reports.magnifylab.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 01:98:61:8d:3b:df:1c:52:72:cb:56:cc:26:1b:70:61 was issued on by Amazon.

With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=reports.magnifylab.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:98:61:8d:3b:df:1c:52:72:cb:56:cc:26:1b:70:61
Serial Number (int): 2120435701714018180142922405773013089
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: dd:17:f7:ec:04:f3:2b:c8:74:b5:3c:bb:33:b3:c8:8c:5d:dd:d5:ab
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 10:b7:ac:1b:4b:b4:8b:a8:be:92:26:a9:74:d5:8f:12:2a:a9:df:91
Fingerprint (sha256): 43:aa:dd:5a:21:1d:22:33:1e:06:1f:54:fe:3e:3d:8a:8f:30:4c:45:2b:33:6b:cd:96:7f:b7:f8:6a:7a:58:af

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate reports.magnifylab.com

29

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for reports.magnifylab.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

reports.magnifylab.com
leads.investigatormarketing.com
leads.pplpractice.com
leads.monarcsoft.com
leads.jcidm.com
leads.insiderperks.com
leads.mightily.com
leads.localnetresults.net
leads.pavingmarketers.com
leads.justyourfriends.com
reports.drasticimpact.com
leads.hitedigital.com
leads.marketer-ux.com
leads.junecommerce.org
leads.pracpros.com
clientes.webseo.marketing
leads.locallogy.com
leads.lhgraphics.com
leads.productionclicks.com
leads.nwesource.com
leads.mnadigital.co.uk
leads.iovista.com
gb.my-leads.net
leads.whitefishmarketing.co.uk
leads.nationalpositions.com
leads.royalsadvertising.com
leads.influxmarketing.com
leads.digilatics.com
leads.hypelegal.com

Other certificates including the domain name magnifylab.com

(limited to 100 certificates)
magnifylab.com
reports.magnifylab.com
magnifylab.com
app.wm4d.com
sni.cloudflaressl.com
magnifylab.com
leads.rdm.agency
reports.magnifylab.com
magnifylab.com
leads.adeptplus.com
sni.cloudflaressl.com
magnifylab.com
sni.cloudflaressl.com
magnifylab.com
leads.taodigitalmarketing.com
reports.magnifylab.com
magnifylab.com
magnifylab.com
magnifylab.com
leads.codeconspirators.com
www.magnifylab.com
magnifylab.com
leads.rdm.agency
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
magnifylab.com
reports.magnifylab.com
magnifylab.com

Certificate

The complete raw certificate details for reports.magnifylab.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjV0CLB2JavEyuz2UrlNE
cRAnB/iMPiYg8y35Ow1TiW7sg4r/GLjomke2Qb8pJ/xPs39aqv7wlfGgn/f2QFhL
nuQGxvn0IArGUhWthy3YvQBVYWNUz1kcoFco8UEoMqyUId3vqVGrKctFXnMV4IXb
xbtD70GF/4BfTSodIvgVtCzvih2r7i3ilYirEuuQ4ZkecRGU3ln9QGhnT2qUqzxF
JhDnMSMBsFVXkHpJUd1Hm7vBHh8a0C7IRbnZMFZ/GP70SvVYhYxD1uXJ4B+YTudK
zZLd3vOkjk73qVd0rpi90PttIXZ3iGao8gAPkoW1vInc6qshDSgzyM2ZDABJGnfa
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2120435701714018180142922405773013089
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reports.magnifylab.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17845465193868830754199455092846443320828619000075149274221622092940759395355956862412177517943071902410016705993071107259774452171962107472451916759241848627992053706136892912538251340400939627677802225487284991428990743629911793457474461434298601248405050464610255004958731411984503432814881961051428690369590200196648288608122172714983275309783402600181062169385447318083170617283495146206202988792180435283359283871794603557971924540260180046923490202019481471417778583014003404674024418129637619131601272085433999423682040551937223586720787613232304876420409379902381189676686172429145883501980972235497416415841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dd17f7ec04f32bc874b53cbb33b3c88c5dddd5ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (704 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reports.magnifylab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.investigatormarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.pplpractice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.monarcsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.jcidm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.insiderperks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.mightily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.localnetresults.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.pavingmarketers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.justyourfriends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reports.drasticimpact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.hitedigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.marketer-ux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.junecommerce.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.pracpros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientes.webseo.marketing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.locallogy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.lhgraphics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.productionclicks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.nwesource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.mnadigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.iovista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gb.my-leads.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.whitefishmarketing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.nationalpositions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.royalsadvertising.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.influxmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.digilatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.hypelegal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00479e2a21d58ffd915eb077bbc16af28d851a9765a3d23f72eb7406eac349e3177b3a0b30f8adbb9be814a685ed7f2b9bf62cc0a60f97271b491c0f4cdeae8c17fcf07903a3b2453b7f9ca291b7fe708380a8b2adf6cdc4257b0f38dce284c3bd3cd90f746f2303cd816967f9bb4de7e55d566b70dcb3e2d47db30d3869d299453746afb6002cbd9fa030d5dd48d4303ea61df2b37ff42bf383963dc07196d83b166b10d88f4cb62887edfc957216e06fc7cde019bb755bf8e5b3d6522203ed2d97ad76f06c74b2f3aa820ecbd83117c5c827030a63c17b875f030c6a5c5204e367b29d751b3eb84c26877382f90d093a61147272d38556dc96309b4bd223a797