amomama.es

Issued by Amazon

About this certificate

This digital certificate with serial number 0a:cf:7f:1f:0c:7f:4a:62:5f:2d:6d:92:95:9a:e2:5e was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=amomama.es

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:cf:7f:1f:0c:7f:4a:62:5f:2d:6d:92:95:9a:e2:5e
Serial Number (int): 14369663733526274719188298634792460894
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3d:f0:e5:66:59:0b:64:65:84:2c:6e:f3:ae:19:fa:29:b3:bf:50:67
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): fc:e2:8f:be:af:25:f9:d6:ba:ac:67:a8:8a:44:19:3c:6a:61:cf:9a
Fingerprint (sha256): 71:db:97:26:51:54:72:f5:ea:55:55:06:f5:98:01:f5:2c:4c:b3:cc:be:d0:24:fb:70:a0:ee:e0:d9:36:b9:1f

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate amomama.es

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for amomama.es

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amomama.es
*.amomama.es

Other certificates including the domain name amomama.es

(limited to 100 certificates)
sni250809.cloudflaressl.com
amomama.es
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni243947.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
*.amomama.es
sni250809.cloudflaressl.com
*.amomama.es
sni250809.cloudflaressl.com
news.amomama.es
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni243947.cloudflaressl.com
sni243947.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
amomama.es
sni250809.cloudflaressl.com
amomama.es
sni250809.cloudflaressl.com
sni243947.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni243947.cloudflaressl.com
sni243947.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
*.amomama.es
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni243947.cloudflaressl.com
sni250809.cloudflaressl.com
sni243947.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni243947.cloudflaressl.com
sni243947.cloudflaressl.com
sni243947.cloudflaressl.com
amomama.es
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni243947.cloudflaressl.com
sni250809.cloudflaressl.com
sni243947.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
amomama.es
sni243947.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
amomama.es
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni243947.cloudflaressl.com
sni243947.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni243947.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni243947.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
amomama.es
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com
sni250809.cloudflaressl.com

Certificate

The complete raw certificate details for amomama.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3p97JY0chtW/8RvOan9d
HKZ0AeO5THz6t3MWH9klsLqyjUMTyq4Uu649ieBwDmftzYuqXethrtviZf5sJXA8
DbZ0FgmG7CQ1pIJIgSgdWVYaB0YZc/ujWdGnBoCxZjhpQRV+pz2VRi+fIums3oOS
0XCee9TDpvaELsGB7FBzMm+8a65E/IuYn9ZDG1tkUpWmmBF+vbWhtRDg9+82Y8dG
gqVgtV3N/mAotI5wtnUitU5v8Inak9ofcTHZUeG3iDQhY/ISI4lIB/c5JSUnfg6S
osj3gBsEUEKjKE6eYvrLHLX6MWdVG1rap57mofSJqeaT3aKaosy7eUpd0uLcagkb
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14369663733526274719188298634792460894
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'amomama.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28103546735211051329957065956918755862245287822980257609123430779123505881986919163500315127916667519571414430819968149160675248643556360018073321268288740836425424192993314632028755417663196782536931698471591362586997133501926219916232979624220295435921055220876562659446752250268853087908998169477450972818910022262346871775662701134164348602834335592338567593892340899969541603138262939608830096116465973775563550185646034372944157925730735612073014011122825814253262947184130588340851460972491019837431737498128327201111253809789654743859555472033321631686227877473490814380997817083132664808734679804184539765637
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3df0e566590b6465842c6ef3ae19fa29b3bf5067
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amomama.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amomama.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016dca9c3bf5000004030046304402201b36e91bc3b7c23b35ce9795036c194a0b612185314536dc66b54f34a0315b5402204b31b329e7abec1277aa6ba24bd68336bb2c6ca217966b6da588617d6e954f180076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016dca9c3c4a0000040300473045022100ba793e7c05cb5235481883a92e70431df451de5d5aa894862883d9f9196e37a00220533bb17352017ea26407a00990b1c3add7b34dd30b6ba86239c2595dc151d770
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005ca5183afa118062c982ba61d30098e42cb856495f6ac430b29c317c298b9899e8635c55a29d0f4c5db2fcc2de629a78298db16160cad672f0350653d319e3435f8fcb9972eefcaaeb87385576e7325dc21d8e8b22071271d4fc7e6e12db4bf87cfdd794f7643b1fb878e6dfbe74c3f7d6bac797935258c2d38bbfbba1edf3721d95a539e179dabe23dd0dd66d0bf966b94606f688bc1c2e1e269c8151f7bab9c2defd2175611e44f8b55704c4ab57bf87df8f3833492f98a9d7661a791d1f2a56b2191057c7e3cf056f150cbd4b22f6d7c8ba3b4476e462451ec8a128c6b658b89e66df78c3eb0b16859eb8866fe038074d9600b8ce217ff60a88bc7ad4a7df