www.passle.net

Issued by Amazon

About this certificate

This digital certificate with serial number 04:9b:4c:03:a0:60:66:6f:82:b1:c4:9a:70:c1:92:71 was issued on by Amazon.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.passle.net

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9b:4c:03:a0:60:66:6f:82:b1:c4:9a:70:c1:92:71
Serial Number (int): 6123259746661069032268272689593029233
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 1f:46:b0:41:81:fd:e4:73:62:3b:ed:f9:25:d1:0e:51:88:39:d2:ed
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): dc:83:f4:f6:49:65:10:42:d2:5a:88:c2:38:e7:b6:1e:63:a5:0d:43
Fingerprint (sha256): 4d:17:b9:5d:c0:69:c3:b4:ba:21:46:b6:c9:5f:c7:b0:44:17:f8:d0:6b:84:25:5d:55:1c:19:2c:7c:32:fa:10

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate www.passle.net

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.passle.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.passle.net
adlaw.lewissilkin.net
family.howardkennedy.com
insights.ashfords.co.uk
employment.lewissilkin.ie
blog.weareyourbridge.com
insights.illumio.com
quick-insights.bclplaw.com
employment.howardkennedy.com
ipandmedialaw.fkks.com
media.entertainment.lewissilkin.com
viewpoints.flourishwithcarbon.com
insights.walkersglobal.com
technology.lewissilkin.com
news.4iq.com
corporatefinance.rockworth.co.uk
brands.lewissilkin.com
disputeresolution.howardkennedy.com

Other certificates including the domain name passle.net

(limited to 100 certificates)
www.passle.net
www.passle.net
www.passle.net
*.passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
home.passle.net
www.passle.net
home.passle.net
passle.net
passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
insights.datatribe.com
home.passle.net
www.passle.net
insights.datatribe.com
www.passle.net
www.passle.net
www.passle.net
newslettercampaigns.passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
newslettercampaigns.passle.net
*.passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
*.passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
passle.net
www.passle.net
newslettercampaigns.passle.net
home.passle.net
*.passle.net
newslettercampaigns.passle.net
*.passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
*.passle.net
www.passle.net
home.passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
newslettercampaigns.passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
www.passle.net
*.passle.net
home.passle.net
home.passle.net

Certificate

The complete raw certificate details for www.passle.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EHet0jWyLNbDbj6uShJ
Y56tTPK/errNK5SJYvWoXfw4rz7yIXYbDRc83mQ+QPPdaPj/3x4wx45b4I37Odo7
IrzE1h+L/cOQuIuWW3JvbqPz9JqLvnLlhPAe2SBBaLDv/xOr0QTZlVPzcqQ9zjp9
Gb/5CRQGJ9LY7PxaIhRDHEGVqXLp2QY9CncJ+WvbISC8fnMmP1UEsOC+B9+cXq7V
T2j53ZvW2QQ3oxfUDTTVW2eM3aJgn3JsL6SsSo82T7juO2vARvPVnvYj2yeG4fOy
QnqmQY9sDF+FiURGoADIL7uDpj5XE6l7aCBjzkBaEE2tZfyE6EY3TcB5gryFO3Ei
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6123259746661069032268272689593029233
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.passle.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28309862012215653397963489049723802518075696495563048051516343485055981799027119676895427985285710220803159015787520021392346882637691856456669620877145737351625447647490770561100044712272915912466549392285357624613262117070468723512583651660871660925036733719945572318847067177609395699712093033222488093192652513867380104053573665433979007162069543460638955062828111154350349214543643009696177293630852795303161006723769595270845186283830696482299000137693109377318072334215277638756587113056207084380765161426395281804368517406358914672979954688340469039088869612725535011653013624178066175800193944793878971359813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1f46b04181fde473623bedf925d10e518839d2ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.passle.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adlaw.lewissilkin.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'family.howardkennedy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.ashfords.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employment.lewissilkin.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.weareyourbridge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.illumio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quick-insights.bclplaw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'employment.howardkennedy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipandmedialaw.fkks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.entertainment.lewissilkin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewpoints.flourishwithcarbon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insights.walkersglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technology.lewissilkin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news.4iq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporatefinance.rockworth.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brands.lewissilkin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disputeresolution.howardkennedy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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