reports.magnifylab.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 04:f5:f6:a9:b4:6f:30:ae:dd:60:86:4b:4e:36:2c:d2 was issued on by Amazon.

With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=reports.magnifylab.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:f5:f6:a9:b4:6f:30:ae:dd:60:86:4b:4e:36:2c:d2
Serial Number (int): 6594027631644381915298424489948622034
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: e8:c0:a8:e9:3b:e6:ee:a2:e3:f8:7c:00:a3:a8:b0:f0:cd:b6:66:93
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 89:23:b5:8b:2e:50:4e:c8:5a:88:19:1e:dc:a4:5d:c6:50:d5:1e:48
Fingerprint (sha256): 7d:0b:03:f2:b1:c8:82:b9:2f:7f:7a:84:8f:75:0b:36:dc:b7:14:75:67:fb:b9:23:c7:a7:e8:ab:ed:09:29:a2

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate reports.magnifylab.com

29

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for reports.magnifylab.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

reports.magnifylab.com
leads.pplpractice.com
leads.investigatormarketing.com
leads.monarcsoft.com
leads.jcidm.com
leads.insiderperks.com
leads.mightily.com
leads.localnetresults.net
leads.pavingmarketers.com
leads.justyourfriends.com
reports.drasticimpact.com
leads.hitedigital.com
leads.marketer-ux.com
leads.junecommerce.org
leads.pracpros.com
clientes.webseo.marketing
leads.locallogy.com
leads.lhgraphics.com
leads.productionclicks.com
leads.nwesource.com
leads.mnadigital.co.uk
gb.my-leads.net
leads.iovista.com
leads.whitefishmarketing.co.uk
leads.nationalpositions.com
leads.royalsadvertising.com
leads.influxmarketing.com
leads.digilatics.com
leads.hypelegal.com

Other certificates including the domain name magnifylab.com

(limited to 100 certificates)
magnifylab.com
reports.magnifylab.com
magnifylab.com
app.wm4d.com
sni.cloudflaressl.com
magnifylab.com
leads.rdm.agency
reports.magnifylab.com
magnifylab.com
leads.adeptplus.com
sni.cloudflaressl.com
magnifylab.com
sni.cloudflaressl.com
magnifylab.com
leads.taodigitalmarketing.com
reports.magnifylab.com
magnifylab.com
magnifylab.com
magnifylab.com
leads.codeconspirators.com
www.magnifylab.com
magnifylab.com
leads.rdm.agency
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
magnifylab.com
reports.magnifylab.com
magnifylab.com

Certificate

The complete raw certificate details for reports.magnifylab.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4f2yFB2vmwzf3ioxYaAy
JMgsoSi0/SwWMJ+570hmDxyp6dC6hXU+xYbTlM7T2vIyMZk7Aqbk0UYTznDKvPrG
w1Jp6XqSrwudL+sVtS6x28LGtkDaymQVPXZnNN2zwPZhHVBigVxQDoomvlPDDSX1
Smvprh9w9XObd4wo7Ak7EaNBWdyRbvs/kHVdRi9UQeaoaCnK9jE1rKBzGImZlbYJ
GF52n0ZH1RjPtvenaOXzOVyLhJirihegNeOIIhlRoSlAUlX4ZLVCNSj3svDBHdbo
JEoJf7/lGAAp/KXc18oj7tLm27Mex4pTijHFFKePNpIfuCN63qbp8aXOKkmXk0CA
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6594027631644381915298424489948622034
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reports.magnifylab.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28528720589925989242772823956790867235931800495570420203163434438562597886869409614764909758181852362945715538094777441525904825216303987597011853421212396102266843711197000784282916443886408289816115391594876476384107789738160603575458434751782958259682671521083579178619875955891664089982756185976073749177222380666592307671567680333766030207615021212483758248362759512618511275885605062881339748566907914269949349294995335157486289456262270802176771879076767478001940492883858421826260749364604625527558817923702933316754827106057796355035609910968991433371640553761605248751737524594713014512384457749977003753599
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8c0a8e93be6eea2e3f87c00a3a8b0f0cdb66693
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (704 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reports.magnifylab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.pplpractice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.investigatormarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.monarcsoft.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.jcidm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.insiderperks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.mightily.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.localnetresults.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.pavingmarketers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.justyourfriends.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reports.drasticimpact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.hitedigital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.marketer-ux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.junecommerce.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.pracpros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientes.webseo.marketing'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.locallogy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.lhgraphics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.productionclicks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.nwesource.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.mnadigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gb.my-leads.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.iovista.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.whitefishmarketing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.nationalpositions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.royalsadvertising.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.influxmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.digilatics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.hypelegal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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