gencon.asmodee.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 03:f8:7b:6e:1a:84:06:6f:a7:93:60:1d:dc:48:4c:ca was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gencon.asmodee.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f8:7b:6e:1a:84:06:6f:a7:93:60:1d:dc:48:4c:ca
Serial Number (int): 5277877067956729452532958017043844298
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 62:58:00:b7:37:a1:28:9b:86:cd:75:d2:22:84:95:49:e8:95:49:23
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): e6:9e:e4:e2:b3:06:97:f9:93:f0:d6:cf:78:e9:64:9e:a7:d0:2d:f9
Fingerprint (sha256): 56:30:3e:da:db:7f:42:43:19:47:c6:3a:74:71:cd:a1:ec:a7:03:68:ae:67:df:c0:2a:78:9d:5a:1c:2b:08:d3

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate gencon.asmodee.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gencon.asmodee.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gencon.asmodee.com
www.gencon.asmodee.com

Other certificates including the domain name asmodee.com

(limited to 100 certificates)
ssl471549.cloudflaressl.com
ssl471549.cloudflaressl.com
*.asmodee.com
asmodee.com
asmodee.com
asmodee.com
sni189662.cloudflaressl.com
sni189662.cloudflaressl.com
webshopnl.asmodee.com
preproduction-mdm.asmodee.com
ssl471548.cloudflaressl.com
forms.jugosystems.co.uk
sni189662.cloudflaressl.com
dev.asmodee.com
sni.cloudflaressl.com
asmodee.com
sni.cloudflaressl.com
forms.resursbrist.se
dev.asmodee.com
forms.bemovil.es
preproduction-mdm.asmodee.com
sni189662.cloudflaressl.com
shop.asmodee.com
sni189662.cloudflaressl.com
asmodee.com
sni189662.cloudflaressl.com
forms.itcrew.supply
shop.asmodee.com
promo.electrolux.ro
reclamation.asmodee.com
gencon.asmodee.com
dev.asmodee.com
asmodee.com
sni189662.cloudflaressl.com
mdm.asmodee.com
webshopnl.asmodee.com
dev.asmodee.com
ssl471547.cloudflaressl.com
asmodee.com
ssl471549.cloudflaressl.com
ssl471548.cloudflaressl.com
ssl471549.cloudflaressl.com
sni189662.cloudflaressl.com
ssl471548.cloudflaressl.com
asmodee.bynder.com
ssl471548.cloudflaressl.com
ssl471547.cloudflaressl.com
forms.finaform.it
sni189662.cloudflaressl.com
asmodee.com
ssl471547.cloudflaressl.com
be.asmodee.com
ssl471549.cloudflaressl.com
jarvis.asmodee.com
ssl471549.cloudflaressl.com
dev.asmodee.com
ssl471547.cloudflaressl.com
forms.aurabrands.com
asmodee.com
forms.embello.com
ssl471548.cloudflaressl.com
sni.cloudflaressl.com
*.asmodeena.com
ssl471549.cloudflaressl.com
asmodee.com
be.asmodee.com
ssl471549.cloudflaressl.com
ssl471547.cloudflaressl.com
asmodee.com
*.asmodee.com
mdm.asmodee.com
asmodee.com
dev.asmodee.com
form.europabw.co.uk
shop.asmodee.com
ssl471548.cloudflaressl.com
asmodee.com
asmodee.com

Certificate

The complete raw certificate details for gencon.asmodee.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9PfjrCCWnHJHOihABXU
FruDGOUaWQIrdVB5Ev6NitYIPo0pkqA22ftjckkpWDy3SH2AACfEEI2XOEOORx9i
7bi1MMsR4viAfSGzm6VDot+Zb7h0nYzhO3VEDNprmESzz01XQTOTw0gjb499vwji
7lYoW1zO+ZiPsWoWP5thFoh2Efe/5m22Xy+yUJL+EYslZyGgHLLrNPwUedEFPAAA
LLiiRjBsFFEziG+5y9JbdGFXyrkkiCTJFGk3/DZr1rlYChYKkT2jbFEs+wN4oo1n
AqhrjB4zUcW4/5ov4qGy5yKtoRlEt3IH655rQng09TL7mmNR47GIDtAA+pN2cUvG
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5277877067956729452532958017043844298
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gencon.asmodee.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23711041632563233876799988641677552706329243066584864346274434148984140761107960350157208506904372325547635349266665724735326628951240136517031292477833023818782007931535830771313782574842045126549658564712288417065286463216376952021705612070297753391004579203687238297241780521566786276693940659072073758626590406451186855136674451062026466396657159509018372154779578214083719853169567999933267510915033077657526542007907749386495705608280201896908570143934779123354301747470452219388736095808850352573329091978870023448335296499470683761366606664335839984959558141354777389184957453366148666974864036148059688388187
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							625800b737a1289b86cd75d222849549e8954923
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gencon.asmodee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gencon.asmodee.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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