*.freedca.mp

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:37:a6:e6:b3:61:47:71:45:11:e0:1d:07:21:77:ae was issued on by Amazon.

With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.freedca.mp

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:37:a6:e6:b3:61:47:71:45:11:e0:1d:07:21:77:ae
Serial Number (int): 18898153426195242138313253785025214382
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e2:07:ae:d7:12:79:8b:f1:92:af:5b:cc:d6:10:aa:dd:fa:57:b4:67
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): e5:bc:6d:59:77:f3:3a:b3:2e:44:2a:6d:af:19:a6:76:9a:4e:cd:80
Fingerprint (sha256): 9f:74:02:17:1e:b7:50:35:d8:c3:44:90:66:75:b2:00:17:9e:0a:04:1a:79:1d:6a:5f:ec:64:0b:ef:b5:b4:86

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.freedca.mp

38

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.freedca.mp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.freedca.mp
dashboard.triadmultimedia.com
team.blueboxglobal.com
projects.beseentoday.com
clients.ivy.social
portal.phoenixallsaas.com
projects.codevelopment.com.au
team.danugrahregency.com
projects.experiacreative.com
project.mythoslife.com
projects.optsus.com
clients.completemarketer.com
clients.lavenderturtle.com
huddle.isev.co.uk
portal.ntansa.com
projects.dadscorp.com
portal.1stsupport.com
plan.matic.co
projects.crylim.com
projects.optech.net
projects.sixvirtual.com
projects.vicinity.studio
projects.plannit.com.au
projects.richardsonmarketing.com.au
portal.impressive.cz
app.adityaraj.com
team.owl.la
projects.drenalin.biz
my.webarchi.com
project.dayella.co
projects.ecetera.si
team.pimicro.com
pm.eikonikos.com
projects.eob.one
project.digitalmindsbpo.com
camp.texonica.com
portail.easytek.io
projects.thinkingkaplearning.com

Other certificates including the domain name freedca.mp

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.freedca.mp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpUkvEywg3tNHU6AUyBJ
KxioK4rmyJwqaCDuJsYkJ2I30gPYxBfASY+9kJ2o5qh35b3WPf7OJ+nGg5A9NupW
R5lwkf8j76VJlW5yYygmXfnmHHJTaJdsBtzxG6Z0+aICyuX7Ruu8VU+wU6dpZdxJ
jMcGC8i94WC1T79Xp6aKfiTLl0K9ViZwvFurltkiN4gwdXxh+lKQTObZgcUEYRZZ
w/GMmmRaay00wzRGnL3NWEJDo6IMs1F3hTFNLcC+bf52nfKXJWJTBeEsvUiQuf2Z
GJfINnxjsqdprw/fLwiAd/MR5N1zPhCU8y749yrh7DIKqcwjrlOBIiKLjsArTop3
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18898153426195242138313253785025214382
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.freedca.mp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21534057244278519304227683301082479641357362710064936062746192129286182022283526160100256983677716152797768589189253771208999802692826029651804079761476847612119503433184929698151802009142717759884227186351089725489084518379392285700762964076383837408178682031769656698418691207895935723691672185132846112273423434576709369784493552540629050243633026446353599778688083003643047084058979921112513581482744486676900693359891375843203674129186312946916394160287776631275404653548864917136435907998760484431659708691586526417594227745350801292299344889503916795025084615601032797278251199845654120082777594222106519435211
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e207aed712798bf192af5bccd610aaddfa57b467
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (881 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freedca.mp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.triadmultimedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team.blueboxglobal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.beseentoday.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.ivy.social'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.phoenixallsaas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.codevelopment.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team.danugrahregency.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.experiacreative.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'project.mythoslife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.optsus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.completemarketer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.lavenderturtle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huddle.isev.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.ntansa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.dadscorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.1stsupport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plan.matic.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.crylim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.optech.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.sixvirtual.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.vicinity.studio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.plannit.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.richardsonmarketing.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.impressive.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.adityaraj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team.owl.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.drenalin.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.webarchi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'project.dayella.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.ecetera.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'team.pimicro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pm.eikonikos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.eob.one'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'project.digitalmindsbpo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'camp.texonica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portail.easytek.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'projects.thinkingkaplearning.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001705673e5d800000403004630440220281458fc7bdd5622ed5cfec4bcdd9e1cfc17f02af68f36f35f2dff48257086c2022051b853b37c57958a460abc88c05c57561cd3ddbcf88914504f97f2fb3b398f7a0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001705673e651000004030047304502203814a657fb5ee06459edb96ccaee6c6ddc533b96d840783e05abb9ef7501ab7b022100ab1e478a67bb97b4c69451ba625a98773b6b07cb1bec43c27968ac2a1432c5a6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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