boring-cabbage.tfdev.typeform.tf

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0f:bb:ab:4b:94:ae:20:eb:60:b2:c6:f0:e6:fd:99:81 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=boring-cabbage.tfdev.typeform.tf

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:bb:ab:4b:94:ae:20:eb:60:b2:c6:f0:e6:fd:99:81
Serial Number (int): 20912853729488453869412298323058858369
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 5c:24:88:ef:0d:36:8d:3b:73:1b:16:8b:5c:2e:a3:c6:41:00:98:5c
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 20:3d:a2:1f:d0:f5:53:86:4b:5b:93:9a:74:a3:64:c7:4d:52:02:9e
Fingerprint (sha256): f4:39:ee:24:2e:e1:69:fc:8c:64:d2:4c:21:26:c1:22:b6:2e:23:0b:eb:20:59:09:6b:ab:3f:06:7c:9f:8f:b5

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate boring-cabbage.tfdev.typeform.tf

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for boring-cabbage.tfdev.typeform.tf

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

boring-cabbage.tfdev.typeform.tf
*.boring-cabbage.tfdev.typeform.tf

Other certificates including the domain name typeform.tf

(limited to 100 certificates)
bright-potato.tfdev.typeform.tf
legal-spinach.internal.tfdev.typeform.tf
aloof-okra.tfdev.typeform.tf
responsible-watermelon.tfdev.typeform.tf
red-nectarine.internal.tfdev.typeform.tf
old-peaches.internal.tfdev.typeform.tf
brilliant-eggplant.internal.tfdev.typeform.tf
selfish-avocado.internal.tfdev.typeform.tf
obese-leeks.internal.tfdev.typeform.tf
exciting-papaya.internal.tfdev.typeform.tf
busy-persimmon.internal.tfdev.typeform.tf
alert-carrot.tfdev.typeform.tf
cheap-watermelon.tfdev.typeform.tf
foolish-beets.tfdev.typeform.tf
thin-parsnip.tfdev.typeform.tf
alert-mandarin.tfdev.typeform.tf
precious-watermelon.tfdev.typeform.tf
tenacious-apple.tfdev.typeform.tf
tender-crookneck.internal.tfdev.typeform.tf
comfortable-banana.tfdev.typeform.tf
youthful-carambola.tfdev.typeform.tf
depressed-crookneck.internal.tfdev.typeform.tf
great-arugula.internal.tfdev.typeform.tf
wide-frog.tfdev.typeform.tf
delicious-radishes.internal.tfdev.typeform.tf
batwing-frog.tfdev.typeform.tf
juicy-apple.tfdev.typeform.tf
belligerent-figs.internal.tfdev.typeform.tf
macho-cauliflower.tfdev.typeform.tf
thoughtful-fennel.tfdev.typeform.tf
obese-olives.internal.tfdev.typeform.tf
abiding-horseradish.tfdev.typeform.tf
cruel-turnip.tfdev.typeform.tf
colorful-cranberries.internal.tfdev.typeform.tf
afraid-radicchio.internal.tfdev.typeform.tf
shy-olives.internal.tfdev.typeform.tf
terrific-asparagus.internal.tfdev.typeform.tf
cheerful-arugula.internal.tfdev.typeform.tf
aloof-okra.internal.tfdev.typeform.tf
healthy-asparagus.tfdev.typeform.tf
victorious-fennel.internal.tfdev.typeform.tf
tasty-feijoa.tfdev.typeform.tf
romantic-apricot.internal.tfdev.typeform.tf
ancient-frog.internal.tfdev.typeform.tf
comfortable-artichoke.tfdev.typeform.tf
witty-grapefruit.tfdev.typeform.tf
great-arugula.tfdev.typeform.tf
narrow-collards.tfdev.typeform.tf
young-peas.internal.tfdev.typeform.tf
ugly-quince.tfdev.typeform.tf
*.typeform.tf
jolly-pumpkin.internal.tfdev.typeform.tf
red-broccoli.tfdev.typeform.tf
bitter-cauliflower.internal.tfdev.typeform.tf
basic-beets.internal.tfdev.typeform.tf
tenacious-apple.internal.tfdev.typeform.tf
noisy-turnip.internal.tfdev.typeform.tf
selfish-peas.internal.tfdev.typeform.tf
abeyant-pumpkin.internal.tfdev.typeform.tf
best-shallots.tfdev.typeform.tf
honest-nectarine.internal.tfdev.typeform.tf
light-shallots.internal.tfdev.typeform.tf
cautious-grapefruit.internal.tfdev.typeform.tf
upset-pumpkin.tfdev.typeform.tf
untidy-arugula.tfdev.typeform.tf
abeyant-pumpkin.tfdev.typeform.tf
battleful-spinach.internal.tfdev.typeform.tf
beneficial-cauliflower.tfdev.typeform.tf
delicate-guava.internal.tfdev.typeform.tf
awesome-pumpkin.internal.tfdev.typeform.tf
abeyant-cabbage.tfdev.typeform.tf
rare-pumpkin.tfdev.typeform.tf
thorough-pomegranate.internal.tfdev.typeform.tf
clean-spinach.internal.tfdev.typeform.tf
old-leeks.tfdev.typeform.tf
violent-apricot.tfdev.typeform.tf
spiritual-pear.tfdev.typeform.tf
generous-lime.tfdev.typeform.tf
untidy-daikon.internal.tfdev.typeform.tf
hungry-mushrooms.internal.tfdev.typeform.tf
terrific-watermelon.tfdev.typeform.tf
new-asparagus.internal.tfdev.typeform.tf
ignorant-cabbage.tfdev.typeform.tf
little-pomelo.tfdev.typeform.tf
ambitious-artichoke.internal.tfdev.typeform.tf
juvenile-cranberries.internal.tfdev.typeform.tf
educated-nectarine.tfdev.typeform.tf
glamorous-potato.internal.tfdev.typeform.tf
quick-mandarin.internal.tfdev.typeform.tf
polite-pomelo.tfdev.typeform.tf
abiding-lemon.internal.tfdev.typeform.tf
grateful-pomegranate.internal.tfdev.typeform.tf
macho-persimmon.internal.tfdev.typeform.tf
web-team.tfdev.typeform.tf
dainty-cauliflower.internal.tfdev.typeform.tf
dauntless-feijoa.tfdev.typeform.tf
faithful-turnip.tfdev.typeform.tf
fearful-cucumber.tfdev.typeform.tf
pink-jackfruit.internal.tfdev.typeform.tf
damaged-asparagus.tfdev.typeform.tf

Certificate

The complete raw certificate details for boring-cabbage.tfdev.typeform.tf in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9qDoApbDPAJ17fPP1hB
t+Ig0eIpWjIQMfqj6dGB2rX1hecFpEgULlFxPJhkssgKm0xJGHD7kDxK4tf/4YEP
47txibbd0UBeRSJ+cyu5UOpk4cPwLJV5yj7K3UpHl9d1LCJmWCpTmyX+ALhKCMxD
sCr3PmZRCMs6C/kyWW+U/g38LNcoWx+cBiD5bBa9sdz4BIK3oO9Y7sgotSllK8Eq
/W6wXsC7U++VRjUSER5m0ZGf5xECoMB0B7bGRlCjUKUXzM8B2GEy+I5DKKsM2x31
LeDb3s0rKARJHtKZtXnEKBlO9u7MtqpYQgOzSiO7Rr1T6KPWvytHbXoKUMtOG1oZ
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20912853729488453869412298323058858369
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'boring-cabbage.tfdev.typeform.tf'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19674690618438801011882921741041711964132117382946448034347848259148249001903897026719531338855139273604663776292064593297524928801659371454487291520151485338617805534731960787285419437334368749507935447169588219275851755747447141399958510564966342635297222222074993576870662453973030231571502225502241447084004379840420356647730508010579720855399299657626339046448560571343879384653754157069513340705138050916759959240001978114010967030983274813979296114676325568618617810242576527642571111714998841620651436654763310208506810833120711764121545827001284945176663215813236729517892072874793751088128068326819741964743
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5c2488ef0d368d3b731b168b5c2ea3c64100985c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boring-cabbage.tfdev.typeform.tf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.boring-cabbage.tfdev.typeform.tf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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