.com
digicraft.app
media.whynot.com
email.socialdeal.nl
media.whynot.com
newidentity.com.mx
*.test.whynot.com
whynot.com
my.kyndwellness.com
ownyoursex.com
whynot.com
start.freshnow.app
*.test.whynot.com
ribeiroribeiro.adv.br
email.whynot.com
whynot.com
mail.whynot.com
delighto.com
arcanekingdom.com
email.socialdeal.nl
images.whynot.com
goto.whynot.com
email.whynot.com
order.unionjkt.com
images.whynot.com
digicraft.app
*.test.whynot.com
whynot.com
email.socialdeal.nl
email.whynot.com
*.test.whynot.com
goto.whynot.com
images.whynot.com
whynot.com
www.holtmon.dev
images.whynot.com
8092.citycar.co.il
www.griffinw.com
dev.todistuslaskuri.fi
test.whynot.com
ownyoursex.com
images.whynot.com
test.whynot.com
whynot.com
growyourfame.app
growyourfame.app
email.socialdeal.nl
docs.zksync.io
boxingclubbn.turnosweb.app
email.whynot.com
www.suhaantraders.in
email.socialdeal.nl
whynot.com
delighto.com
*.test.whynot.com
docs.zksync.io
*.test2.whynot.com
richresults.whynot.com
richresults.whynot.com

Certificate

The complete raw certificate details for whynot.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/1X2RY69q8ujWzZdXpi
hsVe3+rUq1BFbsYpfTTjl34hwBA9oAhpvGCfZurN8fyI1jZd6ji9WpkRbPo2cr3f
QDyZ4wd0gv2WpI0s0noRsgebxco9569y5Z5jXHV+NXD2k/Wc5lBW6o01Iij4yKBM
1nWxT0vK7NWRb25kxmoyKlpEeNQLQnWmwWASsRpwu4bVhZNBKRfTksmkVjzw9prn
KvL2sMPDYg3ErjwaE1FoaU6LP9LH71xIwZqVjdVr968nHgh1PMBA4cByUVSylrps
TR0QYp9bAe2brkpEY6W9S39GQlmhaZAu5e7D4CBn6Mq9QFwYCS/XY9z9g/5qtAfZ
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2818582275280710124410396464446779070
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'whynot.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26256257294448789223480953743043647206128028879877384283229265719347477984079180172854000064611774721861907463246219881845723365188661979282759017267366535472575911525143483680117624670003436889574218870972370477563177248318586966478742383545746976446851163971762916687082419788123828883407306988096668191847494729772078828538291823013457329113957239426374076506345644485648350263265571482449285698081411213759447273449192859793582340995023140044587205977455790384551334657793048723299694102900519042888351812891684891128347099590997688057073903747219335815253191029432468351807201844690443473039118582845179053988291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							38688244c9ae372106998ac1453611a5113f2ebc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whynot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whynot.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whynot.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whynot.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whynot.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whynot.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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