*.pre-prod.fxempire.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0b:18:05:c4:bd:40:6a:f7:61:79:d6:65:c6:0e:b9:2b was issued on by Amazon.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.pre-prod.fxempire.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:18:05:c4:bd:40:6a:f7:61:79:d6:65:c6:0e:b9:2b
Serial Number (int): 14746240077577324762095303117136378155
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 5d:aa:67:c9:84:29:f7:f8:31:9c:13:a9:37:e5:8a:43:05:47:cd:00
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): da:cb:d4:63:f1:9a:4b:10:9d:f3:19:5b:de:bb:89:09:3b:38:30:29
Fingerprint (sha256): 44:b7:32:ce:0a:83:99:ee:65:29:31:6c:5a:ac:e4:8f:fc:fd:38:26:5c:30:59:fe:4a:15:0b:e9:04:7a:3c:96

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.pre-prod.fxempire.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.pre-prod.fxempire.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.pre-prod.fxempire.com
*.fxempire.es
*.fxempire.nl
*.fxempire.fr
*.fxempire.se
*.fxempire.de
*.fxempire.jp
*.fxempire.dk
*.fxempire.com
*.fxempire.it
*.fxempire.gr
*.fxempire.co.il

Other certificates including the domain name fxempire.com

(limited to 100 certificates)
*.fxempire.com
beta.fxempire.com
fxempire.com
pixel.plumbing
www.signals.fxempire.com
mediakit.fxempire.com
www.careers.fxempire.com
signals.fxempire.com
www.careers.fxempire.com
fxempire.com
mediakit.fxempire.com
wp.fxempire.com
wp.fxempire.com
responsive.leafreport.com
*.fxempire.com
wp.fxempire.com
www.signals.fxempire.com
images.fxempire.com
pixel.plumbing
images.fxempire.com
www.careers.fxempire.com
www.mediakit.fxempire.com
fxempire.com
pixel.plumbing
www.signals.fxempire.com
responsive.fxempire.com
wp.fxempire.com
www.mediakit.fxempire.com
signals.fxempire.com
pixel.plumbing
wp.fxempire.com
pixel.plumbing
mediakit.fxempire.com
www.careers.fxempire.com
*.pre-prod.fxempire.com
*.fxempire.com
mediakit.fxempire.com
www.signals.fxempire.com
*.pre-prod.fxempire.com
www.signals.fxempire.com
fxempire.com
pixel.plumbing
wp.fxempire.com
www.signals.fxempire.com
images.fxempire.com
fxempire.com
mediakit.fxempire.com
fxempire.com
*.fxempire.com
pixel.plumbing
images.fxempire.com
signals.fxempire.com
images.fxempire.com
www.mediakit.fxempire.com
mediakit.fxempire.com
www.careers.fxempire.com
wp.fxempire.com
fxempire.com
signals.fxempire.com
pixel.plumbing
beta.fxempire.com
datapoints.fxempire.com
signals.fxempire.com
images.fxempire.com
responsive.coinz.com
responsive.leafreport.com
fxempire.com
fxempire.com
pixel.plumbing
*.fxempire.com
fxempire.com
staging.fxempire.com
fxempire.com
fxempire.com
pixel.plumbing
responsive.fxempire.com
wp.fxempire.com
*.fxempire.com
beta.fxempire.com
www.mediakit.fxempire.com
www.mediakit.fxempire.com
*.fxempire.com
www.careers.fxempire.com
staging.fxempire.com
www.careers.fxempire.com
fxempire.com
fxempire.com
www.mediakit.fxempire.com
www.signals.fxempire.com
fxempire.com
wp.fxempire.com
*.fxempire.com
pixel.plumbing
www.fxempire.com
www.careers.fxempire.com
beta.fxempire.com
fxempire.com
www.mediakit.fxempire.com
www.signals.fxempire.com
www.signals.fxempire.com

Certificate

The complete raw certificate details for *.pre-prod.fxempire.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCS+28iW4Q92VX5UHiJQ
lcxP4qmAYmIb1CFdj/fXshe4cLnbc2cBsu36Wc/UfNznlrZHzot8FhXUB+iUlOb7
MuV8enopcA/mJPrLynFJxUK82RSfIlGp1cvonhfzNeNLWltDauy5Rt84lpRWjept
eFMTcMR3uXa47gN7oYZlB8GY2mI/627miLvh+ARuF579d8GMNMVtlea82FzO3iku
WiZ1Y97C9/1g+D8JfTJbMe8RhHqGkWLVP5o/XxpN2Fo2ZO9moQydnulyV8L/ikP+
J23+vOkQI1K4ydPwv+ImPJnwjFVtgcquoR/TD8UqqZTIW0Wwqxm1gTzcPq9oGDmu
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14746240077577324762095303117136378155
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.pre-prod.fxempire.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24255874455152867683447845034207889232236239573425422030346130129411023472252830410397382772197309164173300567636518929060420216344517241726389913154488547016576215595295994365455877578985773048992631508982671356906421836938867965053373267139732347547571993241444442569528983362676048513397353817496692985089031708387536955233417544332640584195394264550442437245392362973454489425003489466301149287383376067958909453718214665401256332886185739974267191236642922477223705475462577026320644121646356662011687747573066087335682727374247068856852919230901882150835893427630593825353678198960757585627591416658683481403019
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5daa67c98429f7f8319c13a937e58a430547cd00
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (197 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pre-prod.fxempire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxempire.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxempire.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxempire.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxempire.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxempire.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxempire.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxempire.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxempire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxempire.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxempire.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxempire.co.il'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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