*.streetiq.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 02:a3:48:51:de:c7:ac:e6:9b:b2:1e:fc:32:f6:58:3b was issued on by Amazon.

With 42 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.streetiq.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:a3:48:51:de:c7:ac:e6:9b:b2:1e:fc:32:f6:58:3b
Serial Number (int): 3506267199430700144387124986486609979
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 45:cf:19:24:23:16:f5:e2:d1:e9:09:bb:46:d3:3b:76:b0:a1:57:b3
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 4d:bf:de:45:87:a4:fe:c1:b5:b2:4e:3f:d6:b0:58:d8:93:23:5d:3f
Fingerprint (sha256): fb:38:aa:4b:00:54:0e:86:d8:7a:ce:41:bb:28:8f:86:8b:e9:ea:3b:09:b0:e8:18:d4:5e:ce:50:5d:e9:65:14

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate *.streetiq.com

42

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.streetiq.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.streetiq.com
pr.bcrnews.com
pr.nwherald.com
pr.saukvalley.com
pr.osceolaiowa.com
pr.midweeknews.com
pr.agrinews-pubs.com
pr.invweek.com
pr.cannanewsnetwork.com
pr.morrisherald-news.com
pr.kcchronicle.com
*.coinquote.io
pr.stylemg.com
pr.putnamcountyrecord.com
pr.walnutcreekmagazine.com
pr.goinvest.com
*.chinesewire.com
pr.newstrib.com
pr.hattiesburg.com
pr.theherald-news.com
pr.daily-chronicle.com
pr.bradfordvillebugle.com
pr.mysuburbanlife.com
pr.kendallcountynow.com
pr.oglecountynews.com
*.newenergywire.com
pr.newtondailynews.com
*.coinopinions.com
*.profitwire.com
pr.shawlocal.com
pr.crestonnews.com
pr.newsengine.io
pr.prairieadvocate.com
pr.thembnews.com
*.stocktwist.com
*.cannabisopinions.com
*.momentumwire.com
pr.boreal.org
pr.mywebtimes.com
*.egwire.com
pr.lakecountyjournal.com
pr.wealthandwellness.in

Other certificates including the domain name streetiq.com

(limited to 100 certificates)
*.streetiq.com
*.streetiq.com
*.streetiq.com
*.streetiq.com
*.streetiq.com
*.streetiq.com
*.streetiq.com
*.streetiq.com
*.streetiq.com

Certificate

The complete raw certificate details for *.streetiq.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RMUvotytZzxyvvs+o7f
sCykb5tcKX9v2mIHn2AbgJVGU1GImAM/3IOjJ7G3dywEdIH4+Sz20K5sKD0Q2Fci
DbNk6Ol9F8pkGqxUZI7rA9UtyRteuR5FkD9941gnXnGsbuNlhWlkiX6JIpO066kp
Z88TIhDhIIaO4vpbIkVR4htx8H6qR4wM2hXPmCRqzphRb6FBT7N+ZIxzlW/ONMAW
CWwIzNN2ggsVFUsaP0D/wfJDv5LzKiaH/X7DNiLkePpaqhOY1jHVRNQISrGH//VC
yJrt8vnFzQPIPR2PHWmtq7/6awUDIq4jne3dWaJFkh+If3787h0flzToVB1uId5C
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3506267199430700144387124986486609979
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.streetiq.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27908074605301646949134372014872553171963074351372650990189136421591767590833353893958210425432613991116517220484012793146969552120434866879550762154747200120518279399098744223693261550629380569967728785538493215370673782621760265050423380462294493019532183397063892210542414010882866421916144053511994817621629893440686647070450375487643110750640902844778632882085065868148035436972647650929104266403075611006748306023780445806530313857441505475539714135710376951879022106379866341116157790494000689979857316047411055731319164875072167615409392933109930225433519674536679152225158192312911107647572431366451623772713
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							45cf19242316f5e2d1e909bb46d33b76b0a157b3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (868 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.streetiq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.bcrnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.nwherald.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.saukvalley.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.osceolaiowa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.midweeknews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.agrinews-pubs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.invweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.cannanewsnetwork.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.morrisherald-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.kcchronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coinquote.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.stylemg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.putnamcountyrecord.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.walnutcreekmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.goinvest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chinesewire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.newstrib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.hattiesburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.theherald-news.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.daily-chronicle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.bradfordvillebugle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.mysuburbanlife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.kendallcountynow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.oglecountynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newenergywire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.newtondailynews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coinopinions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.profitwire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.shawlocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.crestonnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.newsengine.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.prairieadvocate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.thembnews.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stocktwist.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cannabisopinions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.momentumwire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.boreal.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.mywebtimes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.egwire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.lakecountyjournal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pr.wealthandwellness.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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