www.bienparabien.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:72:ef:3d:64:8d:ab:1c:4f:7d:0b:3f:86:1a:14:71 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.bienparabien.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:72:ef:3d:64:8d:ab:1c:4f:7d:0b:3f:86:1a:14:71
Serial Number (int): 19205966142794746259267013052550747249
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a8:90:7a:da:b7:bd:84:7f:d6:9e:fe:ed:2a:c5:8e:40:83:d4:d2:2c
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 02:b1:a5:ec:88:ca:3c:bf:62:21:dc:5d:df:de:0e:fc:99:fd:de:38
Fingerprint (sha256): 70:c7:98:61:53:27:7e:8d:3a:02:3f:2c:4d:bd:6b:fb:08:b4:b0:c8:18:a9:38:7c:67:34:ea:47:1d:b7:68:07

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate www.bienparabien.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bienparabien.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bienparabien.com
bienparabien.com

Other certificates including the domain name bienparabien.com

(limited to 100 certificates)
tym.share.app-staging.c-rayon.com
amborjo.com
hillstarmedia.com
ivenfe.cc
scoring.bienparabien.com
www.status.bienparabien.com
www.mysolace.app
www.pspkdevtest.net.au
www.botls.app
notes.andymatuschak.org
insent.ai
bienparabien.com
www.joeyyang.com
isys.cc
tst.bienparabien.com
seils.com.au
account.bienparabien.com
blog.bienparabien.com
www.mryu.menu
simulador.bienparabien.com
cburg.galander.berlin
spotter.soinlabs.net
blog.bienparabien.com
it.bienparabien.com
liquidez.bienparabien.com
www.belezafresca.com
www.kdmservices.in
www.appricode.co
api.facturacion.bienparabien.com
thetiburondon.com
www.pantaurelawan.com
status.bienparabien.com
www.nsjtt.org
*.bienparabien.com
www.matjaz.dev
nrm.bienparabien.com
myautodebits.ca
creditos.bienparabien.com
tst-originacion.bienparabien.com
www.neonotes.app
bienparabien.com
servicios.bienparabien.com
www.karlitekniksupompalari.com
soc.bienparabien.com
subscribe.insighttimer.com
soc.bienparabien.com
mailing.bienparabien.com
tst-originacion.bienparabien.com
agorapacific.com
liquidez.bienparabien.com
neuralup-app.com
www.bienparabien.com
www.bienparabien.com
valija.bienparabien.com
www.okoplay.com
api-ad.bienparabien.com
www.restaurantefutu.es
villaluronorte.com.ar
admin.kiey.com
satisfaccion.bienparabien.com
*.bienparabien.com
*.bienparabien.com
www.iceberg-technology.com
www.thehabitguru.com
nrm.bienparabien.com
ll.myroomabroad.com
yals.bienparabien.com
njhomes.info
www.nsjtt.org
static.bienparabien.com
tst-originacion.bienparabien.com
tym.share.app-staging.c-rayon.com
portmarnockden.com
promotores.bienparabien.com
*.bienparabien.com
www.bienparabien.com
tesoreria.bienparabien.com
www.bamboosalon.ca
mates.tentafy.com
valija.bienparabien.com
neu.report
www.pixelboxapp.com
blog.bienparabien.com
promotores.bienparabien.com
preview.ivyukraine.com
tst.bienparabien.com
www.bienparabien.com
link.metro-fs.com
petit.cocain.blue
kuronlyric.jp
status.bienparabien.com
ulink.goshop.my
tst.bienparabien.com
swiftlab.co.uk
www.urbancapital.in
symmetry.la
www.pantaurelawan.com
dreamitdesigns.net
kingsdownapp.plumsocial.co.uk
link.hilmers.de

Certificate

The complete raw certificate details for www.bienparabien.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5o8h69ijdHzkOU/wGsH
vGwdLNrLu1C3fiFuR7cgwcGTtKObIU2FLFCe01S5DIt7O2zDNryZQDS4grJ5TdX4
1wXQL30z+YtYPYw+Qm24d478CkXj/u4xsmyF/jMkza0esi6026Eok4pV1TR9I4qD
sDPVK5nt1ZtJsCQQtiItuxuQ9Avli/ClDoyEOSEgKfWDyLV6PRrHbaev5aIpmsWY
MrKwotDAfpfX5ZA+iXbD121ThAhtQC9S1jc6s9w3N0wwxjLBNxhnDkmNYwzQHBKJ
rRAlXBBB71/FJZX5XTs5sQ+wP7N7QGnWO+x8vYZaCIxSMLmcebigmO505dFZUQ7F
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19205966142794746259267013052550747249
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bienparabien.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19138040875773521295080562247733743637344406139886740912416491370970255606444194735190110307282608058173215392827096645020250489769363972741289250821123570119996505744476030906644432201203115755870620320589708797588341671913062775922847880449971512320679677755669984338426455859722211730391031692726919285953580264450624674570305362959707656043972808917814652493241357131926063234060320293382575054855448775713971542088605597354527732030225029111031501345703949566552709773895237828729828122730708306858352841578068563610301816443138703429501808808792671158341972415430617622122770976232355160423593268701655389357363
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a8907adab7bd847fd69efeed2ac58e4083d4d22c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bienparabien.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bienparabien.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d47000001781edc6a540000040300483046022100c6b3a53733e3971d0f65e0408ed9d8d5ccf9d02d1269f67f92cbec122f478be202210081d207e485e4beba4569933a1b96c870a88a518fff81fc72acaea825c9b31dd60075002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f02000001781edc6a66000004030046304402201fe384c26a1fbb01ed619ee803146d758a9845ff5f104ac547e2d54a7d4c8bb6022072ab63969d918c5b54bfc04aa1127cfa1b622ff93f86d10e988a426f7fc0b4ce
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003fa24d0c2ceadb00db1b10a5512ea706457ae33462f70065b49380a0904fb81d2ac526977992fbce4fa925ab7d8f9e9383fae0965dd3c99a6e985396dab867701914fe22f0d5cdc50757536b72230b303b25d8b9c4600e6a4fc4f734a7ba768f68bd2a16a25d61593c0b9942348756bc5f315a592c714e018985172a14b5967d83a9583300f90be10441b28b65557773f4a6142834320707db377056d22b80ed8c23a58cbc051abcceaf40aa2b2d80475d4a1499a28fa966cdaebf87e5cd2f7dc519f07fd0099575b21e9441dd528e23d7515905ec4cdb6aac234c98a58eca9b64568ce4a930409bda6f02fa4edc254f9f2a7c7f1d8d045394db7c2ce9d26f12