heybit.io

Issued by Amazon

About this certificate

This digital certificate with serial number 0b:c5:d8:b8:1b:73:01:54:2b:20:04:f6:40:84:c6:a1 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=heybit.io

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:c5:d8:b8:1b:73:01:54:2b:20:04:f6:40:84:c6:a1
Serial Number (int): 15648786021716855039644548728789190305
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7f:ae:6d:b3:f0:de:f6:bf:30:c3:f2:eb:7e:2c:cd:b1:df:5e:20:45
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): a0:8e:8b:28:09:3b:b3:bb:ba:12:58:e7:6e:fb:cf:ec:3b:f8:97:ec
Fingerprint (sha256): c9:42:80:b2:da:dc:9f:9d:48:81:84:7d:d6:1c:7e:50:16:cd:b0:0b:b5:1c:7b:b8:60:6e:92:0b:f2:92:8c:71

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate heybit.io

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for heybit.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

heybit.io
*.heybit.io

Other certificates including the domain name heybit.io

(limited to 100 certificates)
heybit.io
go.testarchitect.com
www.aviatavi.com
r-dev.heybit.io
sms.sjc.co.za
getmarketingtips.io
app.heybit.io
heybit.io
sni.cloudflaressl.com
k.koopid.ai
www.sushiexpresspanama.com
www.imagery.photography
www.mes-rendements.com
clearwatersadventure.co.zw
zpring.io
www.jamiebaker.com.au
www.heybit.io
viksingh.app
link.test.qvmd.com
heybit.io
www.aventurainnovadora.com
www.codelixtech.in
zpring.io
heybit.io
www.eliquidblend.co.uk
portal.vtmoney.com.br
www.perfectlyhappy.com
www.heybit.io
dev.ciapipe.com.br
firebaseapp.heybit.io
alpha-m.heybit.io
www.heybit.io
www.hagestam.com
heybit.io
l-alpha.heybit.io
l-dev.heybit.io
www.meraki-apps.com
heybit.io
l.heybit.io
vinaymuppala.com
application.heybit.io
iecartagena.edu.co
*.d.heybit.io
safe-lease-milage.qwezey.com
heybit.io
dev-m.heybit.io
auth.dev.cohort.xyz
firebaseapp-dev.heybit.io
firebaseapp-alpha.heybit.io
www.rudydogum.com
test.fifaboss.app
dev-app.heybit.io
staging.api.skywire.28east.co.za
warp89.com
desoftwarestudio.com
www.leaseperiod.com
www.heybit.io
heybit.io
www.altuspanama.zittio.space
lakeandlandhomes.com
heybit.io
www.connectiv.it
q3-track.dpdlocal.co.uk
www.escolanuncafoisorte.com.br
r.heybit.io
thejoeshow.app
heybit.io
nijibox.co.jp
ambito.io
nijibox.co.jp
www.liquidityai.io
personalized.livestream.rephrase.ai
dexie.cards
www.guitarlessonsnewcastle.com
cryptofeelz.io
www.heybit.io
ampgular.com
www.kanjegfeste.no
live.aku.edu
derp0.c.heybit.io
www.elaularestaurante.es
sni.cloudflaressl.com
sportybetodds.shop
r-alpha.heybit.io
lifebyvivara.com.br
alpha-app.heybit.io
de.mariniere.nouvoduo.fr
application.heybit.io
mohr-westerhoff.fastdocs.de
ambito.io
websiteforms.ro
www.visionvanilla.com
lakeandlandhomes.com
9j5tm.podc.incentable.com
www.heybit.io
lenders.tizo.vn
www.heybit.io
heybit.io
r.heybit.io
bitswapdex.io

Certificate

The complete raw certificate details for heybit.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+LRXEtWwGinev+29rXT
h8I9tncZPo2Z11zHvMtHHMG46Wy1ulPuxzAnw5AneIjx7hcA+t9woRmBOlKDqPc1
hnpxe5o5toAbX20pMjIZdZYu3EDKcq9nX58fn7nLPAl6CXKwwKvf0YGFk/3ykkKJ
xxL0zrVRkmn4tq3erWdZRmexdbGH7VxQDUDngzbiAYnjAUtx5TXcIyvBa5Bzhl3s
lBoU9SIXVbEY0XEWLPrwReX7TmWlbjwyrjjg6tj11XEZ6yq4gC5t5FBY+vPg/a0M
OX5JZNlShd6QJqn8Ny/vOuqVM/D17+VSrgg6QQE3O2J7xpgn78Ke/oKjO4L+Klz1
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15648786021716855039644548728789190305
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'heybit.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19678785302726544778329832611128451847102300350299915194884091178479320741482552549264307431500515599718032133096950364480586856009987441904287105519183087107650952514949497674747087717468110583452773595080041020336785980692236118014145588704234897022657744779690362135187177114226566504807955120679129354151314264843063799036059987882897483263414744368052661800254772777582902770406887176477851387189413242248807948747022444927706238359581957618098739705359513809980116614854552485088748782170461348485991602962393608465847143542476065941571838702768326699946731396983173795502214145972450070764854935430040953615771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7fae6db3f0def6bf30c3f2eb7e2ccdb1df5e2045
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heybit.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.heybit.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000065c385aa3273787bad6454e9b2794edc35c6cc7fff7c31a008cbb33ecfd82899b21917347e392fa9c05e6a1f03e0e22ac47689b501f85a32d4bdb26da7d67d9aada6f30ddf835f7b0cc45ec5ffc092d033034cbfd31632e4f8e2c14dbf0528d0be985ca7117d68705ecc8338c1e0884556dc5c4776b581f1459c0eb8f86a350b1effa60dff90d9dc1d072fcd383005ac9acd310cbe0fb97d791bd3b259954b535e887283d200fcbbe6b1105b88fcaa7e8bf4cf6ef08c3867ac0642e73924a108679f330903e921bbf52e190e11195b6564a1b1dcd142dc137aca31710f5354a65fb07a53c08bdf1ca354a8be6131fc97123c142fbac6af33232ebe24f04da3