www.nixchallenge.nl

Issued by Amazon

About this certificate

This digital certificate with serial number 09:9b:22:75:ad:f0:dc:e8:6c:16:a3:3f:96:e2:15:43 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.nixchallenge.nl

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:9b:22:75:ad:f0:dc:e8:6c:16:a3:3f:96:e2:15:43
Serial Number (int): 12768556900590771568138059537711240515
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 1b:93:ad:59:36:07:eb:8e:e3:56:0b:11:e9:11:cf:40:ab:36:36:a8
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 4e:95:c8:22:0f:e5:b3:33:05:24:69:27:29:8c:cd:13:9d:9d:25:67
Fingerprint (sha256): e9:1a:7d:97:29:ef:e0:94:d9:4c:83:5b:29:ac:0b:42:8d:c3:d1:af:d1:31:8f:f5:5a:92:81:af:c5:b5:2f:58

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate www.nixchallenge.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nixchallenge.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nixchallenge.nl
nixchallenge.nl

Other certificates including the domain name nixchallenge.nl

(limited to 100 certificates)
lokals.co.uk
digitalgoose.io
link.eco99-prod.moveodevelop.com
suludev.corp-internal.rxo.com
www.preguntaz.com
www.countingdowntocoble.com
schnelltest.care
01010000.tech
redthemes.net
mutcho.app
gaplite.redsos.com.ar
www.quehry.com
events-september-2022.amfa.net.au
www.nixchallenge.nl
nixchallenge.nl
www.federicofumo.com
premiocapitolium-roma.it
rustfish.com
www.gotakeout.ca
www.findhamza.xyz
firebase.hendrasaputra.com
www.federicofumo.com
inh-elgrancatire.elinmejorable.com
www.naoztd.com
e-learning.nixchallenge.nl
livego-stg.vonder.io
www.stissingtheatreguild.org
www.nixchallenge.nl
biotechhoney.com
dranna.takeaction.co
www.naoztd.com
beta.motormerchants.com.au
badassxxx.com
badassxxx.com
biotechhoney.com
blog.wharfstreetstudios.com
nixchallenge.nl
www.findhamza.xyz
gall-gall-finale.nixchallenge.nl
ozturkmakina.com.tr
liberty-live.anevent.co.za
moku-jp.com
www.oakwavephotography.com
comptametrics.com
subscription.timeyrd.com
www.quehry.com
lemonbox.nl
new.eestec.ro
www.nixchallenge.nl
e-learning.nixchallenge.nl
www.carvalhoneves.com.br
cgc.maresto.id
api.nixchallenge.nl
short.mimic.eu.org
ovellocapital.com
www.hellovia.id
link.eco99-prod.moveodevelop.com
hillcharts.speedledger.net
www.honest.poker
naoto.bando.page
hub.veamstudios.com
info.2cl.com.br
www.lighthousetowels.com
admin.golfinity-app.com
inh-creamburguer.elinmejorable.com
eymir.zeplinx.com
www.jesplumbing.com
products.candbdev.com
vestedinterest.app
vishalsingh.xyz
yadidi.donyaplatform.com
links.selectcitywalk.com
nicolatiani.com
bombayspice.com.au
admin.ppdb.edutech.web.id
ayaandhir.com
www.nixchallenge.nl
hello.glmachado.com
windupmusic.ca
comptametrics.com
www.jamieson.app
s-kino.cedricmeyer.eu
mgemipartner.com
www.countingdowntocoble.com
antiguacatcafe.com
www.nixchallenge.nl
www.epsmachineindia.com
hillcharts.speedledger.net
www.nixchallenge.nl
www.nixchallenge.nl
sandy.chabbaman.com
falcodev.com.br
www.hellovia.id
www.jamieson.app

Certificate

The complete raw certificate details for www.nixchallenge.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29pP5YCX5NJFmXV6VdyE
3OTeYDdB3Uo1a+T6nttn1QxMoy7DfPcyEqLW92gfLtIHa+xBV9SN4xAnTSz46O1g
/l+MA5eR+8zzkZbaOPz8RoB8sFzu2uWit4zlvFxeYQNHd9pBsDHsvWnDjGgBHqhf
G5wz1/5SDRtkIxdsLbSKp5Q9Tg2KE+350zmf3pAfEmHcWtGLHKg4HWXA0o+1CNXU
oopzbA4jwBO3tQyj9bwEu/CG++B+nY2IXZPKLt6GSjXV5zahpIA/QYajmvM8NFq+
hotoaVrBL2ogekxhMRKFiHY6iqjT9YCLsrr1TXl2LlwoPkpB+u6nDsZ4g+iKprMc
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12768556900590771568138059537711240515
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nixchallenge.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27753842494253986639795873696388560543054693577610972978785242049556590174747493581275799048477340034387676678778603876355149070818166072349228267028131485370740028447378296334712117152098950386803288786176328072004696676850216007382158316315791144074344605316084281560282094365014188291562408436598157053122405596564734451084664442855652872677251624201050900138366754335720125915216022910078359900828049885711955772593551767333340646035361008766822887597412646102599844771271565922945305291936791929338981104325511782310841902706881663186115309335697233037365679676923113268777276729260498366309416005235231989898489
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1b93ad593607eb8ee3560b11e911cf40ab3636a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nixchallenge.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nixchallenge.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016ad6c97f2000000403004730450220268e97242e929b58b96e55763e48e698509ccbfc8374785a30401543f7f567d5022100eec101b1917b3d71f1e9f62085ec4b4aca2d35f9708a511adbd1e7fdce4c187d0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016ad6c97ff5000004030046304402201ccf1afbbb47217bd35f6f73603d0b92c320c24116e63113ef7ed81967fa3c2902207f5a58c7409921f4729d4204c75ac111a9436dc31bffd9ffa84c229c8965cd08
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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