mcyclo.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0e:e5:da:ef:40:d7:c4:4c:73:7e:97:02:1c:ec:d5:b6 was issued on by Amazon.

With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mcyclo.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:e5:da:ef:40:d7:c4:4c:73:7e:97:02:1c:ec:d5:b6
Serial Number (int): 19802668442485621394804564781194597814
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 66:8e:77:ec:29:b6:e9:90:5f:4d:f1:e2:d6:16:53:7f:ab:50:c3:54
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): ff:41:3f:98:d9:75:7f:26:a8:59:4d:cd:d0:71:c3:a0:85:51:99:10
Fingerprint (sha256): 9b:78:da:ab:24:77:7d:43:87:66:f9:68:2a:4c:c6:cf:3f:a7:1d:31:af:dd:08:21:50:20:62:f9:28:5a:cc:0c

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate mcyclo.com

39

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mcyclo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mcyclo.com
basf-catalystsmetals.com
revylok-fungicide.com
seeds-excellence.com
agsolutionsfinder.basf.gr
mdizero.net
mdi-zero.com
cevya-fungicide.com
surtain-herbicide.us
www.newtrition.com
www.nutritionvirtualassistants.basf.com
help.myencircle.com
mdi-zero.eu
msds.chemetall.basf.com
pac.basf.us
stephankothrade.eu
yields.basf.us
verdictherbicide.com
klimaneutralesmdi.de
revylok.com
surtain-herbicide.com
dirkelvermann.eu
climateneutralmdi.com
zoomlab.com
mdi-zero.de
epoxiconazole.com
carbonneutralmdi.com
winningfungicides.com
www.test-virtual-aroma-assistant.basf.com
mdizero.de
join-agrostart.com
stoneville-varieties.com
basfretailfirst.com
lupranat-zero.com
joinagrostart.com
soybeanwholeacre.com
training.myencircle.com
revylok-fungicide.us
lupranatzero.eu

Other certificates including the domain name mcyclo.com

(limited to 100 certificates)
mcyclo.com
mcyclo.com
mcyclo.com
acronaloptive.com
mcyclo.com
certainweedcontrol.com
mcyclo.com
www.glysantin.net.cn
staqrd.com
mcyclo.com
lupranatzero.net
mcyclo.com
*.mcyclo.com
mcyclo.com
certainweedcontrol.com
staqrd.com
mcyclo.com
mcyclo.com
certainweedcontrol.com
mcyclo.com
mcyclo.com
mcyclo.com
www.glysantin.net.cn
certainweedcontrol.com
certainweedcontrol.com
mcyclo.com
mcyclo.com
mcyclo.com
acronaloptive.com
mcyclo.com
lupranatzero.net
mcyclo.com
certainweedcontrol.com

Certificate

The complete raw certificate details for mcyclo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMw5UkCBV4p+OGQjqQBb
2BP7hdfeCbQ+DManThgfX47Bre5J648+eu08+3fGFRCJjGkL16jxgsJF9hgG3hwq
BXKG0p3JgW2AkPBsx/19MRZL+NQLqdyH4+/S3+apkugyYcXfXiHFIRURwS6d4sLa
t3zdQuGB/HJ4pADuuOrfyAGCj2soyIPXEIb+iZl/cWJwUG6IentSwJ+TQFlGc/KM
fH5/rr7GZIZ+96RiUCWKWYbAVRr/UnJRwMXOXc65SqV8+DkwtPTusszcc5h4SdnV
dExDJuKgwDoXLGT7s4pnfxdr3bCc0DxtrUiWjmnaLGtiya3g9BaE5Jv8anBGZOnc
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19802668442485621394804564781194597814
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mcyclo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21813695018216806910252761532716958930420650550737439569137161937429967226181952770802244193666625989211281602565253434274409868320508638474141705684429505327812472558903918115660857062529559415726457828687356788119271265073748332245683379181903935740789019205593094860783105508075186874209722753690029008102829545954277887462557164530070583916362770037801115150666423802906074444570502980184750765939135468345561275181018563699226578128059128854865800901615443557294321944887631705826757550059628817760570577729202994918838191940873685527269719271060542892812754184873431701126829037441668789915766272206523131878497
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							668e77ec29b6e9905f4df1e2d616537fab50c354
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (810 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcyclo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basf-catalystsmetals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revylok-fungicide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seeds-excellence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agsolutionsfinder.basf.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdizero.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdi-zero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cevya-fungicide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surtain-herbicide.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newtrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nutritionvirtualassistants.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.myencircle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdi-zero.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msds.chemetall.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pac.basf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stephankothrade.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yields.basf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verdictherbicide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klimaneutralesmdi.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revylok.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surtain-herbicide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dirkelvermann.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'climateneutralmdi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zoomlab.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdi-zero.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epoxiconazole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carbonneutralmdi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winningfungicides.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-virtual-aroma-assistant.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdizero.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join-agrostart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stoneville-varieties.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basfretailfirst.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lupranat-zero.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joinagrostart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soybeanwholeacre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'training.myencircle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revylok-fungicide.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lupranatzero.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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