diversitech.bynder.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 08:4c:5c:17:cb:4a:33:78:75:8f:91:a8:bf:89:21:ac was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=diversitech.bynder.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:4c:5c:17:cb:4a:33:78:75:8f:91:a8:bf:89:21:ac
Serial Number (int): 11030306394374408231913138287064719788
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 4d:e9:06:f7:f4:e1:90:05:64:ef:f2:4d:fc:ec:02:d9:a2:72:a3:06
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): aa:59:b8:b2:d1:7c:97:47:0e:b3:0c:ef:f8:1f:2b:67:d8:0f:9a:09
Fingerprint (sha256): 77:cb:14:5a:c7:11:58:74:91:46:7f:93:ba:01:19:e5:e9:34:f5:42:cf:41:c3:ca:18:3a:74:da:fa:89:e1:22

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate diversitech.bynder.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for diversitech.bynder.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

diversitech.bynder.com
assets.diversitech.com

Other certificates including the domain name bynder.com

(limited to 100 certificates)
amazonconsumertalent.bynder.com
okstate.bynder.com
dns-vetting1d.map.fastly.net
seidor-demo.bynder.com
motherspolishco.bynder.com
sandbox-mediebibliotek-cancer.bynder.com
mindbody.bynder.com
japan-status.dialpad.com
davidlloyd.bynder.com
tece.bynder.com
statuspage.io
educationtest.bynder.com
now.phtech.com
blog.bynder.com
gls.bynder.com
developer.bynder.com
customersuccess.bynder.com
dns-vetting1d.map.fastly.net
secure0039.hubspot.com
testted.bynder.com
monash.bynder.com
nicolefranchina-demo.bynder.com
amnesty.bynder.com
dns-vetting1d.map.fastly.net
san-1-s51.tlsprovisioning.exacttarget.com
mit.bynder.com
kreon.bynder.com
dns-vetting1d.map.fastly.net
niko-demo.bynder.com
whitecap.bynder.com
vbs-acc-cmek.bynder.com
scotforge.bynder.com
christiannebakker-demo.bynder.com
dns-vetting1d.map.fastly.net
leo-furlan.bynder.com
chloe-vervialle.bynder.com
playstationdemo.bynder.com
easee.bynder.com
now.phtech.com
miele-demo.bynder.com
geoip.bynder.com
curology.bynder.com
japan-status.dialpad.com
now.phtech.com
lnw.bynder.com
statuspage.io
statuspage.io
bas-van-reeuwijk.bynder.com
statuspage.io
glenraven.bynder.com
netgear.bynder.com
twentythree.net
dns-vetting1d.map.fastly.net
tvh.bynder.com
infobip.bynder.com
interwellhealth.bynder.com
japan-status.dialpad.com
static-fonts-production-us-only.bynder.com
newportalnurah.bynder.com
knapp.bynder.com
statuspage.io
jiskalocal.bynder.com
otis.bynder.com
tkdigital-demo.bynder.com
natashatest.bynder.com
vi-mera-sandbox.bynder.com
ubrands.bynder.com
nicole-fournier.bynder.com
menashapackaging.bynder.com
twentythree.net
themaineidea.bynder.com
oneskycollective.bynder.com
ssl419912.cloudflaressl.com
twentythree.net
now.phtech.com
dns-vetting1d.map.fastly.net
pattisonag.bynder.com
visitmonaco.bynder.com
ticketswap.bynder.com
formswim.bynder.com
testted.bynder.com
adventures.bynder.com
brand.bynder.com
norgine.bynder.com
dampioneers-sandbox.bynder.com
dns-vetting1d.map.fastly.net
etonshirts.bynder.com
archant.bynder.com
niko-demo.bynder.com
now.phtech.com
redseaglobal.bynder.com
now.phtech.com
creative-demo.bynder.com
ben-purzak.bynder.com
ariadnelabs.bynder.com
otis.bynder.com
ielts.bynder.com
quantresolutions-demo.bynder.com
dns-vetting1d.map.fastly.net
lg.bynder.com

Certificate

The complete raw certificate details for diversitech.bynder.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqWneEpJGDqagauetzY+
xleFc3GUSyqrUaSNnQgF3KCXihm52vnXnpFQzCGWfBmKqBdSgNtN1DPonmiNpOYG
wlLhZczc3DCvZy++rX2S299fVFp1U0FRLNgfSm1J1RRLBvvL1cHOtPrg/2jDRXaf
lAnx7a0gB8AkWfeaySjj67SW56Ib1zZREszoGZ8qIE6jW+qDp9/20ILjylcFwuKj
I30iC9uxcoYrYxgjFDaUcCNbdRhU0X8km9/vauTGeHoRu9gwWCOi2YmjaKsouVvD
vVBixE3KJ3Vdk7f/m4MF3opAq/IBKlLxzJmI80eE6Ai6r9SNIa6P/xJqDtPs6ol+
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11030306394374408231913138287064719788
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'diversitech.bynder.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24066965063851326291903598957601833546860386557026101468554188914548695378027566402155479009162979305300341179727178677704136461716870475732457513966726232041505067408846053048439738207637829830331720485063669311291532727851028214966732546372954324748416258346390933747678621407193299201686502207910782727465010760320691141047240500403906097344323368426710597553813767468243051292724637390736333332731371070989722088848987115786430222771201308178020045324989016267945846709024925116660086362789404761562606498005078428903503534737218430185020770380424520274600731905393886940817128906504210791914102153714605782302289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4de906f7f4e1900564eff24dfcec02d9a272a306
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diversitech.bynder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.diversitech.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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