ourkin.com

Issued by Amazon

About this certificate

This digital certificate with serial number 06:b7:0b:3d:02:5a:eb:4a:12:e0:32:a8:ed:69:e1:ea was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ourkin.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:b7:0b:3d:02:5a:eb:4a:12:e0:32:a8:ed:69:e1:ea
Serial Number (int): 8925786239973806697893865188764541418
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: d9:25:18:39:fb:54:d6:79:68:15:7a:f9:94:a9:86:83:c5:28:7e:01
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): ca:93:77:2d:3f:63:2d:d0:d7:4d:19:b8:79:e8:bd:b9:3d:1b:60:f0
Fingerprint (sha256): ab:10:65:26:f1:10:d8:ac:4b:9f:29:ee:a7:d2:00:58:19:34:28:52:1c:87:91:c6:f2:b4:ef:8f:82:96:bb:28

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate ourkin.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ourkin.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ourkin.com
*.ourkin.com

Other certificates including the domain name ourkin.com

(limited to 100 certificates)
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
tasks.unibs.it
community.ourkin.com
ourkin.com
theostattoos.co.uk
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
maps.ourkin.com
sni115205.cloudflaressl.com
auth.ourkin.com
sni115205.cloudflaressl.com
ourkin.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
www.irenegallego.com
cal.divest.app
sni115205.cloudflaressl.com
app.getminerva.co
ourkin.com
ourkinsites.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
www.superlist.at
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
selfie.actimotive.app
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
maps.ourkin.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
staging.ourkin.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
www.norabau.hu
sni115205.cloudflaressl.com
www.henkoti.com.br
sni115205.cloudflaressl.com
community.ourkin.com
maps.ourkin.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
www.beedots.app
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
auth.ourkin.com
sni115205.cloudflaressl.com
maps.ourkin.com
staging-maps.ourkin.com
sni115205.cloudflaressl.com
gold.dsignage.app
ourkin.com
maps.ourkin.com
sni115205.cloudflaressl.com
community.ourkin.com
ofatv2020.ondagoapp.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
maps.ourkin.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
www.showchampions.com
ourkin.com
sni115205.cloudflaressl.com
maps.ourkin.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
sni115205.cloudflaressl.com
cellinus.net
sni115205.cloudflaressl.com
ourkin.com
sni115205.cloudflaressl.com

Certificate

The complete raw certificate details for ourkin.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5b6pRD4+jr/7Gyb1WZZ
WKtM4uWm1XgX3c7yU37EmhXyAa4ZrahLlT84V5A/Q+xEBRVnaNantPfJM7bbmGkp
OjSJ6U4j+Yny1c1pkvVQ0W+4gGiSyHZauF5lg6kJdFK45ExnnSl8IZz1ZmfRPPn6
0LAwao+Oe568X/eNI2mtvi2Ps9jSFbhXBDosKNB3xusTu+c2WuwRbyNomBFM7N7W
B6kPZPE0Z2ckZLNzgns0cvLfr/E8MaQQL3i2Q3NYrjDibBBZU2I0UQWUeYaNsbdg
dm3XXZQjPzmMdRTlF08pIme6ZUjQH8Fp5qpjqiUcwcZPSrvo8DEYkDHC+NhtGVuF
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8925786239973806697893865188764541418
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ourkin.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17116621730173833889077466069614902377419663609575658167515525248842429517061453586341117074241972207653558045611581464747288402728373770272048225477190950735489622318442969733617270527819019329038207748711002193574456079774209033615963928380273624952918936362011436554166842961326415336107664696774825809107163503062519652304077562785576631042572111440706513794068316179579519311352699839462825334543181286116430221210998257244038241774227996326525395926151431206670591906479429247958798206463125026535303202101752084524619580364911291269649648193022206193041257913652177344181360758923622781116309131902682916423099
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9251839fb54d67968157af994a98683c5287e01
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ourkin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ourkin.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016ddd6fec650000040300473045022019d39195cdcf7fe1788222e6916ccbb6def02da22917b04beaf923391badbd13022100c97b4f8df08817a61b0d997959c901ab76c2523ffac0d5a750f60411bb8c59de0077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016ddd6fed2b0000040300483046022100fce86de50cbebe7ba1cc863f033467be1ea29a6b6c4d319583a7e6df995482c102210092e5aab0558fe3988c47b5e24de2cb3be90c151a1362f3d43cda36d583abe101
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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