*.amplitudes.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 0e:7c:8a:03:67:c7:66:d2:f4:39:b4:2a:c3:e4:6b:e2 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.amplitudes.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:7c:8a:03:67:c7:66:d2:f4:39:b4:2a:c3:e4:6b:e2
Serial Number (int): 19255835993774950142400254471989128162
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 8e:d6:c8:6e:55:61:f9:dc:6f:f9:73:c9:39:0d:a1:03:e2:b9:9b:e3
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 0e:8d:bc:ee:e1:98:ea:e2:fd:56:47:e6:16:5b:03:ba:93:1d:a6:28
Fingerprint (sha256): 8c:83:80:f7:af:3c:82:b0:98:0d:3c:84:48:2b:9e:6a:af:7b:ba:d9:c8:14:5a:f1:d3:77:45:38:23:45:d5:b4

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate *.amplitudes.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.amplitudes.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.amplitudes.com
amplitudes.com

Other certificates including the domain name amplitudes.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.amplitudes.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHOTCCBiGgAwIBAgIQDnyKA2fHZtL0ObQqw+Rr4jANBgkqhkiG9w0BAQsFADCB
jzELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMTcwNQYDVQQD
Ey5TZWN0aWdvIFJTQSBEb21haW4gVmFsaWRhdGlvbiBTZWN1cmUgU2VydmVyIENB
MB4XDTIzMTAxNjAwMDAwMFoXDTI0MTExMjIzNTk1OVowGzEZMBcGA1UEAwwQKi5h
bXBsaXR1ZGVzLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAN8m
qkWvpYXgUvIyxJZPjZ5GPZKICe0UiiaRiGi2zYmVqkkcPddqHwWMggURC8Nt3yRP
KQp5ko+9d0pYlHpBHsvF5Aq+R+DzE143VbnY3AcvNcPUqU5sJGdizskHpbX2P2Rk
0Xsk7Y9DN95OS3thEjXPwzcu9AerK0hU4yLWFbaNp/GPBtSCXXumdHhdthsizw8k
nVXUSZb1b1IWoX7uu2VQkH5Oprle3mHobCoy6EK5Hk/PvQwjkTGQ8TNdYVl9PaDM
oc8GhGj12b2svCO6Ld3RMOCEe1oPF4bbvogqu0CSlMs/S0smhq9qR+gAcfpQBtcV
UatI/uei3OsgT/pVigBCLOYxFp3ci0Kg9IHNYAhN1lHeuIV5MdWc4Q7f3ZZYClPW
DVOPIxiSrQGpDHmJ9eZNd5mIdqwEbcCsF6ZiFzk52woHHcoRetdFVS+6g4XHfYwm
Kri/vdyBUe2+o+iu/gCNFhodqfqZlnyHndEuf3rp5Uc5GKKXrcHgkL+Q04K2ZUP5
wxIJHAhA9JfvScd0ZIJ4GBBv2mZbfP2qJUwXBulvEezNkemdNoq8e05CFxBTPZTY
JmBHB7ocEMm17Ya0+RL5RrANes90BZ4w+7c+IHsKqtZe9nV6WzAPF77ijZJ84lqp
lL9fseWDFATFCkfykuhr2SmNkGZLPrN8pdYY5sPhAgMBAAGjggMCMIIC/jAfBgNV
HSMEGDAWgBSNjF7EVK2K4Xfpm/mbBeG4AY1h4TAdBgNVHQ4EFgQUjtbIblVh+dxv
+XPJOQ2hA+K5m+MwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMEkGA1UdIARCMEAwNAYLKwYBBAGyMQEC
AgcwJTAjBggrBgEFBQcCARYXaHR0cHM6Ly9zZWN0aWdvLmNvbS9DUFMwCAYGZ4EM
AQIBMIGEBggrBgEFBQcBAQR4MHYwTwYIKwYBBQUHMAKGQ2h0dHA6Ly9jcnQuc2Vj
dGlnby5jb20vU2VjdGlnb1JTQURvbWFpblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJD
QS5jcnQwIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLnNlY3RpZ28uY29tMCsGA1Ud
EQQkMCKCECouYW1wbGl0dWRlcy5jb22CDmFtcGxpdHVkZXMuY29tMIIBfgYKKwYB
BAHWeQIEAgSCAW4EggFqAWgAdgB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+Zn
TFo6dAAAAYs2lmz+AAAEAwBHMEUCIQCLFh6Ta6aBN/qayO4XcTxhg8XU0y5pfKIV
3aafCqsLlwIgNceWLjNXSniml/mcMv32da2ZPsS5uqQLtHPOLtGY/c4AdQDatr9r
P7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYs2lm1VAAAEAwBGMEQCIEwA
N7Gob3LmRfld8wHhg7ndap8Bxwsw/lYbY15yZp1HAiA5xrAC8e0U3o7BHC4npQQv
9C2fwXVkRfBHuWlkWLVRYQB3AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZx
H7WbAAABizaWbTYAAAQDAEgwRgIhAKNBUE0lPW6kHssCZVIl8QVa5wNuRa14E9Y7
ucZD/kmsAiEAsaGAmypO4Vtpn1oylTqQA+V/E39UUAGM8XDLcjqQpyQwDQYJKoZI
hvcNAQELBQADggEBAJXJyLrbT43k2qU3j7IXJDP5v4nfnP95ocXjdSLKTCG4/MYi
7saK2Bg13XC6vWBysuUvVLS9b9HzCo+64TcgoFqlGdnOCjRNBJnmEr4+da0V5d87
oZSimsoVO0NARjPmzL5KHAhL8mQEvvOg86a5rSGjWupQPzSV09KsH7YZH5aHIyD2
rPU2X+CYVKqchLfdaK4g/O8d00rGRym3gS90rhn6fuqAckZbPHwcoEAJE3FWfeA8
+3DA6loVng/i6JNtBkOKsm1WXt3YFLx7I/odyImGcYuxBLmSPG5MSncv3BxMtT7r
kPZZ1kOL08pUyIvmsiIeXGI8KumefwxdD/dhn7I=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19255835993774950142400254471989128162
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.amplitudes.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 910376798852919817932093124301306563376574524470065426780672021993645760379859174044706913706983394116101576082764175454952136188766061991852914430375117089568417817698997113877607970402085416471391723890704274936144875014833610339351493586203240997099241306505927366974260869622518375647249111654644216836189929336572909475695116654559191652771167659579647623331479784941637371241105427433664610643308494723070984033817579180645096577220582946426576463447197449350332274812825284256975374268701499276408058149923163868636321146496370490800491989133188600400329765168488207877592169183187417140174541325446744425886066852203490472723668432307731723708188116792908955616365779105238645137444842922758720113354498552418609661542555311468824196763351989247795588400904929041480818560705919293673911197708425601132381076369313436765720309133435850229914184647007927817649918970972831880898023120327782518565835453389922971883676916360701247585606045155566255474246765333321463799079046310046944817112296458845402545960085680791016801540588263437100162456387641195712325140556684630305038309056077566042234188751023494520494601051628369849429255096999935254788885743106296594135779575103820162271986822867254907187932370205200513331807201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8ed6c86e5561f9dc6ff973c9390da103e2b99be3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.amplitudes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amplitudes.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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