wunder.dog

Issued by Amazon

About this certificate

This digital certificate with serial number 04:fa:e4:ad:d9:70:06:a7:3b:d6:7d:fe:86:f0:68:64 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=wunder.dog

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:fa:e4:ad:d9:70:06:a7:3b:d6:7d:fe:86:f0:68:64
Serial Number (int): 6619624360928796189480564113426901092
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: df:30:8a:17:4f:19:d5:62:c8:e6:af:e4:0e:a2:b7:50:b2:05:80:5f
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 76:c6:52:a7:cb:62:24:b2:5e:a1:ce:57:53:de:06:dd:0c:d2:66:21
Fingerprint (sha256): 59:32:68:76:cf:65:0e:63:87:4a:af:42:8a:2c:b9:d9:ca:6e:b1:f7:32:d4:81:55:2c:b9:79:9a:e7:55:a9:08

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate wunder.dog

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wunder.dog

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wunder.dog
www.wunder.dog
wunderdog.fi
www.wunderdog.fi

Other certificates including the domain name wunder.dog

(limited to 100 certificates)
filipwolanski.com
ssl379804.cloudflaressl.com
weare.wunder.dog
ssl379806.cloudflaressl.com
scamardi.info
wunder.dog
ssl379805.cloudflaressl.com
sni.cloudflaressl.com
ssl379806.cloudflaressl.com
ssl379806.cloudflaressl.com
ssl379806.cloudflaressl.com
blog.wunder.dog
ssl379805.cloudflaressl.com
ssl379806.cloudflaressl.com
ssl379804.cloudflaressl.com
ssl379806.cloudflaressl.com
ssl379806.cloudflaressl.com
ssl379806.cloudflaressl.com
ooo.wunder.dog
ssl379806.cloudflaressl.com
email.wunder.dog
www.cooldys.com
ssl379806.cloudflaressl.com
rockersesports.com
sgchuscpje.device.sighub.ch
ssl379804.cloudflaressl.com
*.lab.wunder.dog
email.wunder.dog
email.wunder.dog
ssl379805.cloudflaressl.com
landing.wunder.dog
ssl379805.cloudflaressl.com
blog.wunder.dog
lion42109465.bluesageusa.com
ssl379806.cloudflaressl.com
email.wunder.dog
ssl379806.cloudflaressl.com
ooo.wunder.dog
rockersesports.com
ssl379806.cloudflaressl.com
email.wunder.dog
www.ustheta.com
ssl379806.cloudflaressl.com
ssl379806.cloudflaressl.com
ssl379806.cloudflaressl.com
ssl379805.cloudflaressl.com
ssl379805.cloudflaressl.com
ssl379806.cloudflaressl.com
ssl379806.cloudflaressl.com
ssl379804.cloudflaressl.com
ssl379806.cloudflaressl.com
ssl379805.cloudflaressl.com
ssl379805.cloudflaressl.com
ssl379806.cloudflaressl.com
ssl379806.cloudflaressl.com
ooo.wunder.dog
weare.wunder.dog
ssl379805.cloudflaressl.com
ssl379804.cloudflaressl.com
blog.wunder.dog
ssl379805.cloudflaressl.com
landing.wunder.dog
ssl379804.cloudflaressl.com
email.wunder.dog
blog.wunder.dog
ssl379806.cloudflaressl.com
wunder.dog
ssl379806.cloudflaressl.com
scamardi.info
wunder.dog
ssl379804.cloudflaressl.com
ssl379806.cloudflaressl.com
weare.wunder.dog
ssl379806.cloudflaressl.com
ssl379806.cloudflaressl.com
wunder.dog
ssl379806.cloudflaressl.com
*.lab.wunder.dog
ssl379804.cloudflaressl.com
redhumanist.org
ssl379806.cloudflaressl.com
ssl379804.cloudflaressl.com
ssl379806.cloudflaressl.com
moellnitz.org
aibol.it
ssl379805.cloudflaressl.com
ssl379806.cloudflaressl.com
branded.virtualpbx.com
ssl379804.cloudflaressl.com
wunder.dog
ssl379805.cloudflaressl.com
blog.wunder.dog
wunder.dog
ssl379804.cloudflaressl.com
ssl379806.cloudflaressl.com
www.barriosdepie.com
ssl379806.cloudflaressl.com
ssl379805.cloudflaressl.com
club.paylix.com
ssl379805.cloudflaressl.com

Certificate

The complete raw certificate details for wunder.dog in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtq61G6UkyT+UOwpGA2Ci
mc29rlkqtFITEu1uOKJda0PS+dkiOjSPXL6OpaJDSCiN0eEcUJtbYY2DhfWnacfb
RAsRQZm5RTHqQ6a/mDY6vXWaktKfzxxvpSP+bOILA04njDqsdyIGh8zsnxTelZK7
Mqx8LMouTAEDdUqim+Ubyzz/FD+wJNjT5nNUBeLNib5ZSlb3pMHqZ/MlxmDHeTek
cxnDGRcozcNbO63AqPUfp4q9UzyYs50FzFi8cWqj2iv6CD7pgydYhmmBbTHYdYaz
KQZKgfxbnGINGeob0WUqKiWHamnEVL2FUuvd7FcdQfXDB77KuM19fmVLD93g+rAb
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6619624360928796189480564113426901092
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-05 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wunder.dog'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23061522959845468889320603256873753777816563889033453189308447444756621673501085253811940891766245865895696739571215087744784334606715986291053284699758047848201897466290768992443634804054410382935607605047030405501594539545893983760428877227574238140101252935919018193266186434185766619735140935229538474896647776383837010240095425059544181011107292460451631983286371687061906469726100836206885360593762756966855734149661830104577434240089849434298420790292660622006571184735734087654913755452559681230479420442850635142470293302792026472799110967156442007803449494078461510154155438396540069761390651545647223675659
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							df308a174f19d562c8e6afe40ea2b750b205805f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wunder.dog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wunder.dog'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wunderdog.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wunderdog.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016bbfba31ef0000040300473045022100e78218eff518b1fc0b0e57c04a52842b9d10e01c85611bf645752f2dad6cc40802206f5f0ccfa5f503e612a095bb719331929fcbf2a8b5e6236edb09a244d8be70c70075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016bbfba324e0000040300463044022002d243ebfa0b43b023d3d358bee1b90056881b99ba14bd68d655d6e8d64996420220662a75138df4f8f24baa4cd33b7a8f630617306ae3bed8d55182b6193faa1046
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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