fxempire.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 04:4c:13:09:af:a8:de:3f:77:76:7e:f4:5a:d8:e6:61 was issued on by Amazon.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fxempire.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:4c:13:09:af:a8:de:3f:77:76:7e:f4:5a:d8:e6:61
Serial Number (int): 5711912677588268194043565060665173601
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 64:9d:1c:57:9e:f4:6e:c7:f3:ec:d2:fa:3f:79:f3:d3:81:28:02:66
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 74:ca:ca:f2:29:88:db:1f:0f:9b:b2:c9:50:2b:53:a4:03:d4:db:34
Fingerprint (sha256): 99:5f:7f:4a:3e:67:00:07:0d:bc:f8:7e:cf:2a:cb:ea:ea:40:35:0c:a3:64:c6:a6:a2:b8:e5:04:8d:0e:da:7e

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate fxempire.com

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fxempire.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fxempire.com
*.fxempire.es
fxempire.de
*.fxempire.fr
*.fxempire.se
fxempire.jp
fxempire.dk
fxempire.nl
fxempire.co.il
*.fxempire.co.il
*.fxempire.nl
fxempire.se
*.fxempire.de
*.fxempire.jp
*.fxempire.dk
*.fxempire.com
fxempire.gr
fxempire.it
fxempire.fr
*.fxempire.gr
*.fxempire.it
fxempire.es

Other certificates including the domain name fxempire.com

(limited to 100 certificates)
*.fxempire.com
beta.fxempire.com
fxempire.com
pixel.plumbing
www.signals.fxempire.com
mediakit.fxempire.com
www.careers.fxempire.com
signals.fxempire.com
www.careers.fxempire.com
fxempire.com
mediakit.fxempire.com
wp.fxempire.com
wp.fxempire.com
responsive.leafreport.com
*.fxempire.com
wp.fxempire.com
www.signals.fxempire.com
images.fxempire.com
pixel.plumbing
images.fxempire.com
www.careers.fxempire.com
www.mediakit.fxempire.com
fxempire.com
pixel.plumbing
www.signals.fxempire.com
responsive.fxempire.com
wp.fxempire.com
www.mediakit.fxempire.com
signals.fxempire.com
pixel.plumbing
wp.fxempire.com
pixel.plumbing
mediakit.fxempire.com
www.careers.fxempire.com
*.pre-prod.fxempire.com
*.fxempire.com
mediakit.fxempire.com
www.signals.fxempire.com
*.pre-prod.fxempire.com
www.signals.fxempire.com
fxempire.com
pixel.plumbing
wp.fxempire.com
www.signals.fxempire.com
images.fxempire.com
fxempire.com
mediakit.fxempire.com
fxempire.com
*.fxempire.com
pixel.plumbing
images.fxempire.com
signals.fxempire.com
images.fxempire.com
www.mediakit.fxempire.com
mediakit.fxempire.com
www.careers.fxempire.com
wp.fxempire.com
fxempire.com
signals.fxempire.com
pixel.plumbing
beta.fxempire.com
datapoints.fxempire.com
signals.fxempire.com
images.fxempire.com
responsive.coinz.com
responsive.leafreport.com
fxempire.com
fxempire.com
pixel.plumbing
*.fxempire.com
fxempire.com
staging.fxempire.com
fxempire.com
fxempire.com
pixel.plumbing
responsive.fxempire.com
wp.fxempire.com
*.fxempire.com
beta.fxempire.com
www.mediakit.fxempire.com
www.mediakit.fxempire.com
*.fxempire.com
www.careers.fxempire.com
staging.fxempire.com
www.careers.fxempire.com
fxempire.com
fxempire.com
www.mediakit.fxempire.com
www.signals.fxempire.com
fxempire.com
wp.fxempire.com
*.fxempire.com
pixel.plumbing
www.fxempire.com
www.careers.fxempire.com
beta.fxempire.com
fxempire.com
www.mediakit.fxempire.com
www.signals.fxempire.com
www.signals.fxempire.com

Certificate

The complete raw certificate details for fxempire.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSxL86w6pdqxRdjTCWkB
vHEQhLvm8q1pOCRGc3L3hvTr80vTVybVQaD3ieXMQ8fc8DJ/cboESslA7ovIvOIM
XOjSpNIMAifWchZ3csxLivfMxcrw2Xu+O8G5XZNB8yIfrDat956QJdEDyo2pJ1LA
R9puTUbFEXR4lK+IidXoFRowr7RJus1nuVqQ4zk5ClDjQrRUW/LG7HjOvYoi43KD
2s1QYVZ+80RW8xkpokBhUJOL+CJGz9DUjKn3I1jk/IGFslqBoLjANVfTr1GkfWkz
LYZaDYqzub5Hcafj/cf/87StvjDYJFA+DyXoyaCrF6uFiRrS5VO/jfysHRJrICcr
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5711912677588268194043565060665173601
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fxempire.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22366023489422237299515438953102368258155107437016112096264851244344653339365396326718625953521794881599078422544240248749261098687187971750259497880310023351786062697488368420759421758899228523522738180980911477253855586028177402891306403361306131642794050199804312809239978033918274293637667191377122972778210361536359506441610199104758559761813486802819595145575532807717118690522935065698569048437312533407385649016154312613644310370458459243783994710291453737733353601936383633587577554387724083434201016132604792423756546100887457056689450953164698687276800967738414810995945458053653535190045044179549626510107
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							649d1c579ef46ec7f3ecd2fa3f79f3d381280266
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (320 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxempire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxempire.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxempire.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxempire.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxempire.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxempire.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxempire.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxempire.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxempire.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxempire.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxempire.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxempire.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxempire.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxempire.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxempire.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxempire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxempire.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxempire.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxempire.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxempire.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxempire.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxempire.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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