*.flock.co
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 06:b6:ad:d8:c1:8a:7c:0e:37:26:f9:f1:4e:0a:11:ce was issued on by Amazon.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.flock.co
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:b6:ad:d8:c1:8a:7c:0e:37:26:f9:f1:4e:0a:11:ceSerial Number (int): 8923892033005393180194504267491054030
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 55:a9:96:03:c6:b7:86:17:1f:c5:ab:b1:1b:7a:74:d4:d9:9b:46:02
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): ed:4f:aa:0d:6b:46:06:7b:48:bb:7f:29:0e:e4:d9:ac:b5:0c:6c:75
Fingerprint (sha256): f5:70:ab:48:70:bd:0c:0a:9b:3f:84:4b:ca:dd:4a:54:6a:d7:39:15:dc:3c:18:28:69:a4:07:46:8d:26:1f:f8
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate *.flock.co
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.flock.co
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.flock.co
*.talk.to
*.go.to
*.talk.to
*.go.to
Other certificates including the domain name flock.co
(limited to 100 certificates)
*.ops.flock.co
*.flock.co
*.flock.co
logs.service.flock.co
*.flock.co
blog.flock.co
*.flock.co
apigateway.flock.co
*.flock.co
*.flock.co
*.flock.co
*.flock.co
*.flock.com
*.handler.talk.to
*.flock.com
dev.flock.co
*.flock.co
*.flock.co
logs.service.flock.co
*.flock.co
logs.service.flock.co
*.flock.co
*.flock.co
*.flock.co
*.flock.com
flock.co
*.flock.com
*.flock.com
apigateway.flock.co
*.flock.co
apigateway.flock.co
apigateway.flock.co
*.flock.co
*.flock.co
*.flock.co
apigateway.flock.co
*.flock.co
*.flock.com
*.flock.com
*.flock.co
*.flock.co
*.flock.co
*.flock.co
*.flock.co
*.flock.co
logs.service.flock.co
*.flock.co
*.flock.co
*.flock.co
apigateway.flock.co
*.flock.co
*.flock.co
*.flock.co
admin.flock.co
*.flock.co
*.flock.co
*.apps.flock.co
*.flock.co
*.flock.com
*.flock.co
*.flock.co
*.flock.com
*.flock.co
*.flock.com
blog.flock.co
*.flock.com
*.flock.co
*.flock.com
*.flock.co
*.flock.co
apigateway.flock.co
*.flock.com
*.handler.talk.to
*.flock.co
logs.service.flock.co
*.flock.co
*.flock.co
*.flock.co
apigateway.flock.co
*.flock.co
*.flock.co
*.flock.com
*.flock.co
*.flock.com
*.flock.co
logs.service.flock.co
*.flock.co
*.flock.co
logs.service.flock.co
*.flock.co
blog.flock.co
*.flock.co
apigateway.flock.co
*.flock.co
*.flock.co
*.flock.co
*.flock.co
*.flock.com
*.handler.talk.to
*.flock.com
dev.flock.co
*.flock.co
*.flock.co
logs.service.flock.co
*.flock.co
logs.service.flock.co
*.flock.co
*.flock.co
*.flock.co
*.flock.com
flock.co
*.flock.com
*.flock.com
apigateway.flock.co
*.flock.co
apigateway.flock.co
apigateway.flock.co
*.flock.co
*.flock.co
*.flock.co
apigateway.flock.co
*.flock.co
*.flock.com
*.flock.com
*.flock.co
*.flock.co
*.flock.co
*.flock.co
*.flock.co
*.flock.co
logs.service.flock.co
*.flock.co
*.flock.co
*.flock.co
apigateway.flock.co
*.flock.co
*.flock.co
*.flock.co
admin.flock.co
*.flock.co
*.flock.co
*.apps.flock.co
*.flock.co
*.flock.com
*.flock.co
*.flock.co
*.flock.com
*.flock.co
*.flock.com
blog.flock.co
*.flock.com
*.flock.co
*.flock.com
*.flock.co
*.flock.co
apigateway.flock.co
*.flock.com
*.handler.talk.to
*.flock.co
logs.service.flock.co
*.flock.co
*.flock.co
*.flock.co
apigateway.flock.co
*.flock.co
*.flock.co
*.flock.com
*.flock.co
*.flock.com
*.flock.co
logs.service.flock.co
Certificate
The complete raw certificate details for *.flock.co in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF1jCCBL6gAwIBAgIQBrat2MGKfA43JvnxTgoRzjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMDUxNjAwMDAwMFoXDTI0MDYxNDIzNTk1OVowFTET MBEGA1UEAwwKKi5mbG9jay5jbzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJ3hLyqsZD6JvtEVcQNHNMiUEv+42xT0WelWQs1a39Jqer7PxeEjabWK/fYj yGlkQJuJJdVA//cy5rv3lexhJsAu0c5d2+oGgjTIB+HwhqSKjaeFjPMLHy7SD4aN QOhn4oR3pYHsptkEsIqYDTE2StnGbT8erELNQ0VQlur4LFdGe81vOR+HUMZaBXZz COdY6BovRjTydzbUOgsJDTy7ddzpM+CPyNr2VnHb4lGy9CLTnbsMAzNcO3XUNGVQ dwsyxY0E/cVG8/EZC+5vnhoU8c4AIn6gTp8RPrFOC9mKKiqkGOljmIRWUusLFeEI AJNILuEHc9yOv2jHDcyweul5x80CAwEAAaOCAvkwggL1MB8GA1UdIwQYMBaAFMAx Us1aUMOCfHRxzsvpnPl664LiMB0GA1UdDgQWBBRVqZYDxreGFx/Fq7EbenTU2ZtG AjApBgNVHREEIjAgggoqLmZsb2NrLmNvggkqLnRhbGsudG+CByouZ28udG8wDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNV HR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAyLmFtYXpvbnRydXN0LmNvbS9y Mm0wMi5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0G CCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMi5hbWF6b250cnVzdC5jb20wNgYI KwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAy LmNlcjAMBgNVHRMBAf8EAjAAMIIBgAYKKwYBBAHWeQIEAgSCAXAEggFsAWoAdgDu zdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYgjExMoAAAEAwBHMEUC IEoZjwqEP/AklLV49PV+qM4NKfEUpsHQ2x9BWVKpXXXdAiEAvMIDCGV/cV2Y5qyb M5VSxWhbB5Oua618w5MP622lOwEAdwBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZ u7+rOdiEcwAAAYgjExLlAAAEAwBIMEYCIQCw/ZEEFq2CQsTu7xttqygEtNxhYATp F84F7fC9xv3DTgIhAItg7/i5UTq4X/Dnb1gvf4gu0VR1eX1Kw9yM6r6zZEPKAHcA 2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGIIxMSpgAABAMASDBG AiEA9K78rXP4JmA+OKrQqMEUhc9wJsLlKNjKQ7G1i0vPb0oCIQCtkz4EjstwTkYE EnuFf7NKljPdAxLVDdrq4iEy5ecyPjANBgkqhkiG9w0BAQsFAAOCAQEAUxLy4Ow1 kvOWHwzXA4WEIxnyBUH9PGcmKOgg8NrE9GZZ0HUdfPGVEiFK7TO2HhCxqtmnzvm7 ZKYJJI5fsnu1P4InyWbJmbUqBmdaYci1UkC8p8+63z50smLWvj/98xzY1P8NbaUh vNFjVJJ5tWxaN70oY8s8fkeo3zny4vgINxiKJQo98mtDCZVXkLp1T5s46oV3vCkG lhz97GiOVuxRg7XlyT7iWcrkSO1+Wsg58JAoCYRhvudjjFpR9F5SBh9sOsf8V4dg yxYs9mbZfxeiNIy/0/zvrqSuM2R4VB7oqQ1h+/iTAmzluKF7bdOy3Ug5A1NFiQi3 HSABaZ37jomPjw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneEvKqxkPom+0RVxA0c0 yJQS/7jbFPRZ6VZCzVrf0mp6vs/F4SNptYr99iPIaWRAm4kl1UD/9zLmu/eV7GEm wC7Rzl3b6gaCNMgH4fCGpIqNp4WM8wsfLtIPho1A6GfihHelgeym2QSwipgNMTZK 2cZtPx6sQs1DRVCW6vgsV0Z7zW85H4dQxloFdnMI51joGi9GNPJ3NtQ6CwkNPLt1 3Okz4I/I2vZWcdviUbL0ItOduwwDM1w7ddQ0ZVB3CzLFjQT9xUbz8RkL7m+eGhTx zgAifqBOnxE+sU4L2YoqKqQY6WOYhFZS6wsV4QgAk0gu4Qdz3I6/aMcNzLB66XnH zQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 8923892033005393180194504267491054030 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-16 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-14 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.flock.co' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19930456369438941698017178320799170307007857719997359512723416394864634921577637717895722934714423976854845273210178642227332098580446436305244892980172506487669221626583449362734490452967078584864395062105531081215410130090192357671535532158073774122980620295432389460380509288256541665731342354808354653616034374810657088656906321732238266772721584675688496471558934854466627611569908503877946493995482574464628280329666319653576929491902598250124411779891118661935498967198188025982837247861699007003931016730170793688959703974482777847612211429476770338368408715502341078302208919778127457835176106709092484630477 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 55a99603c6b786171fc5abb11b7a74d4d99b4602 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flock.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.talk.to' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.go.to' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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