fxempire.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0e:f4:16:81:66:4f:d5:d4:ab:95:b1:ab:56:c8:e6:57 was issued on by Amazon.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fxempire.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:f4:16:81:66:4f:d5:d4:ab:95:b1:ab:56:c8:e6:57
Serial Number (int): 19876568839579550767524947632006424151
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 15:6c:1a:82:c2:d2:7e:20:e9:74:ba:cb:53:f8:fc:2f:17:2e:83:2e
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): c7:95:45:66:6d:4c:5f:a4:f1:f2:4c:34:91:9b:5c:db:8c:35:85:7e
Fingerprint (sha256): a2:49:79:87:88:ff:cc:ac:71:62:21:f1:a7:17:16:14:ed:0a:ad:e9:90:29:a5:42:f0:26:95:d6:45:ab:5f:e1

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate fxempire.com

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fxempire.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fxempire.com
*.fxempire.es
fxempire.de
*.fxempire.fr
*.fxempire.se
fxempire.jp
fxempire.dk
fxempire.nl
fxempire.co.il
*.fxempire.co.il
*.fxempire.nl
fxempire.se
*.fxempire.de
*.fxempire.jp
*.fxempire.dk
*.fxempire.com
fxempire.gr
fxempire.it
fxempire.fr
*.fxempire.gr
*.fxempire.it
fxempire.es

Other certificates including the domain name fxempire.com

(limited to 100 certificates)
*.fxempire.com
beta.fxempire.com
fxempire.com
pixel.plumbing
www.signals.fxempire.com
mediakit.fxempire.com
www.careers.fxempire.com
signals.fxempire.com
www.careers.fxempire.com
fxempire.com
mediakit.fxempire.com
wp.fxempire.com
wp.fxempire.com
responsive.leafreport.com
*.fxempire.com
wp.fxempire.com
www.signals.fxempire.com
images.fxempire.com
pixel.plumbing
images.fxempire.com
www.careers.fxempire.com
www.mediakit.fxempire.com
fxempire.com
pixel.plumbing
www.signals.fxempire.com
responsive.fxempire.com
wp.fxempire.com
www.mediakit.fxempire.com
signals.fxempire.com
pixel.plumbing
wp.fxempire.com
pixel.plumbing
mediakit.fxempire.com
www.careers.fxempire.com
*.pre-prod.fxempire.com
*.fxempire.com
mediakit.fxempire.com
www.signals.fxempire.com
*.pre-prod.fxempire.com
www.signals.fxempire.com
fxempire.com
pixel.plumbing
wp.fxempire.com
www.signals.fxempire.com
images.fxempire.com
fxempire.com
mediakit.fxempire.com
fxempire.com
*.fxempire.com
pixel.plumbing
images.fxempire.com
signals.fxempire.com
images.fxempire.com
www.mediakit.fxempire.com
mediakit.fxempire.com
www.careers.fxempire.com
wp.fxempire.com
fxempire.com
signals.fxempire.com
pixel.plumbing
beta.fxempire.com
datapoints.fxempire.com
signals.fxempire.com
images.fxempire.com
responsive.coinz.com
responsive.leafreport.com
fxempire.com
fxempire.com
pixel.plumbing
*.fxempire.com
fxempire.com
staging.fxempire.com
fxempire.com
fxempire.com
pixel.plumbing
responsive.fxempire.com
wp.fxempire.com
*.fxempire.com
beta.fxempire.com
www.mediakit.fxempire.com
www.mediakit.fxempire.com
*.fxempire.com
www.careers.fxempire.com
staging.fxempire.com
www.careers.fxempire.com
fxempire.com
fxempire.com
www.mediakit.fxempire.com
www.signals.fxempire.com
fxempire.com
wp.fxempire.com
*.fxempire.com
pixel.plumbing
www.fxempire.com
www.careers.fxempire.com
beta.fxempire.com
fxempire.com
www.mediakit.fxempire.com
www.signals.fxempire.com
www.signals.fxempire.com

Certificate

The complete raw certificate details for fxempire.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGD+4Gqa0LjwjHfDzxen
FyqMIuODZJ/Iznn/kwtCpNsXIRQEb0qh3YbaXQUZdkIE19OlNzp5u6mdAi8q2jOg
+z7L6vFiH1viGffm/BjQDQSQqpF8Mulg4bDVJP6saBUSuFDv/KMNNNOc2Nsb0jdc
9Ux6na45bFmSfSwmytJIpUxK0KVJoZBxfiGIVepb48mAzwUiUJ2ZCx5/QtC1BQml
dF2sLjAaCKQUO7DW6YpW5gIzMIe4IogPtXqU6ZTCxnV5RqQ2GeJWm9BgB2CPVlhQ
AZZKFfdNJsO9ZNUHIddwH81jgIdq8a+Rw1vIuGFU7k+By5Dys5L9uSH9FWOKKzVH
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19876568839579550767524947632006424151
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fxempire.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23780631652469283443112046632940389532908298427601643923614023000764163981567692152944548713004005861987269687946781366759374815568881384940144082054184938960628246028245411462191811981780926327132321776369058875634863105613233765875450284693818174513696029771902524046379684273066638787703986366641881845749954748081592233731992742509493031465225479019944656075216491735859124827008833209618441582405833820716108965493621926408164203368099722922002357056121111164858090052339784822081760974377236214280354922129346318360060874103503534223469255863242298126120689051892942333628434381809815669792165520645607682033503
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							156c1a82c2d27e20e974bacb53f8fc2f172e832e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (320 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxempire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxempire.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxempire.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxempire.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxempire.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxempire.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxempire.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxempire.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxempire.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxempire.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxempire.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxempire.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxempire.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxempire.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxempire.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxempire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxempire.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxempire.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxempire.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxempire.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxempire.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxempire.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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