multiverse.io

Issued by Amazon

About this certificate

This digital certificate with serial number 09:72:be:a0:a9:e2:c4:c7:e9:e2:1c:e7:f8:4d:3f:9e was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=multiverse.io

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:72:be:a0:a9:e2:c4:c7:e9:e2:1c:e7:f8:4d:3f:9e
Serial Number (int): 12558840190845022472087305533667491742
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 6d:c9:72:63:3e:bf:1f:52:6c:8c:3a:b0:72:de:6c:fa:3a:ff:6b:30
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): a9:03:bd:30:ad:b9:ba:19:8a:cc:c2:3d:8d:43:3e:60:6d:df:2c:2b
Fingerprint (sha256): 68:78:dd:c9:eb:b7:fb:dd:0b:02:97:af:82:48:45:95:c1:dc:05:fa:82:e9:2a:bd:70:1f:00:80:99:11:a9:65

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate multiverse.io

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for multiverse.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

multiverse.io
whitehat.org.uk
*.whitehat.org.uk
*.multiverse.io

Other certificates including the domain name multiverse.io

(limited to 100 certificates)
applied.multiverse.io
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
*.multiverse.io
achieve.escoffier.edu
achieve.escoffier.edu
marketing-staging.multiverse.io
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
platform.multiverse.io
achieve.escoffier.edu
community.multiverse.io
*.multiverse.io
achieve.escoffier.edu
platform-demo.multiverse.io
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
community.multiverse.io
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
multiverse.io
marketing-staging.multiverse.io
applied.multiverse.io
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
*.marketing-dev.multiverse.io
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
multiverse.io
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
*.multiverse.io
achieve.escoffier.edu
ariel-staging.multiverse.io
achieve.escoffier.edu
multiverse.io
achieve.escoffier.edu
achieve.escoffier.edu
*.ariel-staging-pr-apps.multiverse.io
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
my.multiverse.io
achieve.escoffier.edu
*.multiverse.io
achieve.escoffier.edu
applied.multiverse.io
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
achieve.escoffier.edu
*.multiverse.io
alteryx.multiverse.io
achieve.escoffier.edu
achieve.escoffier.edu
multiverse.io
achieve.escoffier.edu
achieve.escoffier.edu

Certificate

The complete raw certificate details for multiverse.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0PH2Ie+xmw9eXBEkNVeA
T6IVTU9V/p3GO1kUBMacAnoKu4RVeMEbIXNcWiySxDdk9yyuQSrNP3lS+yF4GA50
5qac7YRafsCaQZmVe4iN0TYrw24U0j9RSbc9zWdx2oZWdhZmyx4PLcx1YKa3Pv3m
T1SGAwGFX6E4g/NmTKiQjOp9z3LKLE5guZquM6SFeLtzDATrJUq7SVVeXE/bnYaW
mxzVV3jsCYDxaBjIIg2JxLBuVtU4Uz1jklhmbYGqGYRH2+i3/fp2N9K8ktmfFM1K
PD86g0eXyoWTjpUNqbSyo17O3BsaiMXn1HNhyK7Kowy59P6mOr2wP8OwTG5eyBBj
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12558840190845022472087305533667491742
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'multiverse.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26376883073516711888897665299944824841600672306434741738029560332188748821908782169793134236791277386483607844969059134631434119067342385836282714170684259121374839406694062168017982926154234878706658701090580200318216440979519249971474793136158773191000565873444190698614693721393130626571232450483946832090733711130702262195475259022565384880971286489174635630423505181454154606154376685818308736432838296446852111337861761535930081165120545380189122360718860041235312121672292550391492631561624342815747193177914777082230127237441650264147898033365092730731863048565533223960703660134332598415777566620034620482363
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6dc972633ebf1f526c8c3ab072de6cfa3aff6b30
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'multiverse.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitehat.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whitehat.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.multiverse.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000017dc0f8eaa40000040300483046022100938bffe1c115a9971084ad5932650b94feede16f2680e4d1247abecf3fc26b11022100f90e8f3e645f345bbf0fb110a809ba4c65b954d26b421a0aef8cf50593b5ba9e00770035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c0000017dc0f8ea960000040300483046022100ea16e994c3d6c0864d05e49bbae92e0404c56f16c6611eb9010dab8aa3658f78022100dcad9b3e2a586a92d5ce7790cd22890d3c35d1f9a9b534984334c282b2e10574007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000017dc0f8ead1000004030047304502200be94831a6e141172020150fa38fcfca58e124040b0fd5bc33ea14e879714dd80221008d17601e4adf65f337f1332664f40468339e0e405f2dc1fcde54c72fffa02617
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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