fitpregnancy.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0b:52:6b:f1:d5:04:80:de:cd:59:fe:f0:09:37:89:89 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fitpregnancy.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:52:6b:f1:d5:04:80:de:cd:59:fe:f0:09:37:89:89
Serial Number (int): 15049465673774438502031188952847190409
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ca:98:f3:d2:28:ee:b9:dc:10:6d:78:fd:9b:05:72:91:29:49:49:0c
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 86:ba:6a:b6:e2:78:9f:54:fd:e3:bb:6b:6e:32:c0:45:02:b0:17:3b
Fingerprint (sha256): 46:af:a1:c7:9a:1f:c7:81:8e:0c:af:ab:ad:6a:35:cc:1a:a0:37:29:3b:76:c9:ca:13:a4:26:ac:1c:57:d1:91

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate fitpregnancy.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fitpregnancy.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fitpregnancy.com
*.fitpregnancy.com

Other certificates including the domain name fitpregnancy.com

(limited to 100 certificates)
qa4.ugc.marthastewart.com
*.secure.meredith.com
secure.meredith.com
my.meredith.com
qa4.ugc.marthastewart.com
fitpregnancy.com
*.agriculture.com
dev.fitpregnancy.com
dev.secure.meredith.com
secure.meredith.com
dev.fitpregnancy.com
mywedding.com
secure.meredith.com
mywedding.com
login.fitpregnancy.com
qa2.ugc.marthastewart.com
mdp.api.meredith.com
secure.meredith.com
fitpregnancy.com
admin.web.fitpregnancy.com
qa4.ugc.marthastewart.com
ugc.marthastewart.com
secure.meredith.com

dev.fitpregnancy.com
secure.meredith.com
qa3.ugc.marthastewart.com
ugc.marthastewart.com
test.secure.meredith.com
www.fitpregnancy.com
qa3.ugc.marthastewart.com
ugc.marthastewart.com
secure.meredith.com
*.secure.meredith.com
origin-dev.fitpregnancy.com
secure.meredith.com
fitpregnancy.com
qa3.ugc.marthastewart.com
origin-www.fitpregnancy.com
api.meredith.com
ugc.marthastewart.com
qa2.ugc.marthastewart.com
*.secure.meredith.com
origin-www.fitpregnancy.com
secure.meredith.com
fitpregnancy.com
ugc.marthastewart.com
my.meredith.com
qa3.ugc.marthastewart.com
my.woodmagazine.com
secure.meredith.com
qa3.ugc.marthastewart.com
www.fitpregnancy.com
secure.meredith.com
mywedding.com
*.agriculture.com
dev.fitpregnancy.com
qa2.ugc.marthastewart.com
qa2.ugc.marthastewart.com
*.secure.meredith.com
my.woodmagazine.com
ugc.marthastewart.com
qa3.ugc.marthastewart.com
secure.meredith.com
qa3.ugc.marthastewart.com
www.fitpregnancy.com
qa2.ugc.marthastewart.com
qa4.ugc.marthastewart.com
qa4.ugc.marthastewart.com
origin-www.fitpregnancy.com
my.meredith.com
*.secure.meredith.com
www.fitpregnancy.com
*.secure.meredith.com
www.fitpregnancy.com
secure.meredith.com
dev.secure.meredith.com
dev.my.meredith.com
my.woodmagazine.com
dev.fitpregnancy.com
qa3.ugc.marthastewart.com
qa4.ugc.marthastewart.com
secure.meredith.com
secure.meredith.com
qa2.ugc.marthastewart.com
ugc.marthastewart.com
qa2.ugc.marthastewart.com
test.secure.meredith.com
my.woodmagazine.com
*.secure.meredith.com
qa2.ugc.marthastewart.com
ugc.marthastewart.com
fitpregnancy.com
mywedding.com
*.secure.meredith.com
qa3.ugc.marthastewart.com
mywedding.com
origin-www.fitpregnancy.com
qa2.ugc.marthastewart.com
*.secure.meredith.com

Certificate

The complete raw certificate details for fitpregnancy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQdueST/PkOVRjXVtZly
Lv5/NtMUQJauBSn1qmZvlmptEZsPbU8uj+Va6aGxY34dQyyO0/NFaT9tLU+yWKZL
q/SjPGJ87A83d/1CmXMPs9ACPq7JcSHZ50YzHe9ZuXzEN9kx3qr/eSDNf7TGnCwi
9xn6TaT9pyOKZ6EGRrKD1xbJJvitflnp4sjFYfVF++QPG7nXd5eFMdB1I7pb1US8
ftEjCuGNXCYBjbWH4Zt6BGDFOnMaj13pP4/P1T4G8PQktG8dQQGLAytkw6uu50uj
uz9eOdn4+FibfJJal/BiUqU5weWs3C/1R51EKJymoo9kOYwICpqzl2fzhbHkR1V1
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15049465673774438502031188952847190409
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fitpregnancy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21337938166257232915292336527722002344027668125380804362346896093911638419338973541367714281260977449352164485609233885455950753322281400203247806569157758117432828284616149704415250255905087339805832310974186217587577343174088473793935753792060163285673041814972568413877996692062763640321408670879023141217446319990842374575706313906039396721068799418149120665795394545388713071687555024833379570708979149717705956666601807771909212155410865131634055450998568421619824610853058057356538151846328402641191311573031801460511244571464789693956613300620432487153927541082343931789617266333245521874422568828098699425041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca98f3d228eeb9dc106d78fd9b0572912949490c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fitpregnancy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fitpregnancy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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