synap.ac

Issued by Amazon

About this certificate

This digital certificate with serial number 0d:d3:c4:0e:90:d6:e3:19:7f:5b:40:54:74:70:51:c1 was issued on by Amazon.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=synap.ac

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:d3:c4:0e:90:d6:e3:19:7f:5b:40:54:74:70:51:c1
Serial Number (int): 18379515088656969891681679669107642817
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 12:8b:29:14:33:f1:5f:26:f3:b9:c9:d4:bc:72:cf:c8:e4:7a:f6:3e
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 07:21:62:83:e5:0b:ac:a7:a2:bc:e9:90:43:b3:6d:7a:63:4b:20:db
Fingerprint (sha256): 6b:f8:c2:d4:5a:a2:cd:65:be:4e:29:d5:9c:78:bf:5a:5b:b1:fe:26:59:c8:75:8b:6e:36:8e:3f:a3:bc:62:77

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate synap.ac

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for synap.ac

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

synap.ac
*.synap.ac
staging.synap.ac
*.staging.synap.ac
courses.purplebeelearning.com
www.courses.purplebeelearning.com
practice.law.ac.uk
manual.mytaxi.com
www.manual.mytaxi.com
learn.broadstoneapp.com
join.docabode.com
synap.themdu.com

Other certificates including the domain name synap.ac

(limited to 100 certificates)
bannerman.totemapp.net
synap.ac
about.ksting.com
synap.ac
*.synap.ac
archmission.totemapp.net
archmission.totemapp.net
archmission.totemapp.net
synap.ac
synap.ac
archmission.totemapp.net
archmission.totemapp.net
updates2.synap.ac
*.staging.synap.ac
about.ksting.com
synap.ac
academy.synap.ac
archmission.totemapp.net
archmission.totemapp.net
app.synap.ac
business.synap.ac
synap.ac
about.ksting.com
academy.synap.ac
synap.ac
about.ksting.com
auth.powermyanalytics.com
about.ksting.com
*.synap.ac
oauth2.kyl191.net
www.synap.ac
business.synap.ac
about.ksting.com
*.synap.ac
about.ksting.com
synap.ac
about.ksting.com
synap.ac
about.ksting.com
synap.ac
academy.synap.ac
updates.synap.ac
archmission.totemapp.net
synap.ac
business.synap.ac
synap.ac
archmission.totemapp.net
academy.synap.ac
*.synap.ac
synap.ac
archmission.totemapp.net
synap.ac
updates.synap.ac
updates.synap.ac
about.ksting.com
archmission.totemapp.net
archmission.totemapp.net
help.synap.ac
archmission.totemapp.net
assets.synap.ac
academy.synap.ac
assets.synap.ac
synap.ac
docs.synap.ac
business.synap.ac
about.ksting.com
bannerman.totemapp.net
synap.ac
archmission.totemapp.net
marketing.synap.ac
archmission.totemapp.net
*.staging.synap.ac
archmission.totemapp.net
synap.ac
about.ksting.com
assets.synap.ac
synap.ac
synap.ac
archmission.totemapp.net
docs.synap.ac
*.synap.ac
synap.ac
synap.ac
marketing.synap.ac
about.ksting.com
synap.ac
staging.synap.ac
archmission.totemapp.net
about.ksting.com
about.ksting.com
synap.ac
business.synap.ac
synap.ac
staging.synap.ac
docs.synap.ac
archmission.totemapp.net
assets.synap.ac
academy.synap.ac
about.ksting.com
archmission.totemapp.net

Certificate

The complete raw certificate details for synap.ac in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuvjpDNdigr720XS94mg
4l10OH6pGYW2vaIdUsGGYM/UG2489plK/RduaeSipjTTDRVSq2I/0d4vsLUVdUsn
AnKLjh3SIAIgY175XfKwoATkunlX2nwQ+thwIfOSXRyo0t5xj3hNWL7kn01HB3zr
aXylY6wWk9n557MMsY7L5SXngu8PVxe54lcovg/tFE4mE2IUojsLkQU+mhDRL3Rr
m/g82g/N5Gnyuj9OYns9cFTZ+sIXyA/hmbn283svW1KCnDbmBBV2ZSoT1TmaKIHu
HtSX+1L4bUGOJajiLWa2p4MeQ/2I0yxKTOEgkkXmBc9C/aYtXOmtgPFpr+TLueFB
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18379515088656969891681679669107642817
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-28 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'synap.ac'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23596646035520731767895089420569615238150934579486574324736934809682196692226437889850382908012317211617444362302112452510247840823941428361435644666956170053395486436404275511815887650167412142197471719044834578588894661539910177091837856509106410122743745978499157906309023335031124996958848177695469113123567817051762816646105696580281457438611916022261336645282820810311823789646831720438690611225269275393887352061727117329965670545268666938284898403872422077857299271954002709633362864614010306442949220965674388478566639375828999905348670868041084515122693928900264736676910157640686658020582762413767740441051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							128b291433f15f26f3b9c9d4bc72cfc8e47af63e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (253 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synap.ac'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.synap.ac'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.synap.ac'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.synap.ac'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courses.purplebeelearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.courses.purplebeelearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'practice.law.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manual.mytaxi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manual.mytaxi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.broadstoneapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.docabode.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'synap.themdu.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016894e4e7970000040300473045022100b1d17a15c6d4b6baf55a8271c17180e758af20bc98d40b50b2fe99b8a49a73b602202fde853bf8986c02df869a8a85e4382b540430f8a69440783e9c99354caeba2e0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016894e4e8710000040300473045022100df1978cd5cbdba55b71943a551f1ebc4182ac693d399345bf81a355ffbd638e702204fb9b0aae7c14425602ae97662f4c8dafb18e7522eae4a72aad76d76f69067c3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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