leegality.com

Issued by Amazon

About this certificate

This digital certificate with serial number 01:c5:59:5d:30:e6:62:2f:01:af:c0:08:1f:fc:86:8c was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leegality.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:c5:59:5d:30:e6:62:2f:01:af:c0:08:1f:fc:86:8c
Serial Number (int): 2353922994723912809945189896731526796
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: f2:cd:35:79:d8:d6:b4:5d:20:98:ab:fe:7d:35:a5:12:13:b6:00:0c
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 37:47:99:8b:46:6e:d2:ad:65:2f:a8:3f:1e:91:63:38:6f:f8:64:30
Fingerprint (sha256): 4e:7a:95:a2:17:ad:32:11:38:79:e4:b2:c8:fb:b6:a4:a5:2b:4d:0a:03:f0:8f:1a:f0:34:f5:da:94:15:d9:80

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate leegality.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leegality.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

leegality.com
*.leegality.com

Other certificates including the domain name leegality.com

(limited to 100 certificates)
careers.myverkoper.com
csp.dolorremedies.in
docs.leegality.com
ansys.support.telled.in
careers.infra360.io
sandbox.leegality.com
careers.omni-reach.com
hrm.matrixhive.com
we.lengliim.com
careers.myverkoper.com
people.jouletap.com
books.scaltron.com
careers.omni-reach.com
people.conformancex.com
www.leegality.com
careers.amaizeing.in
*.leegality.com
hr.cloudcraftz.com
support.leegality.com
careers.senthuraa.com
we.lengliim.com
books.scaltron.com
hr.whiteblink.com
support.leegality.com
support.leegality.com
books.scaltron.com
login.digitviral.com
leegality.com
career.binaryglobal.com
hrms.zptest.cf
www.leegality.com
hr.whiteblink.com
people.aciesglobal.com
people.aciesglobal.com
people.aciesglobal.com
people.aciesglobal.com
hrms.cognetrylabs.com
hr.cloudcraftz.com
leegality.com
uat.leegality.com
mlutil.leegality.com
careers.padink.in
people.aciesglobal.com
people.aciesglobal.com
docs.leegality.com
customersupport.yupit.app
www.leegality.com
myhrms.anilhashnu.in
sandbox.leegality.com
myhr.natlextech.com
people.aciesglobal.com
careers.catalyst-partners.in
careers.padink.in
people.accustra.co.in
careers.yuvakaa.com
hrms.voziq.ai
preprod.leegality.com
books.silkenpvc.com
people.aciesglobal.com
careers.padink.in
careers.padink.in
leegality.com
people.aciesglobal.com
*.leegality.com
*.leegality.com
citrecruit.congruentsoft.com
leegality.com
hrms.uniqubic.com
people.spikewell.com
careers.yuvakaa.com
sandbox.leegality.com
people.aciesglobal.com
ic.kraftpixel.com
leegality.com
preprod.leegality.com
support.leegality.com
hrm.matrixhive.com
leegality.com
citrecruit.congruentsoft.com
payroll.aztech.org.in
app.leegality.com
careers.amaizeing.in
*.leegality.com
careers.omni-reach.com
people.vnc.global
*.leegality.com
people.aciesglobal.com
careers.omni-reach.com
pulse.securdi.com
citrecruit.congruentsoft.com
books.silkenpvc.com
careers.omni-reach.com
career.binaryglobal.com
sandbox.leegality.com
hrms.zptest.cf
people.timelybills.app
books.scaltron.com
sandbox.leegality.com
books.rockdeck.co.in
careers.catalyst-partners.in

Certificate

The complete raw certificate details for leegality.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr87HLTNTtVOVqw5IXzRQ
M6djl9Qzpy7JeVJbFJEoBu1JIpWBKR2+QBoXFr171TEWmrzNkLlE/gh8amwyel1j
x6U93Xw8YN+voar+1n3Q5COkwsCU5xukD0M5106GVrO21KwXczBlMkLLP6ZuTxcM
lw03XK7Duf/TdBbazkNe/tx4+Zjj87Yvtk8OhiK+dlBhgu0EeyVCZLW5Gmx7Etel
zfbJDLBsKzIzJE/t8dr3olOKHFMIUf00jLLYHolpepFxi7hiPET46h28EneYxQVk
BJ5gJXW3kCWlnx0UxJXz+VJ2qzPUtbujaXkk1Hjo1iLV4GujFFO/+JmjFuZ9C/H6
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2353922994723912809945189896731526796
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-27 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leegality.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22193669417683513884995272538525491715961029450580551014985446807959560553443775977409290074482394314942165065062006260192805469100840598754302734290296678318797023493656470425713183342305044623978274752643895921420672328201258664667847038605673618788263886985933192381932824042419164248315136977780503137486677868821497420482218655067846366954225137759405795495372247817581743692434316360281241289985085636258405143232166365905429485872875078058838832673277642028921255636656167353745886612244788137761142023314812865997312733145251663597602716594655574421481446808122464665281638183972343716662834962731684999592497
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f2cd3579d8d6b45d2098abfe7d35a51213b6000c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leegality.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.leegality.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000167ecfc93f80000040300483046022100f486ed50a3be67b8e9f62a1748f26f1f0cde6d395fd11d67dd6acb3deae64534022100e1b916f57aa30c45ff6dca65d602cf67e55509e31a42377d6e6744733d3226f70077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000167ecfc94d50000040300483046022100f29eec3da271def99d4c55c103a1f5193492dc3e0d56e1f4728abf43b0a3ce71022100d9cac0701923a0e470aa4f1029d9282263fed1bea1a39f91b40146c0289dfc43
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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