www.brianpark.ca

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:70:54:8a:bd:b4:13:bc:56:d5:3b:fa:77:8e:29:f6 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.brianpark.ca

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:70:54:8a:bd:b4:13:bc:56:d5:3b:fa:77:8e:29:f6
Serial Number (int): 19192443903748223326815798736290982390
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 9a:57:f3:c3:f1:bd:e5:51:06:51:1e:b6:2d:b4:77:dd:61:5b:de:7e
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): cb:f8:59:9c:81:1c:b8:5e:2a:14:15:ea:a6:4a:36:6c:8b:c6:c5:b8
Fingerprint (sha256): dc:91:00:74:20:8f:34:36:17:6a:ce:12:5b:e5:fa:d2:64:ec:67:75:f1:0f:aa:62:0c:cf:79:f1:fe:ca:ab:82

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate www.brianpark.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.brianpark.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.brianpark.ca

Other certificates including the domain name brianpark.ca

(limited to 100 certificates)
auth.storewise.app
media.youmewho.com
auth.storewise.app
www.dameonlaird.com
mijn-test.toegang.org
appeconomia.eventoselpais.com.mx
ro.test.funeasylearn.com
media.youmewho.com
alyf.in
www.brianpark.ca
www.mitiendasantacruz.com
app.avoqsoft.com
www.nearestschool.com
www.brentberghmans.be
www.brianpark.ca
qa-auth.tradelize.com
web.tiss.app
phillipichurchofchrist.com
business.rc-prod.tefter.com
sni23764.cloudflaressl.com
www.limoinmckinney.com
joyeriadante.com
bagavathimess.com
sni23764.cloudflaressl.com
www.longpham.ca
shogostudios.com
takeactionpt.net
www.brianpark.ca
w.donr.ai
www.roodboek.be
www.singintherain.space
takepart.staging.egg.srl
ifnoyes.com
gh.okinari.com
www.fazlapara.com
lw-manuscripts-frontend-dev.ciplit.com
brianpark.ca
share.ent.sdy.ai
www.longpham.ca
cryptoport.biz
www.brianpark.ca
www.brentberghmans.be
sni23764.cloudflaressl.com
brianpark.ca
invoice.stge.keap.page
w.donr.ai
sni23764.cloudflaressl.com

Certificate

The complete raw certificate details for www.brianpark.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs2FGx5+mu3LO6cj40sc2
qQj5Wo/oNjOqgW+R7prAADgpLTMCI9iG/98fe4QeoLMmXcLdo6o2kW2C2UTxBWPS
4fg2zkWAEl3wqe5CValyFx6SZ13ta6JTlSfOozccZCTmV9I+zlm5t05zLcWmHgEb
JItgWRKcUJ6SUbEBWI+KFR6iqMKwNRgacPQ3LFjSBdFsqST207mM1PugU5gqPV7y
r7pdAO552Dl0iMaYrjiRdPFqym5JjAAKus8n7hl9h5t7mk1QCQVvmZA30bho1Mmq
Z4sCgGelmy5x3EcbnVOSiVLiSKeXqi8A5rOiN7xaiyCkV/plS6JyYdAbZEXyAJZp
1wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19192443903748223326815798736290982390
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-07 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.brianpark.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22644625410768204765722709150607135510272249311645700019544420487691812901266325150168172903576245726160062757745040431457481745565514737795621064660394517937263099951424987579765010403844394436018056473107780583304759814916832563231176593238625739835911268695710821116402450547908335417316937828467853585781099830679592434832699995101521100779352385849115616639286644051295003086418529067920201609593183259792293680234903977421107861840260170563572059130431752069160839686496769649488624409648757942401772171835587487485399973348363225442965671339104652813072571133378034038079470409576601976956909584253269526866391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a57f3c3f1bde55106511eb62db477dd615bde7e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brianpark.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000167862b53440000040300483046022100c117b17d2c15e921c37ecea5d14795ab5bd3710d50bddfec4c7a0a126a8ff76b022100bf4b612cab2d67631dc46538f14bb9d09309667691d05ecae4fb18f58711d0040075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000167862b54080000040300463044022079becaf367be19401c4873f75fc308dcc1357ff7b8ccd66eb90408842ff2247c02203aa64c4922b8e5a1508b64ec72a8020c9606a58f0b4a0dddefa3f8a179a3215f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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