*.dev.workiro.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0e:2f:2c:90:7a:88:44:ed:7a:cb:fa:b2:78:82:ef:84 was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.dev.workiro.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:2f:2c:90:7a:88:44:ed:7a:cb:fa:b2:78:82:ef:84Serial Number (int): 18854133766139832458076809415337635716
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: f9:86:bf:04:04:68:b4:ba:00:49:5e:7e:2f:70:05:b5:3c:b9:c5:dc
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): d5:74:fc:c1:b6:fe:dd:e3:57:ca:a9:22:35:d1:d4:44:f0:f4:d5:e2
Fingerprint (sha256): d0:1e:52:8f:ff:f8:8b:ee:d8:a6:4a:0b:3b:96:1d:11:5a:50:f2:0a:3c:9e:83:91:5f:fe:d0:c7:2d:ed:8d:c2
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl
Check the revocation status for certificate *.dev.workiro.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.dev.workiro.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.dev.workiro.com
*.dev.getbusy.com
*.dev.getbusy.com
Other certificates including the domain name workiro.com
(limited to 100 certificates)
*.dev.workiro.com
workiro.com
*.dev.workiro.com
*.dev.workiro.com
workiro.com
*.dev.workiro.com
workiro.com
www.workiro.com
workiro.com
workiro.com
*.dev.workiro.com
*.workiro.com
*.workiro.com
www.workiro.com
sni.cloudflaressl.com
workiro.com
www.workiro.com
*.int.dev.workiro.com
sni.cloudflaressl.com
workiro.com
workiro.com
*.workiro.com
*.dev.workiro.com
*.dev.workiro.com
*.dev.workiro.com
*.dev.workiro.com
*.dev.workiro.com
workiro.com
*.int.dev.workiro.com
sni.cloudflaressl.com
*.workiro.com
www.workiro.com
*.dev.workiro.com
workiro.com
workiro.com
*.dev.workiro.com
*.dev.workiro.com
workiro.com
*.dev.workiro.com
workiro.com
www.workiro.com
workiro.com
workiro.com
*.dev.workiro.com
*.workiro.com
*.workiro.com
www.workiro.com
sni.cloudflaressl.com
workiro.com
www.workiro.com
*.int.dev.workiro.com
sni.cloudflaressl.com
workiro.com
workiro.com
*.workiro.com
*.dev.workiro.com
*.dev.workiro.com
*.dev.workiro.com
*.dev.workiro.com
*.dev.workiro.com
workiro.com
*.int.dev.workiro.com
sni.cloudflaressl.com
*.workiro.com
www.workiro.com
*.dev.workiro.com
workiro.com
Certificate
The complete raw certificate details for *.dev.workiro.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF7jCCBNagAwIBAgIQDi8skHqIRO16y/qyeILvhDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjAzMzEwMDAwMDBaFw0yMzA0Mjky MzU5NTlaMBwxGjAYBgNVBAMMESouZGV2Lndvcmtpcm8uY29tMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64IgEs3Apj431GRnov3npFHTBStak9KKU8hV qHxNOoCUo6OBLZNNJPb+RoXF4ve5ntVOT5h72/e6YTCbmD2tsVPynRodKR18lSfZ adp+vb/irn2vQTv83MmVrR19nuVNxofwSCrQGb2J0/jv3BzAxuL3ruijTyMECBiC V9v4FnB0Chx5gXgLXjhj7XFzSk4/QKQQ//5MKzPQ/lq4OB+XGs1jwW/pDlf7U5/l VoaJ6HC3cId6H5quA1lLMTd1veiNQygNErxGKpKDPBlUqvclQACVzhOTLR+YKgkC +O8u0p5/KCAEUamN81b3T4Vzkik6uFREIH7yQ6jqXTQDjOXnbQIDAQABo4IDADCC AvwwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFPmG vwQEaLS6AElefi9wBbU8ucXcMC8GA1UdEQQoMCaCESouZGV2Lndvcmtpcm8uY29t ghEqLmRldi5nZXRidXN5LmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMD0GA1UdHwQ2MDQwMqAwoC6GLGh0dHA6Ly9jcmwu c2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLTEuY3JsMBMGA1UdIAQMMAowCAYG Z4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Au c2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNj YTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADCCAX8G CisGAQQB1nkCBAIEggFvBIIBawFpAHYA6D7Q2j71BjUy51covIlryQPTy9ERa+zr aeF3fW0GvW4AAAF/4FusBgAABAMARzBFAiEA1KqsSKwqX6vJpRxy1miEQG9uJwLI QISSFzLBVlqqWwICIF19frVk+ZTznYV1PW3uEN2tAKvQbFdIXo4CpbotD331AHcA Nc8ZG7+xbFe/D61MbULLu7YnICZR6j/hKu+oA8M71kwAAAF/4FusKwAABAMASDBG AiEAhQ780lB1xyGt4w4seaq4NXwbNMDJ/vdHfJpqBe/bR58CIQCarSpfkw9QQQ0P 1NofJRZLCMZ7N001YXazJErKVwdEzQB2ALNzdwfhhFD4Y4bWBancEQlKeS2xZwwL h9zwAw55NqWaAAABf+BbrEgAAAQDAEcwRQIhALSMai2CpVpHBBn1woHe1TAVkC+g BB9LMy2DjwU0wARdAiA5vJFaVdJ2XDzdm/JBA2/hfCPKJF4mC2sHJOR2iZSSgTAN BgkqhkiG9w0BAQsFAAOCAQEAZiDuymJHX6yJcghv84Cwax6IG9+BdG5sV5ZGt+H6 cDrglbXFuvHp8mOu5CDnADW3sesjhR6E8+earIP/UmQ3cPkbq/xWJkkGPuRpR2Cl tMpCL+3qIr5oMkVb2RiDVYONWKxd/Kem38zyk9xNoReC2LidmrdxirSc/sVogJrQ CAomH8AuqydgdPWoDXoSf7HuG15zQmtrQGpVxy5wXk+vWDUJYczgBnWzfk3GGRGz zKHKtFHwjf3RB/5fF61AItD/nWL5CiLvQU3Y2urTix6U0084R63egWIXwOpHZ/19 wrheLvZljbKcoECmHnVfFiews7C6TohWQuqUJXRr6tWK7w== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64IgEs3Apj431GRnov3n pFHTBStak9KKU8hVqHxNOoCUo6OBLZNNJPb+RoXF4ve5ntVOT5h72/e6YTCbmD2t sVPynRodKR18lSfZadp+vb/irn2vQTv83MmVrR19nuVNxofwSCrQGb2J0/jv3BzA xuL3ruijTyMECBiCV9v4FnB0Chx5gXgLXjhj7XFzSk4/QKQQ//5MKzPQ/lq4OB+X Gs1jwW/pDlf7U5/lVoaJ6HC3cId6H5quA1lLMTd1veiNQygNErxGKpKDPBlUqvcl QACVzhOTLR+YKgkC+O8u0p5/KCAEUamN81b3T4Vzkik6uFREIH7yQ6jqXTQDjOXn bQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18854133766139832458076809415337635716 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-31 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-29 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.dev.workiro.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29730168837548215983647535568691971978134655105239679704440194515337541116559970146122775581230444567874260494275726879255022372296491172843112187904822391805270003590003382983781454560246872798243008402640218929983766694516391830904252646701163494468014138528195012884963904232330287184937798457969073695077049707884337745466370640521924222914554179634574560654095907480965404261036529162618947538216252643686267319597409669975760201285515077575034640278988608591353773602961220971446389038280939650595569583191215061685495746355754876693946075686009525620607838038202195697686264045325136629021693923580520587192173 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f986bf040468b4ba00495e7e2f7005b53cb9c5dc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.workiro.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.getbusy.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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