*.flock.co

Issued by Amazon

About this certificate

This digital certificate with serial number 01:f9:b3:e3:75:28:c9:3f:3b:20:d8:d0:20:01:41:bf was issued on by Amazon.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.flock.co

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:f9:b3:e3:75:28:c9:3f:3b:20:d8:d0:20:01:41:bf
Serial Number (int): 2625758485931085883368956224784646591
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 7c:05:83:41:91:9e:ad:dd:2c:84:b4:bc:6f:d2:12:6e:fa:70:7a:f9
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 4c:59:24:cd:2e:01:94:a8:9a:62:b2:28:fd:fd:04:89:75:73:2a:0d
Fingerprint (sha256): f7:ac:2d:5d:14:fd:39:f2:fb:0d:0f:06:20:d8:f3:c2:64:b8:18:9b:cd:16:c1:31:1b:99:15:3f:09:d9:58:ef

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate *.flock.co

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.flock.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.flock.co
talk.to
*.talk.to
flock.co
*.go.to
go.to

Other certificates including the domain name flock.co

(limited to 100 certificates)
*.ops.flock.co
*.flock.co
*.flock.co
logs.service.flock.co
*.flock.co
blog.flock.co
*.flock.co
apigateway.flock.co
*.flock.co
*.flock.co
*.flock.co
*.flock.co
*.flock.com
*.handler.talk.to
*.flock.com
dev.flock.co
*.flock.co
*.flock.co
logs.service.flock.co
*.flock.co
logs.service.flock.co
*.flock.co
*.flock.co
*.flock.co
*.flock.com
flock.co
*.flock.com
*.flock.com
apigateway.flock.co
*.flock.co
apigateway.flock.co
apigateway.flock.co
*.flock.co
*.flock.co
*.flock.co
apigateway.flock.co
*.flock.co
*.flock.com
*.flock.com
*.flock.co
*.flock.co
*.flock.co
*.flock.co
*.flock.co
*.flock.co
logs.service.flock.co
*.flock.co
*.flock.co
*.flock.co
apigateway.flock.co
*.flock.co
*.flock.co
*.flock.co
admin.flock.co
*.flock.co
*.flock.co
*.apps.flock.co
*.flock.co
*.flock.com
*.flock.co
*.flock.co
*.flock.com
*.flock.co
*.flock.com
blog.flock.co
*.flock.com
*.flock.co
*.flock.com
*.flock.co
*.flock.co
apigateway.flock.co
*.flock.com
*.handler.talk.to
*.flock.co
logs.service.flock.co
*.flock.co
*.flock.co
*.flock.co
apigateway.flock.co
*.flock.co
*.flock.co
*.flock.com
*.flock.co
*.flock.com
*.flock.co
logs.service.flock.co

Certificate

The complete raw certificate details for *.flock.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFRoRvbf59Rw2voedma1
NiOOCqsRPYt/tl821Vrp1BB9I1lGABDQBadtb36lk/3WV6vypupvcfBRqY0qo2jA
wz16npaYMiFRqwEUicCMIiMCjmqNbJvsyK9ihSy5s0g1Ox15gf6IcyRyaVsaac1t
4qAXvdI+D0w1dEd9WcNCWWrCG2T7uyDJqFMWGJVb0EnWOZuFnQg9yMTQOvvkHLg6
EjxXjhB61bC14gVa2qwZmLmSQLbI4huXOimfndTP/JBTr1kgwfqmgsku6IRWwJON
/oqnqSjn/tKR3dRBSJNO+f5DJ7D6Bvtwb2DlPkbZouDiS6m1chT6qDsSG04dQBc3
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2625758485931085883368956224784646591
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.flock.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17714985502369999777574325305920804713277092736577991644381638523020528529722917990427888629503859546926839441589175420604090889466400287267821124670059433238540843165816531019648857445548703113273621649345217232507726730986201126674540324951166634964213403011638801242402286071734115193443749840905444277193123161849683374137451217629021517276176473338731184599859019076784989136549390189125037591081472624113183024074502761931465318895542435630475137275875947297676462092158260807173132961422755677233975052893326168970485880343696577318018097020073114934049516196754955552393375508624328512469073049770847299385091
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7c058341919eaddd2c84b4bc6fd2126efa707af9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flock.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talk.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.talk.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flock.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.go.to'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.to'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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