astondata.com
Issued by Amazon
About this certificate
This digital certificate with serial number 01:fc:94:1d:c7:88:06:46:42:cb:8e:44:bc:d0:81:70 was issued on by Amazon.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=astondata.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:fc:94:1d:c7:88:06:46:42:cb:8e:44:bc:d0:81:70Serial Number (int): 2640690960125706292381364215392272752
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: 37:1b:b8:c0:65:10:71:7a:2b:64:d0:ae:fd:31:fc:32:66:c8:47:b6
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): c5:a7:3a:65:96:b0:8a:45:77:02:ff:6f:df:33:a7:d3:45:e4:59:04
Fingerprint (sha256): 99:df:7f:9d:15:01:5e:3c:d2:87:3a:40:6b:57:96:cb:de:0d:3b:4d:ce:55:6a:87:ac:07:18:f3:e1:42:55:b5
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl
Check the revocation status for certificate astondata.com
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for astondata.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
astondata.com
*.astondata.com
arch.software
*.arch.software
*.astondata.com
arch.software
*.arch.software
Other certificates including the domain name astondata.com
(limited to 100 certificates)
adidas-watch.com
www.astondata.com
astondata.com
astondata.com
adidas-watch.com
astondata.com
astondata.com
arch.software
www.astondata.com
astondata.com
arch.software
www.astondata.com
ramenrecipe.info
astondata.com
www.astondata.com
arch.software
wilsonn.com
adidas-watch.com
astondata.com
www.archipelagointernational.com
www.astondata.com
*.astondata.com
astondata.com
astondata.com
arch.software
astondata.com
www.archipelagointernational.com
ivanhoecakes.com
www.archipelagointernational.com
astondata.com
arch.software
www.archipelagointernational.com
astondata.com
www.astondata.com
astondata.com
astondata.com
adidas-watch.com
astondata.com
astondata.com
arch.software
www.astondata.com
astondata.com
arch.software
www.astondata.com
ramenrecipe.info
astondata.com
www.astondata.com
arch.software
wilsonn.com
adidas-watch.com
astondata.com
www.archipelagointernational.com
www.astondata.com
*.astondata.com
astondata.com
astondata.com
arch.software
astondata.com
www.archipelagointernational.com
ivanhoecakes.com
www.archipelagointernational.com
astondata.com
arch.software
www.archipelagointernational.com
astondata.com
Certificate
The complete raw certificate details for astondata.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFkzCCBHugAwIBAgIQAfyUHceIBkZCy45EvNCBcDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODA3MDUwMDAwMDBaFw0xOTA4MDUx MjAwMDBaMBgxFjAUBgNVBAMTDWFzdG9uZGF0YS5jb20wggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQCpsgsfjkj6ikeswmVR4qA2T4YyQbebscKBla7+0W3a WEzFvp94B5F821i1mLTRyVv9WOD6nApXcq7te5t/3PEQ6Db6FbEGQJKS1NfJhtMv uimV9qUjHMaSefLwUoq0sCR8XNsyjg+C+zWjVGO6Qxi+xryn67lu35u76KncINRU iIDxJRyDGVuZS6WU5a0BHmf+TzRq+jS3n04yo6IO1WgxSYALIKQLyGcRZrNs5K9V /GizhF9FUfXpHxZrKEjCl/XPTD3WbTKbLmcRZzOaobClfbSy4JtCRe/x/nC5R/c1 XR11VheYmip6TJuWsa9VVls5YTcB2UBdNmGVcOnhGH6nAgMBAAGjggKpMIICpTAf BgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQUNxu4wGUQ cXorZNCu/TH8MmbIR7YwSQYDVR0RBEIwQIINYXN0b25kYXRhLmNvbYIPKi5hc3Rv bmRhdGEuY29tgg1hcmNoLnNvZnR3YXJlgg8qLmFyY2guc29mdHdhcmUwDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8E NDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2Ex Yi5jcmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIwCAYGZ4EMAQIBMHUGCCsGAQUF BwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1 c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0 LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADCCAQMGCisGAQQB1nkCBAIEgfQE gfEA7wB1AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABZGfiMo8A AAQDAEYwRAIgApTGOBOfqj/lHS9DIT1PfelHSbRgxPtBYXciB1Cd188CIAZCdUP0 jg8DChQ9++XS0Ni6h+PFiHXlKpGfInPd/2+HAHYAh3W/51l8+IxDmV+9827/Vo1H Vjb/SrVgwbTq/16ggw8AAAFkZ+IzTAAABAMARzBFAiBM7v4nL9weEtEJHjSahBxm q3Ehmm+giW8iV5VajyUk5gIhAPYAhGHyb2WjFFV6RL7NlTNvvj7AdMHpIP/CJXAI GVpoMA0GCSqGSIb3DQEBCwUAA4IBAQBTuxn80zgirE/kO0WTYDIpMWiagY1DZQRz mDxq+s+Xse6NP1Fap9mNzpFCM6tYfAN6zQ7wtMjU6jVovnbqkoK1uIVlWwecyQ+U Yc4lwLhWZXHjUHzARbT0VaYgnqiH42tJN+ggHBNepm16x/jimimKYvG2fDykikx1 rMZ9v8L9YE03o6FclGaixxPQ7kb3jmX6OrOOks0W5/mMwGWFnYrbMBc4mMskVO6z MHtR9D5PWfG42CwgswRYM4hvfwwNDX7yoXKZjjJIfB+GkiPBFFpMzKa/AwedMGEW btdR0hgyRjHLlK/pug4CCF4moOAdz+Nk4yiw7bc79kYvp9t6x67t -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbILH45I+opHrMJlUeKg Nk+GMkG3m7HCgZWu/tFt2lhMxb6feAeRfNtYtZi00clb/Vjg+pwKV3Ku7Xubf9zx EOg2+hWxBkCSktTXyYbTL7oplfalIxzGknny8FKKtLAkfFzbMo4Pgvs1o1RjukMY vsa8p+u5bt+bu+ip3CDUVIiA8SUcgxlbmUullOWtAR5n/k80avo0t59OMqOiDtVo MUmACyCkC8hnEWazbOSvVfxos4RfRVH16R8WayhIwpf1z0w91m0ymy5nEWczmqGw pX20suCbQkXv8f5wuUf3NV0ddVYXmJoqekyblrGvVVZbOWE3AdlAXTZhlXDp4Rh+ pwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2640690960125706292381364215392272752 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-05 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-05 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'astondata.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21422070036804090400029698155874859900128802785430764392666568468386896980531073619928634028029793776028949587831716701540949220313328577159176636187229616319748363666414730597729087798351450699790585544659755082783056940042734690521614080493982882264569203133506576832515434547264509634810053866886702436218009968173265185384647855220020586194534283836445077475160092259778074218483787082950674671795776829331730411958928046825193655653835833457741069812203872375116747211029869505175751193528829389634346861463200620848288431027720052507310524878392664203958107596581631428804608321451457822622930839998893336854183 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 371bb8c06510717a2b64d0aefd31fc3266c847b6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astondata.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.astondata.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arch.software' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.arch.software' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016467e2328f000004030046304402200294c638139faa3fe51d2f43213d4f7de94749b460c4fb4161772207509dd7cf022006427543f48e0f030a143dfbe5d2d0d8ba87e3c58875e52a919f2273ddff6f870076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016467e2334c000004030047304502204ceefe272fdc1e12d1091e349a841c66ab71219a6fa0896f2257955a8f2524e6022100f6008461f26f65a314557a44becd95336fbe3ec074c1e920ffc2257008195a68 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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