fmair.ca

Issued by Amazon

About this certificate

This digital certificate with serial number 0d:29:38:a2:53:c4:ae:8c:00:9d:61:e0:11:b7:7e:3a was issued on by Amazon.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fmair.ca

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:29:38:a2:53:c4:ae:8c:00:9d:61:e0:11:b7:7e:3a
Serial Number (int): 17493996792228995635058270179679501882
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e6:20:28:f3:32:25:7a:65:7d:0d:cd:f7:11:86:32:11:1f:70:e0:9c
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 6d:4d:fa:ba:b2:97:2e:f4:07:7a:e4:95:3c:92:6f:4c:da:4d:ff:ef
Fingerprint (sha256): 44:e7:3c:77:d2:73:47:f4:3d:81:1b:2e:95:c1:6e:40:54:33:f0:d8:56:1a:a8:f1:25:ca:ce:f1:82:6b:33:db

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate fmair.ca

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fmair.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fmair.ca
fmairsite.com
fmairapp.com
fmaircdn.com
ephemerecreative.ca

Other certificates including the domain name fmair.ca

(limited to 100 certificates)
endotest.fmairsite.com
fmair.ca
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
landing.fmair.ca
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
landing.fmair.ca
sni41867.cloudflaressl.com
i.justneedto.com
sni41867.cloudflaressl.com
fmair.ca
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
fmair.ca
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
i.justneedto.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
fmair.ca
landing.fmair.ca
sni41867.cloudflaressl.com
sni.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
fmair.ca
*.fmair.ca
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
landing.fmair.ca
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
endotest.fmairsite.com
landing.fmair.ca
endotest.fmairsite.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
fmair.ca
*.ephemerecreative.ca
landing.fmair.ca
fmair.ca
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
fmair.ca
i.justneedto.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
i.justneedto.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
endotest.fmairsite.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
fmair.ca
fmair.ca
i.justneedto.com
i.justneedto.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
fmair.ca
fmair.ca
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
fmair.ca
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
sni41867.cloudflaressl.com
*.fmair.ca
fmair.ca

Certificate

The complete raw certificate details for fmair.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7JN4d1oxvloRH59OZbg
TUTfcEdZHOffk2MDwZe4ZvRwYaJWjaie6t80JUpWyfdn4M+5Zz2roUn5aYVAvwfF
mnMHButwuMq6+3qEpO1rn/L2iFYAVGiBAPH2DF1VMGBM0bSb2UbSi74TJR9/OkMa
9wDgSfiTIUt5NDO9EyD7PW9nkIN2dATRR5z8kBxHpH7JU4aGiUnjvsZ3c2wbmpHZ
8+PfjrzPl3qLn0lAqUojkvG0Xgz+FMo0nvO+gOnWIryWuNAMwPLMefhkKcoZqStH
uTbaYD3pzuN4Qe8x+gnODx5y9GaglxwsDAzfOkyYjQDLlk3xIc7jTq6z93b4ptI9
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17493996792228995635058270179679501882
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-04 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fmair.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25714300999789270515251103815223090452783606793162757843757637993253974595197798449440862280950939670210143627579876781910907312642725408960530728469687705149506984246502198485957936438597570189685978166258116942026532280732039242048475241584099257316186809542169922342295634037339124084233428636634144581568433684195476202005559785002144121726468699276837969843752393366244746696633965832242488126469361095424810367039396515040957527533477499577465916084898389830083902607847109356979902252013916447075587977941323205159168725965335359865697781713910164741812764764465225839107397036932950801082686138341764600315217
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e62028f332257a657d0dcdf7118632111f70e09c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmair.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmairsite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmairapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmaircdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ephemerecreative.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a3f05f45ba6ee5684b727e4c2e86eca4c9bf9792aad6ce9d5fd00a3709552bb286b62b23eb5998e3090f35a87889a285c585b93cb049fc11469d19f8090ff8c4ac702424f589c3d483b4e685ae6517f1a8a66e4c2bcfe7338957b83eb8f42a3dd35d4dc87059400bf29417268005d7f737b79f312ea45f558fdedf3bbec52230822f694fdcd50876733a1da18da5de05f83f381249be0f83bfa9df7fa73248fedecbee2a2b006c688f530d51a994b4015fed3f57e2f1388c6fb87b5465e4d4b927f2e4175c8e4979cdaf3789f243abaeab3eae2f161f07a1d2e912acdc4221778177007b4a1fd1cc08b27e72b2447764d93a9921467f8c1130fa5d5b01118387