*.besnappy.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0b:3f:0d:f2:52:55:95:46:9e:9f:f4:ab:56:e7:d5:af was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.besnappy.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:3f:0d:f2:52:55:95:46:9e:9f:f4:ab:56:e7:d5:af
Serial Number (int): 14948905525743179101550203131839108527
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 57:24:1d:4e:43:9a:13:8b:4a:cd:93:30:55:7e:ec:ca:2c:15:c9:0a
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 3f:2b:2c:c3:e7:6d:4c:61:35:f3:8f:85:78:35:0a:93:d0:4f:77:33
Fingerprint (sha256): 90:65:b5:5d:8c:70:22:f4:55:5a:8a:f2:4c:b1:1f:c9:2e:ea:59:16:01:0e:ac:60:83:fb:57:41:d2:b6:5b:34

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate *.besnappy.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.besnappy.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.besnappy.com
help.ncbex.org

Other certificates including the domain name besnappy.com

(limited to 100 certificates)
ssl379275.cloudflaressl.com
ssl277233.cloudflaressl.com
ssl379275.cloudflaressl.com
ssl379273.cloudflaressl.com
ssl379273.cloudflaressl.com
ssl379275.cloudflaressl.com
ssl277233.cloudflaressl.com
ssl379275.cloudflaressl.com
ssl379275.cloudflaressl.com
ssl379275.cloudflaressl.com
ssl379275.cloudflaressl.com
ssl379274.cloudflaressl.com
ssl277233.cloudflaressl.com
ssl84446.cloudflare.com
cdn.besnappy.com
ssl379275.cloudflaressl.com
ssl379274.cloudflaressl.com
sni.cloudflaressl.com
ssl379274.cloudflaressl.com
ssl277233.cloudflaressl.com
ssl379274.cloudflaressl.com
ssl277233.cloudflaressl.com
ssl277233.cloudflaressl.com
ssl379275.cloudflaressl.com
ssl277233.cloudflaressl.com
ssl379274.cloudflaressl.com
ssl379275.cloudflaressl.com
ssl379275.cloudflaressl.com
*.besnappy.com
ssl277233.cloudflaressl.com
ssl277233.cloudflaressl.com
ssl379275.cloudflaressl.com
ssl379275.cloudflaressl.com
ssl277233.cloudflaressl.com
ssl379274.cloudflaressl.com
ssl379275.cloudflaressl.com
*.besnappy.com
ssl379274.cloudflaressl.com
ssl379275.cloudflaressl.com
ssl379275.cloudflaressl.com
*.besnappy.com
sni.cloudflaressl.com
*.besnappy.com
ssl379273.cloudflaressl.com
ssl379274.cloudflaressl.com
*.besnappy.com
ssl379274.cloudflaressl.com
ssl379274.cloudflaressl.com
ssl379273.cloudflaressl.com
ssl277233.cloudflaressl.com
ssl379275.cloudflaressl.com
ssl379275.cloudflaressl.com
ssl379275.cloudflaressl.com
ssl379274.cloudflaressl.com
ssl277233.cloudflaressl.com
ssl379273.cloudflaressl.com
ssl379275.cloudflaressl.com
ssl379275.cloudflaressl.com
ssl379274.cloudflaressl.com
ssl379274.cloudflaressl.com
ssl379275.cloudflaressl.com
ssl277233.cloudflaressl.com
ssl277233.cloudflaressl.com
ssl379275.cloudflaressl.com
ssl379274.cloudflaressl.com
ssl277231.cloudflaressl.com
ssl277233.cloudflaressl.com
ssl379274.cloudflaressl.com
ssl379273.cloudflaressl.com
ssl379274.cloudflaressl.com
ssl379273.cloudflaressl.com
ssl379273.cloudflaressl.com
ssl379274.cloudflaressl.com
ssl379275.cloudflaressl.com
ssl379273.cloudflaressl.com
ssl277233.cloudflaressl.com
ssl379275.cloudflaressl.com
sni.cloudflaressl.com
ssl379275.cloudflaressl.com
ssl379275.cloudflaressl.com
ssl379275.cloudflaressl.com
besnappy.com
*.besnappy.com
ssl277233.cloudflaressl.com
cdn.besnappy.com
ssl379274.cloudflaressl.com
ssl277233.cloudflaressl.com
ssl379273.cloudflaressl.com
cdn.besnappy.com
ssl379274.cloudflaressl.com
ssl379273.cloudflaressl.com
ssl379275.cloudflaressl.com
*.besnappy.com
ssl277233.cloudflaressl.com
ssl379275.cloudflaressl.com
*.besnappy.com
ssl379273.cloudflaressl.com
ssl277233.cloudflaressl.com
ssl277233.cloudflaressl.com
sni.cloudflaressl.com

Certificate

The complete raw certificate details for *.besnappy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09W2vfLrAaSrun9Ta3T9
dVE0gCH36PoBbtgqUXHik+7/5pJlW6ia9T2RCkQ/h4jsh0nlhLkj5Q2MyoayBH6K
B8ZlYig1vcTA4u6AZ+g+5RkA1PhB8BNOio0FprN3qXzpMLfRJClrQhVqzjG2E1yF
x3JBaagnL535IFEv+UQ1rkCKT+r5Zr9JfKI/ofeUMRA1PAAWlHjP9ZEHrN6g6iEB
e8Sa8DHobPsmToyKiDNWCqv4xvj+f49ZtS7lI9nXiMTdx45s85G4M89SCrMyxXSJ
ZB9RbcgnQFQzmb1qHm4YbnAXDrJTtIQwUpBUN4kASa1w6hYeQuOBklco/ECHq620
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14948905525743179101550203131839108527
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.besnappy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26741668568114033096724629166871521777523470666712815244232870814439388667664661244612492291727372409529209685411364477518458720905530269463242482158958414696115998380422281381734920700348349363624870236075635737898416703827784932975363869303995965554941930124047303566653209010330886658840976543526050539906768368648134952417873231554121750692779010898387490671498659392197773721158842008700982625198804844035754569461314411373703380280095441536280733626557133689133920309182667216539171560110242299858391869738013618358187517206079155380365557987148453091552020025621746518869398510188757134981544798836663576802537
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							57241d4e439a138b4acd9330557eecca2c15c90a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.besnappy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.ncbex.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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