amp.permutive.com
Issued by R3
About this certificate
This digital certificate with serial number 04:a9:8e:e7:95:3f:ca:c9:cd:9d:53:fa:79:c7:ce:d1:04:0a was issued on by Let's Encrypt.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=amp.permutive.com
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:a9:8e:e7:95:3f:ca:c9:cd:9d:53:fa:79:c7:ce:d1:04:0aSerial Number (int): 406146816559788531630498957584989636592650
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 41:5a:2b:fd:be:3c:1a:46:45:88:27:01:7f:9b:c8:5f:85:0f:40:bf
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): e6:84:92:13:42:93:40:41:9a:b0:86:2c:45:cb:2b:77:65:91:15:20
Fingerprint (sha256): 98:27:94:bf:fd:a6:ce:c9:f2:32:cc:94:c2:13:ee:46:81:60:74:d5:04:d3:72:9a:7c:56:6f:9e:18:95:61:6b
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate amp.permutive.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for amp.permutive.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
amp.permutive.app
amp.permutive.com
amp.permutive.com
Other certificates including the domain name permutive.com
(limited to 100 certificates)
statuspage.io
ssl974612.cloudflaressl.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
developer.permutive.com
statuspage.io
statuspage.io
*.permutive.com
statuspage.io
enterprise-status.simacan.com
developer.permutive.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
enterprise-status.simacan.com
enterprise-status.simacan.com
enterprise-status.simacan.com
statuspage.io
enterprise-status.simacan.com
statuspage.io
statuspage.io
statuspage.io
enterprise-status.simacan.com
enterprise-status.simacan.com
statuspage.io
statuspage.io
enterprise-status.simacan.com
statuspage.io
permutive.com
statuspage.io
statuspage.io
statuspage.io
enterprise-status.simacan.com
enterprise-status.simacan.com
statuspage.io
enterprise-status.simacan.com
statuspage.io
permutive.com
statuspage.io
statuspage.io
edge.permutive.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
*.amp.permutive.com
statuspage.io
enterprise-status.simacan.com
statuspage.io
statuspage.io
enterprise-status.simacan.com
statuspage.io
statuspage.io
statuspage.io
developer.permutive.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
info.permutive.com
enterprise-status.simacan.com
statuspage.io
statuspage.io
*.permutive.com
statuspage.io
api.permutive.com
enterprise-status.simacan.com
changelog.permutive.com
enterprise-status.simacan.com
statuspage.io
statuspage.io
statuspage.io
amp.permutive.com
edge.permutive.com
enterprise-status.simacan.com
statuspage.io
statuspage.io
statuspage.io
enterprise-status.simacan.com
*.permutive.com
developer.permutive.com
info.permutive.com
statuspage.io
statuspage.io
edge.permutive.com
enterprise-status.simacan.com
statuspage.io
ssl974613.cloudflaressl.com
statuspage.io
ssl974612.cloudflaressl.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
developer.permutive.com
statuspage.io
statuspage.io
*.permutive.com
statuspage.io
enterprise-status.simacan.com
developer.permutive.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
enterprise-status.simacan.com
enterprise-status.simacan.com
enterprise-status.simacan.com
statuspage.io
enterprise-status.simacan.com
statuspage.io
statuspage.io
statuspage.io
enterprise-status.simacan.com
enterprise-status.simacan.com
statuspage.io
statuspage.io
enterprise-status.simacan.com
statuspage.io
permutive.com
statuspage.io
statuspage.io
statuspage.io
enterprise-status.simacan.com
enterprise-status.simacan.com
statuspage.io
enterprise-status.simacan.com
statuspage.io
permutive.com
statuspage.io
statuspage.io
edge.permutive.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
*.amp.permutive.com
statuspage.io
enterprise-status.simacan.com
statuspage.io
statuspage.io
enterprise-status.simacan.com
statuspage.io
statuspage.io
statuspage.io
developer.permutive.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
info.permutive.com
enterprise-status.simacan.com
statuspage.io
statuspage.io
*.permutive.com
statuspage.io
api.permutive.com
enterprise-status.simacan.com
changelog.permutive.com
enterprise-status.simacan.com
statuspage.io
statuspage.io
statuspage.io
amp.permutive.com
edge.permutive.com
enterprise-status.simacan.com
statuspage.io
statuspage.io
statuspage.io
enterprise-status.simacan.com
*.permutive.com
developer.permutive.com
info.permutive.com
statuspage.io
statuspage.io
edge.permutive.com
enterprise-status.simacan.com
statuspage.io
ssl974613.cloudflaressl.com
statuspage.io
Certificate
The complete raw certificate details for amp.permutive.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFATCCA+mgAwIBAgISBKmO55U/ysnNnVP6ecfO0QQKMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA4MTIyMjQ1MjVaFw0yMzExMTAyMjQ1MjRaMBwxGjAYBgNVBAMT EWFtcC5wZXJtdXRpdmUuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAue5SRdjIQYaQ2udx4odSz9Y787rXsmiWtQvcFDI0dJFn1eWDcomxoHkwAAzV Bvzcp3N7S3+rEOrJqjv674f3gu15iol0q3xIVOmDfndCoOuAXuxk+afEKGQ+9rvB yhm9RHr1mmYPVfkBwazhS7sttBZLRtQ0xMrLYujPx9P1h/6N8dzPqvr4gvBrc+s/ dK5FSbWGNCa6eOELwlnZP0iXVuoZpTSIHhfHU57veJcEVza6JTWvb04Rmheh1G0H pp58u1L+7t6KR/GPUkoaDI8xCCk/h/JBeYtE5MwnMH0DHfzfYBLw3s2P+sUeNrrj sx4nJu1+FFIQPJKQuSI6ncEGKwIDAQABo4ICJTCCAiEwDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G A1UdDgQWBBRBWiv9vjwaRkWIJwF/m8hfhQ9AvzAfBgNVHSMEGDAWgBQULrMXt1hW y65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6 Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iu b3JnLzAvBgNVHREEKDAmghFhbXAucGVybXV0aXZlLmFwcIIRYW1wLnBlcm11dGl2 ZS5jb20wEwYDVR0gBAwwCjAIBgZngQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0BIHx AO8AdQC3Pvsk35xNunXyOcW6WPRsXfxCz3qfNcSeHQmBJe20mQAAAYnsI++UAAAE AwBGMEQCIFI2/8OHteTIUdG8qMLZuEo+h6ANQ9OaE6MHJAO/12eeAiAY5/NeDqV9 KYBQYPEUFCZaY8b5Pu9XI0iilUiQXbaTcAB2AOg+0No+9QY1MudXKLyJa8kD08vR EWvs62nhd31tBr1uAAABiewj75wAAAQDAEcwRQIhAJwT8IXew8Sj5cogWXVCrE7V iRorndUFeHGhb53YH3/HAiAw9Sr34vbGG6LMfXUM9ZjU/9mo4OGifKoJQ7EO+592 OjANBgkqhkiG9w0BAQsFAAOCAQEAhAFdSpDB5bmHTbl4CWqEU8FRwiDOSqCLol56 9pOV2UUYDJdk9hO5AjLcjjv/K+GVIQt6/ffiisDiEja65UK1hYVJZgnEM4fJxiCY gZCNSVw5EmCV2PGVPeNucamEx230jGMplYxHz/1MlNKWja4RBTvMG0mrQH2PAwWH UppeRja5pTpG12EFJBdScHlj+d7ISI3YPMCOV8UfhPdWliDuKwom9FkXTbQPzXR7 Sp0dFVpV+Pc9yRw4br3jFuNb42L/gAhYov/OkIMYBG4uBxrPZFub6i5uyUJA8P1u vkCSkCced8ZVJVZEMYMiZEt1Sif/eT2SVqanBNO2xgH7xuZqGg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAue5SRdjIQYaQ2udx4odS z9Y787rXsmiWtQvcFDI0dJFn1eWDcomxoHkwAAzVBvzcp3N7S3+rEOrJqjv674f3 gu15iol0q3xIVOmDfndCoOuAXuxk+afEKGQ+9rvByhm9RHr1mmYPVfkBwazhS7st tBZLRtQ0xMrLYujPx9P1h/6N8dzPqvr4gvBrc+s/dK5FSbWGNCa6eOELwlnZP0iX VuoZpTSIHhfHU57veJcEVza6JTWvb04Rmheh1G0Hpp58u1L+7t6KR/GPUkoaDI8x CCk/h/JBeYtE5MwnMH0DHfzfYBLw3s2P+sUeNrrjsx4nJu1+FFIQPJKQuSI6ncEG KwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 406146816559788531630498957584989636592650 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-12 22:45:25 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-10 22:45:24 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'amp.permutive.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23471607070404237572998440906501835691393180570906891391234939014487457077753586007167896353202048610482176298878298088894419905659814681626055790864307645528898896925628147778354167058196506687527336014452075061868444956338842089450420547223468273302480424249312945414841674329319532793728486161726381127879085972971983299873386208718891354994081064327751666710025688846085910463664702277135017384169278682978898242418380348166930649221457472734848666243656307711726384545242035656546084783247403423925673295710338723798658051821155712721329000585694633749343623401132413543204819738214824643877020373853307586807339 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 415a2bfdbe3c1a46458827017f9bc85f850f40bf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.permutive.app' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.permutive.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000189ec23ef94000004030046304402205236ffc387b5e4c851d1bca8c2d9b84a3e87a00d43d39a13a3072403bfd7679e022018e7f35e0ea57d29805060f11414265a63c6f93eef572348a29548905db69370007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000189ec23ef9c00000403004730450221009c13f085dec3c4a3e5ca20597542ac4ed5891a2b9dd5057871a16f9dd81f7fc7022030f52af7e2f6c61ba2cc7d750cf598d4ffd9a8e0e1a27caa0943b10efb9f763a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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