www.bonadio.com

Issued by Amazon

About this certificate

This digital certificate with serial number 02:38:ba:69:92:df:d7:85:2e:83:b3:e3:47:ca:a1:76 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.bonadio.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:38:ba:69:92:df:d7:85:2e:83:b3:e3:47:ca:a1:76
Serial Number (int): 2953005508246544958712564879157010806
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 15:ec:76:ab:99:42:48:ce:85:3d:8e:53:ed:fc:45:38:0d:c0:b5:8b
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 88:8a:aa:f5:44:9d:bd:51:55:d6:99:3b:a2:c0:cf:8e:b4:f3:a6:e2
Fingerprint (sha256): 57:dd:03:a4:b0:11:b9:6b:d1:38:81:b1:2a:66:2a:8f:c7:71:32:20:9e:dd:92:69:11:01:2e:9b:65:6b:aa:41

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate www.bonadio.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bonadio.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bonadio.com
bonadio.com

Other certificates including the domain name bonadio.com

(limited to 100 certificates)
www.bonadio.com
www.bonadio.com
5651124426113024-fe1.pantheonsite.io
5651124426113024-fe1.pantheonsite.io
5651124426113024-fe1.pantheonsite.io
5651124426113024-fe1.pantheonsite.io
go.bonadio.com
roc-ucm-sub-02.bonadio.com
5651124426113024-fe1.pantheonsite.io
careers.bonadio.com
5651124426113024-fe1.pantheonsite.io
ampersand.bonadio.com
5651124426113024-fe1.pantheonsite.io
conference.bonadio.com
5651124426113024-fe1.pantheonsite.io
5651124426113024-fe1.pantheonsite.io
remote.bonadio.com
gsync.bonadio.com
5651124426113024-fe1.pantheonsite.io
www.bonadio.com
fileshare.bonadio.com
hosting.bonadio.com
mail.bonadio.com
5651124426113024-fe1.pantheonsite.io
5651124426113024-fe1.pantheonsite.io
www.bonadio.com
5651124426113024-fe1.pantheonsite.io
5651124426113024-fe1.pantheonsite.io
go.bonadio.com
5651124426113024-fe1.pantheonsite.io
5651124426113024-fe1.pantheonsite.io
5651124426113024-fe1.pantheonsite.io
5651124426113024-fe1.pantheonsite.io
5651124426113024-fe1.pantheonsite.io
5651124426113024-fe1.pantheonsite.io
vpn2.bonadio.com
5651124426113024-fe1.pantheonsite.io
5651124426113024-fe1.pantheonsite.io
exedge.bonadio.com
vpn.bonadio.com
5651124426113024-fe1.pantheonsite.io
5651124426113024-fe1.pantheonsite.io
exedge01.bonadio.com
5651124426113024-fe1.pantheonsite.io
ROC-UCX-SUB-01.bonadio.com
5651124426113024-fe1.pantheonsite.io
5651124426113024-fe1.pantheonsite.io
remote.bonadio.com
5651124426113024-fe1.pantheonsite.io
mail.bonadio.com
5651124426113024-fe1.pantheonsite.io
5651124426113024-fe1.pantheonsite.io
zixsecure.bonadio.com
5651124426113024-fe1.pantheonsite.io
5651124426113024-fe1.pantheonsite.io
remote.bonadio.com
5651124426113024-fe1.pantheonsite.io
5651124426113024-fe1.pantheonsite.io
5651124426113024-fe1.pantheonsite.io
mail.bonadio.com
5651124426113024-fe1.pantheonsite.io
*.bonadio.com
5651124426113024-fe1.pantheonsite.io
conference.bonadio.com
5651124426113024-fe1.pantheonsite.io
5651124426113024-fe1.pantheonsite.io
5651124426113024-fe1.pantheonsite.io
careers.bonadio.com
5651124426113024-fe1.pantheonsite.io
5651124426113024-fe1.pantheonsite.io
5651124426113024-fe1.pantheonsite.io
5651124426113024-fe1.pantheonsite.io
vpn.bonadio.com
5651124426113024-fe1.pantheonsite.io
go.bonadio.com
careers.bonadio.com
5651124426113024-fe1.pantheonsite.io
5651124426113024-fe1.pantheonsite.io
5651124426113024-fe1.pantheonsite.io
5651124426113024-fe1.pantheonsite.io
5651124426113024-fe1.pantheonsite.io
careers.bonadio.com
5651124426113024-fe1.pantheonsite.io
5651124426113024-fe1.pantheonsite.io
ampersand.bonadio.com
www.bonadio.com
www.bonadio.com
5651124426113024-fe1.pantheonsite.io
5651124426113024-fe1.pantheonsite.io
mail.bonadio.com
5651124426113024-fe1.pantheonsite.io
5651124426113024-fe1.pantheonsite.io
www.bonadio.com
starmobile.bonadio.com
5651124426113024-fe1.pantheonsite.io
www.bonadio.com
starmobile.bonadio.com
5651124426113024-fe1.pantheonsite.io
rocemail.bonadio.com
5651124426113024-fe1.pantheonsite.io

Certificate

The complete raw certificate details for www.bonadio.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7odcRbhTPqgkoi0tI+j
3RJAa82tNfrcP3U67mXRIgmaJOO9mLvDZjrQF0y66YIxlFRS4TcdocdXV+1TVJAZ
npXHNTWJYs8GJWOygqGcQQX6r2pxfPOE+q5MiTIrlJ3gH7r6Fgc7e9UBFuP6sym0
s4At+Id71dSFMVg1CtN5bBDImVsP47mNEmtmQ0QwihJxg9V+NMR/oK8ijf7m72XY
/pdBXr+phBWEls+rU7jfbhqutvZlw9FQ0GKHP08JsEWzgDW/l0St0aoxv4DtRXAg
SASp1afRvwBmXtpmzH+2IbE01UbGwRO/83TQlc7Poxg/M5t5TlV7HefiYPUJg/Hr
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2953005508246544958712564879157010806
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-05 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bonadio.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18648807560457353242111866538421319315074971370517515750415564750516825757366937792048634846421150607481177108116748256670995179402695096192437395524915255574759447002534467369177323021640839101883767948610128514687475071831670458472936309407848766136437070515829634831200573222639807197166767366524169041745533091966988115312615018931525872555416551158119436090416886840354216519748537448125763743825063905852994062356435425511673388517732628728156983290193746735537722185505599254474729825346160715120207501973188463916225827659799314491223941672604767938400349761113836715983083903270472942813474591444114624080777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							15ec76ab994248ce853d8e53edfc45380dc0b58b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bonadio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonadio.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000017016a00252000004030047304502202be34f92467e1af55af3c1e03b09b99cb4ff0a8b161f90c5bbc93ebb6e6e1c81022100e6071c867918248107a3655e004f1d6994c68c8cf2a1fd05ba27f6e701237ce00076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000017016a002be0000040300473045022100b0aa3eb2c963222df45ed79f56b7229edef722c043d0e5308c6e4bdee6c206ba02202b166e1549bea75454bd6830e740726dcd6edcff45af824cc10e6c292a44cba3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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