api.bargreen.io

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 04:3f:99:b7:e1:fb:4e:7d:4f:2f:95:86:51:77:43:04 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api.bargreen.io

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3f:99:b7:e1:fb:4e:7d:4f:2f:95:86:51:77:43:04
Serial Number (int): 5647144462588394694821822146826158852
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: a4:35:96:fa:1a:47:36:4d:3b:19:09:d5:07:68:77:26:29:6e:c8:f4
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): e6:1e:df:44:e6:f9:c9:57:ac:ef:47:2e:65:9a:14:0d:79:a4:46:69
Fingerprint (sha256): a9:c8:89:3d:f0:dc:49:d2:c6:da:ba:28:3c:88:30:f4:0b:f6:3a:47:41:41:2c:51:5f:28:a4:36:00:e8:c8:7a

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate api.bargreen.io

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.bargreen.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.bargreen.io
*.api.bargreen.io
*.api.bargreen.com
api.bargreen.com

Other certificates including the domain name bargreen.io

(limited to 100 certificates)
upward.bargreen.io
wellness.bargreen.io
crunch.bargreen.io
wizardquotes.bargreen.io
api.commissions.bargreen.io
dev.bargreen.io
upward.bargreen.io
partnerintegrations.bargreen.io
wellness.bargreen.io
test.design-hours.bargreen.io
api.itemservice.bargreen.io
design-hours.bargreen.io
staging.apidotnet.commissions.bargreen.io
*.bargreen.io
upward.bargreen.io
*.bargreen.io
*.bargreen.io
api.wizardquotes.bargreen.io
*.bargreen.io
wellness.bargreen.io
crunch.bargreen.io
crunch.bargreen.io
wellness.bargreen.io
bargreen.io
api.wizardquotes.bargreen.io
staging.api.commissions.bargreen.io
upward.bargreen.io
api.userservice.bargreen.io
*.api.itemservice.bargreen.io
upward.bargreen.io
live.bargreen.io
bargreen.io
wellness.bargreen.io
nginx.bargreen.io
*.bargreen.io
upward.bargreen.io
staging.apidotnet.commissions.bargreen.io
development.api.userservice.bargreen.io
api.commissions.bargreen.io
*.api.userservice.bargreen.io
wellness.bargreen.io
dev.bargreen.io
crunch.bargreen.io
*.wizardquotes.bargreen.io
api.bargreen.io
crunch.bargreen.io
crunch.bargreen.io
crunch.bargreen.io
staging.api.userservice.bargreen.io
upward.bargreen.io
upward.bargreen.io
piebox2.bargreen.io
*.dev.bargreen.io
*.bargreen.io
nginx.bargreen.io
wellness.bargreen.io
crunch.bargreen.io
wellness.bargreen.io
partnerintegrations.bargreen.io
crunch.bargreen.io
development.api.commissions.bargreen.io
crunch.bargreen.io
test.crunch.bargreen.io
bargreen.io

Certificate

The complete raw certificate details for api.bargreen.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfRCRbhtIAXKo6QW69lN
r23OaV6CI1LFnBDYK9HpWs7UpGEQ8zbntY1WREb+LiYvphiUV/cJD+0nnYVpZZz4
uDBzpMu1KRnRNgi9S6tTzxSn8LCME2epBIRthPe+0D8th4DFZYl+5k/cnRj+lxcb
DhizpOhD9mPTYEcZc8+DKEbNmlGqh07xDTVtWKmSVhYFqn4xSomuXBrMxmLSQ9ln
MTDLykI78f142LrI/Tu9J7F4gKi3NhtpBXv2nJphJD1TAeCBvKcofm7Lnvz8PY1K
23lgW9Qvrl3aOKDVNWxQIKLcn62e0FdcOhMpVMH3G7ltUbUlWMmCa7FjoxVWIFA6
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5647144462588394694821822146826158852
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.bargreen.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22464628520098725559036035627689435201175997898340117040714854192336739956141913002373446530962519382358794354277082878695797625923230876919902666663445843804860704952373120580423390432779728822480865343447159001958048977873097569313904470836829684049687570191577480405356333992137446366748973257073529859927704363678469317993595047271722258466575690122034756931953155074950005195360141934521718078159232217266823103151788141767944965800849181652189887736575002759613789656374950298320253500339121397622071405260436641464223502030876419311947547592664298376515775139478311949373202700013352636619732658625855911639773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a43596fa1a47364d3b1909d507687726296ec8f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.bargreen.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.bargreen.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.bargreen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.bargreen.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00bababc6961e62c24bac54b0774d8f26bb2420d329d3554245747bd8d229ffaf19a6b8e92e00fb1b934c9b20af57a094973b78ce934b88f7afbc2fb03777cc9448620a8959754d2d1a375bf6ae23ca903c18a49611965c370a79c3f04e55bb64eb2c31f64ec39da44b7a117ec3a8fa1625030e37f1e1e049f14b4cc3012eb4dd4bf6b21c58fcf4afea7e5f0b70f3bf4c3dcb6a941c56f9cd1a9ff91b65f9b7744eb6ad29f00c089b6e4e2a47d6a43f64c83307df484676b7cba0af313e8e2246cdef6a98365ac69b05fb5446063e7bbb9add6e428928ba94f1f411b646376a5ea72212965ea82673a73d92c91ef56cbb311a6141fff62447ed7eedf96f6722fd0