mollerauto.lv

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0c:12:f3:5c:d5:26:e7:d3:02:11:d0:00:0a:ca:b5:84 was issued on by Amazon.

With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mollerauto.lv

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:12:f3:5c:d5:26:e7:d3:02:11:d0:00:0a:ca:b5:84
Serial Number (int): 16049133273364597072552838394452555140
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 9e:a9:6b:27:36:f2:1a:1b:c6:f1:74:cd:14:6e:18:c4:9f:64:cb:25
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): ec:06:0c:41:74:b3:8a:29:c9:5e:5b:57:8a:dc:64:4a:9f:2a:49:bc
Fingerprint (sha256): ed:b9:88:81:83:11:4a:56:e8:e2:08:9b:d4:bf:33:0c:d3:69:30:f5:16:1a:fa:b8:a1:2e:3e:90:9b:7e:bc:d8

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate mollerauto.lv

38

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mollerauto.lv

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mollerauto.lv
*.ionto.de
*.moonclimbing.magento2e.com
*.santehnikasparadize.eu
*.jysk.ee
sueda.de
*.saudi.pharmaciaty.com
*.pharmaciaty.com
jysk.ee
*.mollerauto.lt
santehnikasparadize.eu
*.weekendshoes.lv
moonclimbing.magento2e.com
*.mollerauto.lv
mollerauto.ee
*.weekendshoes.lt
paardendrogist.nl
printerbase.co.uk
*.jalatsipood.ee
weekendshoes.ee
*.caremore.de
*.printerbase.co.uk
jysk.lv
weekendshoes.lv
weekendshoes.lt
*.jysk.lv
*.mollerauto.ee
*.jysk.lt
*.weekendshoes.ee
caremore.de
*.sueda.de
ionto.de
*.paardendrogist.nl
jysk.lt
pharmaciaty.com
buy.hyundai.com.qa
mollerauto.lt
jalatsipood.ee

Other certificates including the domain name mollerauto.lv

(limited to 100 certificates)
www.mollerauto.lv
booking.moller.no
www.mollerauto.lv
lidosta.mollerauto.lv
mollerauto.lv
www.mollerauto.lv
sni.cloudflaressl.com
www.mollerauto.lv
mollerauto.lv
lidosta.mollerauto.lv
kasutatudautod.mollerauto.ee
www.mollerauto.lv
www.mollerauto.lv
www.mollerauto.lv
lidosta.mollerauto.lv
www.mollerauto.lv
mollerauto.lv
mollerauto.lv
tradein.mollerauto.lv
kasutatudautod.mollerauto.ee
www.mollerauto.lv
www.mollerauto.lv
mollerauto.lv
www.mollerauto.lv
www.mollerauto.lv
lidosta.mollerauto.lv
mollerauto.lv
www.mollerauto.lv
mollerauto.lv
kasutatudautod.mollerauto.ee
kasutatudautod.mollerauto.ee
mollerauto.lv
mollerauto.lv
lidosta.mollerauto.lv
lidosta.mollerauto.lv
lidosta.mollerauto.lv
www.mollerauto.lv
www.mollerauto.lv
booking.moller.no
www.mollerauto.lv
mollerauto.lv
mollerauto.lv
mollerauto.lv
lidosta.mollerauto.lv
mollerauto.lv

Certificate

The complete raw certificate details for mollerauto.lv in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQSs+poID1sI9ftPIHie
u54h1iMnvpd6wgkvahM/UMWIUvhx3O05Js4vD8cWDvYTdDg3hrXqrmuVH2O59POd
VnOBxa/Bk9VwOZP8Rtm+TEoBGX1Wqkg5lFpsgMCxbf/AWJfdyYdtw64gmH3DCIIz
eyhwZkm/4Vcf8N3HnMkp2lqLA+o7PdE8XSganOuORQOcRv6vcjQ/bu1mQnIjQO5M
JbfO5w0j2WPzcke8o2DcnTkJyXTZ3M7ubyR65L29OQjMg1JAQU5HBmBxg72SnT1K
EYZzY71DvzAUiURXInlO7sgFnwc57Bt6HKbj/CicGdJSPSSE2WmEnqEBJrJ3bHFd
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16049133273364597072552838394452555140
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mollerauto.lv'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22851438871907090835488985677097581951769219656042382297267291810313319374396374607812060841502266529216219160276996501261016727857163977117361608505326972113872626785404089248361997232980223273107377026064440098324102161620925191164017092947693075612292996465336105139302823468189240279424400759793385186453339639780952051582905586989374758590911973329364815881599770930388635767450835528296105306545588921892481542260816565226568813159967684132091771326128947415943049059920237684268989959471418856047667184517426571765411434727023546970592632079580664884539520843231297870641774867162690136349250103024119744388587
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9ea96b2736f21a1bc6f174cd146e18c49f64cb25
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (643 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mollerauto.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ionto.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.moonclimbing.magento2e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santehnikasparadize.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jysk.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sueda.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.saudi.pharmaciaty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pharmaciaty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jysk.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mollerauto.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santehnikasparadize.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weekendshoes.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moonclimbing.magento2e.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mollerauto.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mollerauto.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weekendshoes.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paardendrogist.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'printerbase.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jalatsipood.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weekendshoes.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.caremore.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.printerbase.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jysk.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weekendshoes.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weekendshoes.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jysk.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mollerauto.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jysk.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weekendshoes.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caremore.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sueda.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ionto.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.paardendrogist.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jysk.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharmaciaty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy.hyundai.com.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mollerauto.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jalatsipood.ee'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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