user-permissions.privacy.schibsted.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 04:b1:21:30:6a:8a:52:d5:2f:86:48:bb:26:30:24:15 was issued on by Amazon.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=user-permissions.privacy.schibsted.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:b1:21:30:6a:8a:52:d5:2f:86:48:bb:26:30:24:15
Serial Number (int): 6236621682541683142479304498072265749
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 66:fc:4f:22:21:f6:e9:a9:27:c4:36:64:ae:38:5f:d4:5d:53:4b:b1
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 92:bd:15:b3:8f:9e:db:90:c0:5c:bc:f4:4b:a7:4f:99:55:8f:0a:ec
Fingerprint (sha256): 01:5a:a6:14:4a:f2:94:92:63:fb:e8:3b:22:fb:79:b9:34:53:f5:3f:45:09:b5:45:12:18:b0:24:41:79:19:9a

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate user-permissions.privacy.schibsted.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for user-permissions.privacy.schibsted.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

user-permissions.privacy.schibsted.com
user-permissions.smp.schibsted.com
user-permissions-dev.api.schibsted.media
user-permissions.api.schibsted.media
user-permissions.schibsted.lol

Other certificates including the domain name schibsted.com

(limited to 100 certificates)
statuspage.io
session-service.login.schibsted.com
events.schibsted.com
statuspage.io
statuspage.io
cis-static.schibsted.com
statuspage.io
support.schibsted.com
session-service.identity-pre.schibsted.com
phpmyadmin.identity-dev.schibsted.com
futurereport.schibsted.com
create.schibsted.com
*.schibsted.com
cis.schibsted.com
pjgrowth.schibsted.com
user-permissions.privacy.schibsted.com
statuspage.io
phpmyadmin.identity-dev.schibsted.com
api.identity-pre.schibsted.com
identity-pre.schibsted.com
yams.schibsted.com
dev.privacy.schibsted.com
selfservice.identity-pre.schibsted.com
jssdk.privacy.pre.schibsted.com
researchtools.schibsted.com
*.pre.privacy.schibsted.com
futurereport.schibsted.com
statuspage.io
howwecare.schibsted.com
Schibsted ASA
api.identity-dev.schibsted.com
trainee.schibsted.com
api.ptx.schibsted.com
selfservice.identity-dev.schibsted.com
login.schibsted.com
tls.automattic.com
statuspage.io
statuspage.io
dev.schibsted.com
statuspage.io
*.smp.schibsted.com
statuspage.io
*.schibsted.com
id.aboutme.schibsted.com
selfservice.login.schibsted.com
statuspage.io
jssdk.privacy.pre.schibsted.com
futurereport.schibsted.com
www.schibsted.com
gsuite.schibsted.com
aboutme.schibsted.com
selfservice.identity-dev.schibsted.com
id.adressa.no
create.schibsted.com
statuspage.io
buzz.schibsted.com
linkerd.identity-dev.schibsted.com
events.schibsted.com
ptx.schibsted.com
statuspage.io
oauth.identity-pre.schibsted.com
id.morgenlevering.no
statuspage.io
statuspage.io
statuspage.io
selfservice.identity-pre.schibsted.com
22.session-service.identity-pre.schibsted.com
sms.schibsted.com
secondhandeffect.schibsted.com
ambassador.login.schibsted.dk
futurereport.schibsted.com
statuspage.io
account.schibsted.com
login.schibsted.com
api.privacy.schibsted.com
5wmkqllc4b7n7j3ctvpmnihbwca.distribusjon-pro-1.eks.schibsted.io
statuspage.io
kudos.schibsted.com
api.privacy.schibsted.com
statuspage.io
statuspage.io
*.pre.privacy.schibsted.com
selfservice.login.schibsted.com
id.dev.sdk-example.com
statuspage.io
identity-dev.schibsted.com
statuspage.io
unleash.login.schibsted.com
aboutme.schibsted.com
aboutme.schibsted.com
*.schibsted.com
profiles.schibsted.com
statuspage.io
example-app.identity-dev.schibsted.com
*.login.schibsted.com
distributionauth.distribution.schibsted.com
id.dev.sdk-example.com
statuspage.io
dev.privacy.schibsted.com
tableau.schibsted.com

Certificate

The complete raw certificate details for user-permissions.privacy.schibsted.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtb9erHdjcsf9BqOUrS1l
X4xPKjxibCj6lTjf/i3fvdHvHrcqaLODWMF9Vofkx3ETWsh53Fz/bo9AoNe7sQDi
e3ZqLf0bcGASWSrpaQkvngVtU1GYTv4+GXYxAltQK0K3w5fe63Vq25GghmmB8VC3
xwCcJhl8OtsaiFsNcJlwk3XEk88lUV+ntclwf+CmSr6yMU79fEdi6MwkOQaImkgY
E/7sc4gob3XDt4itJg7BeN7MIx+6nlFauyfsaX7348eDQ7dSU6nQxae5CN9nqKrq
NDinRglZ6S4J1L2KdFJmDHVPQL9rOaC/nSsAjFQThgxeSmDATTEhnzDDiTP5hy2l
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6236621682541683142479304498072265749
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'user-permissions.privacy.schibsted.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22943501173811134030969150004501874825240943700587150048245036489528341974686250524865358459734228404011034358506393631918802720605469327548654051490571318233207035053608927170634016851936534056133127037513076374453314650450198200413294348305321505998818606561138047756182214803930383598348736970634605336111645975631421835201279430203980359821532088831596290394114903864717653515775055283838513082918426985158344721906662100395053930926220536536208093179579548464736047686172699655496315565211835187301563546251018725662057602260150639878750314337866295644536577027605860213526439578490024079600582101236829890913661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							66fc4f2221f6e9a927c43664ae385fd45d534bb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (191 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-permissions.privacy.schibsted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-permissions.smp.schibsted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-permissions-dev.api.schibsted.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-permissions.api.schibsted.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'user-permissions.schibsted.lol'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0020352869ab7c314daa233af52c90bdb011231c7551ae864ab66a75a7fe713d0172eb298b29dc9653d3bfddf2959665f5c69001ebf77fa8b95f9d64fd5743c882f6462f9025306be00cfd0912ec2175a9f462e054333f69d59ebe54bf5270c12e52d109f14900ccdfd69976e35827ddbde65bb96fc08cea955882364aacccebfc475c9567ef2ea14c96a39728fb40b2a65e62549c6b1029b8f5fb36d0e82f58fc3d5b9e18fa34ca1c23184a592731af2e92c6b26449b6b460581fb3a73260c8b1a1397d55d7132a86e769c2bbb3515d51b7f36052c5d423dd02b602461faa1088da8359d7a23997208e17827553f905a807c3b72ec56e638f873378e49c0b287b