leads.idigitalstrategies.com

Issued by Amazon

About this certificate

This digital certificate with serial number 04:2f:1a:b1:f3:a1:79:8c:cb:b3:cf:c9:e8:d6:08:56 was issued on by Amazon.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leads.idigitalstrategies.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2f:1a:b1:f3:a1:79:8c:cb:b3:cf:c9:e8:d6:08:56
Serial Number (int): 5561491376925328805486646874697238614
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 8c:19:3a:13:24:5e:a7:11:27:0e:6f:e3:71:e6:d5:e5:75:e8:42:d9
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 86:ff:3d:67:6f:0c:71:fd:f8:c5:18:ba:24:e1:cb:35:53:ad:b9:3e
Fingerprint (sha256): c0:37:de:0c:b0:52:84:ee:2e:df:23:3d:18:b7:51:a0:31:66:40:2d:76:59:11:d3:6e:a7:99:88:42:70:37:7e

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate leads.idigitalstrategies.com

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leads.idigitalstrategies.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

leads.idigitalstrategies.com
leads.tmgusa.com
leads.taodigitalmarketing.com
lunchboxwax.my-leads.net
leads.conversionmoxy.com
leads.distributedigital.co.uk
tracking.eastcoastadvertising.net
dashboard.alignlife.com
painel.tradeads.com.br
conversions.farmersmarketing.ca
leads.pavingmarketers.com
leads.zymbyo.com
leads.patternseo.com
leads.shiftmarketing.net
leads.marketer-ux.com
leads.webteam.ai
mutts.my-leads.net

Other certificates including the domain name idigitalstrategies.com

(limited to 100 certificates)
leads.idigitalstrategies.com
leads.idigitalstrategies.com
calls.omg.re
calls.omg.re
leads.idigitalstrategies.com
leads.idigitalstrategies.com
*.idigitalstrategies.com
leads.idigitalstrategies.com
calls.omg.re
calls.omg.re
leads.idigitalstrategies.com
leads.idigitalstrategies.com
calls.omg.re
leads.idigitalstrategies.com
leads.idigitalstrategies.com
*.idigitalstrategies.com
leads.idigitalstrategies.com
*.idigitalstrategies.com
leads.glcdigitalmarketing.co.uk
calls.omg.re
calls.omg.re
leads.idigitalstrategies.com
leads.idigitalstrategies.com
leads.idigitalstrategies.com
calls.omg.re
calls.omg.re
leads.idigitalstrategies.com
mail.idigitalstrategies.com
calls.omg.re
leads.idigitalstrategies.com
leads.idigitalstrategies.com
support.idigitalstrategies.com
calls.omg.re
calls.omg.re
leads.idigitalstrategies.com
calls.omg.re
calls.omg.re
calls.omg.re
leads.idigitalstrategies.com
leads.idigitalstrategies.com
idigitalstrategies.com
leads.idigitalstrategies.com
calls.omg.re
leads.idigitalstrategies.com
leads.idigitalstrategies.com
leads.idigitalstrategies.com
leads.idigitalstrategies.com
leads.idigitalstrategies.com
calls.omg.re
calls.omg.re
leads.idigitalstrategies.com
idigitalstrategies.com
leads.idigitalstrategies.com
calls.omg.re
leads.idigitalstrategies.com
calls.omg.re
leads.idigitalstrategies.com
*.idigitalstrategies.com
calls.omg.re
leads.idigitalstrategies.com
calls.omg.re
calls.omg.re
leads.idigitalstrategies.com
leads.idigitalstrategies.com
calls.omg.re
calls.omg.re
leads.idigitalstrategies.com
leads.idigitalstrategies.com
calls.omg.re
leads.idigitalstrategies.com
leads.idigitalstrategies.com
leads.idigitalstrategies.com
calls.omg.re
calls.omg.re
leads.idigitalstrategies.com
calls.omg.re
calls.omg.re
calls.omg.re
leads.idigitalstrategies.com
leads.idigitalstrategies.com
calls.omg.re
leads.idigitalstrategies.com
leads.idigitalstrategies.com
calls.omg.re
calls.omg.re
calls.omg.re
calls.omg.re
leads.idigitalstrategies.com
calls.omg.re
calls.omg.re
leads.idigitalstrategies.com
calls.omg.re
leads.idigitalstrategies.com
calls.omg.re
leads.idigitalstrategies.com
calls.omg.re
leads.idigitalstrategies.com
calls.omg.re
leads.idigitalstrategies.com
idigitalstrategies.com

Certificate

The complete raw certificate details for leads.idigitalstrategies.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCrB/oH+AAhBWOzW5cHh
/vylliBXw3JQO0tD+39VG7SsQxXLddVxGWeX7umyh3OrYRBaoEzpVNT+DuSbxAc6
QgdVSTu5d12N1fWzzHmLNTLeYBH9ss7U+nzJXaIH86IihpgRC2sdmYOD/bImjCn1
M3Kvu+MXHtTE9vi4eCYShqPnoAj3RL86Z14hr5fTZugDpFY558Geyjb7VwOim6iA
f4sHhcKQ7R4Mlmgnnr9+uBPMNytiHn7URpQ00LzCEFYQz+OV40Y0oniL8t8jJWiL
yHoA3nHX/bzfXFhCMEGhCSyGVx/wxhcWmyvLFqh54YDDMqUbl7CPAv0LmraAVxkr
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5561491376925328805486646874697238614
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leads.idigitalstrategies.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21734073106113962135120545653744099932001195040672763943463329638659928178104362992291930532338335006078281749469458793462888559313982529247156681947283933081454137494744173958481252307628441179807490104129010542918114488472019476064109591425448685118347370425507143991932551754666722031459352615471606965395307219661959321484268142716120494574000195158671193874767749282579447410141343138658998825338856689586213541182365079356933340639092048025297795866721370011834856663315181765841985770999497398790780116996745386827376015150694159377071203031835660584250795034767315630465510350213483241860551927304508778556407
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8c193a13245ea711270e6fe371e6d5e575e842d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (437 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.idigitalstrategies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.tmgusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.taodigitalmarketing.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lunchboxwax.my-leads.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.conversionmoxy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.distributedigital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking.eastcoastadvertising.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.alignlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'painel.tradeads.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conversions.farmersmarketing.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.pavingmarketers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.zymbyo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.patternseo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.shiftmarketing.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.marketer-ux.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.webteam.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mutts.my-leads.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004f269d2d82b52adae722e2af2ee909d3b7420154e1c031a50f22cb529e0380e7e8f8ee08b2d53583481d12e5069ff39f791643510aa370889c66c0995888855ec19bb778c4446db477adda7d2f80bba3549493ecfdf44f552037d310339fd50d5557dd2ea6e222cf7277753fe5ee7b212ea42ef855b2cc8ad6e59a6af4f444566cd10585508c37ca4ff1b5a9a55159bc50de1ebc214a1a930358441dc3707e5bad3813fbd698e6411304658c7ca1d62f69c8f023d5a5941ae80474d39294a9b700216c49e3fae9c0ac75a1e0653d24f6f0c87fd5d9273f35602b885caa2dd9eabeab12df86557f3bb236efce8def39cba1a24e7f98d7dbd8880623e03ff38d8e