staging-userapi.huffingtonpost.com

- AOL Inc. -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:22:7b:ac was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

AOL Inc.

Organization: AOL Inc.
Organization unit: Huffington Post Media Group
State / Province: Virginia
Locality: Dulles
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:22:7b:ac
Serial Number (int): 1277328300
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 79:05:fc:29:cb:72:eb:62:56:f6:0c:b8:fe:c4:30:c7:64:37:9e:67
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): 21:73:8b:ef:16:0d:3d:96:8c:aa:d6:b0:1a:71:e1:61:40:fe:b7:a9
Fingerprint (sha256): 03:9b:74:79:69:19:44:74:b8:71:b0:e0:7d:71:35:e4:64:57:ed:ea:35:8a:ff:28:5c:97:84:d3:49:f0:7a:70

Issuing Certificate URL: http://aia.entrust.net/2048-l1csha2.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate staging-userapi.huffingtonpost.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for staging-userapi.huffingtonpost.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

testing-userapi.huffingtonpost.com
staging-userapi.huffingtonpost.com

Other certificates including the domain name huffingtonpost.com

(limited to 100 certificates)
qa5.add.my.aol.com
*.preview.www.huffpost.com
qa.mapi.huffpost.com
*.app-west.buzzfeed.io
*.aol.com
*.add.my.aol.com
pr.huffingtonpost.com
img.huffingtonpost.com
www.huffingtonpost.com
*.contributor.huffingtonpost.com
content.huffingtonpost.com
staging-userapi.huffingtonpost.com
img.staging.huffingtonpost.com
accounts.huffingtonpost.com
qa.mapi.huffpost.com
src5.yahoo.com
beta-origin-cambria-alb.huffpo.net
staging.www.huffingtonpost.com
*.aol.com
stage.guce.oath.com
production-kraken-valencia-preview.use1.huffpo.net
accounts.huffingtonpost.com
*.search.yahoo.com
secure.huffingtonpost.com
b.aol.com
*.aol.com
huffingtonpost.com
athena.huffingtonpost.com
huffingtonpost.com
src1.yahoo.com
*.search.yahoo.com
trunk.guce.oath.com
trunk.guce.oath.com
qa.preview.www.huffpost.com
staging.www.huffingtonpost.com
www.huffpost.com
huffingtonpost.com
accounts.huffingtonpost.com
ifthisartcouldvote.huffingtonpost.com
www.huffpost.com
dev.search.yahoo.com
origin-kraken.huffpo.net
beta-origin-cambria-alb.huffpo.net
*.search.yahoo.com
qa.preview.www.huffpost.com
www.huffingtonpost.com
stage.guce.oath.com
www.huffingtonpost.com
*.assets.huffingtonpost.com
origin-img.huffingtonpost.com
elections.huffingtonpost.com
src5.yahoo.com
src5.yahoo.com
*.aol.com
*.contributor.huffingtonpost.com
*.search.yahoo.com
*.prod.buzzfeed.io
ifthisartcouldvote.huffingtonpost.com
origin-kraken.huffpo.net
src5.yahoo.com
staging-athena-mongo-cms.huffpost.net
ifthisartcouldvote.huffingtonpost.com
news.huffingtonpost.com
*.assets.huffingtonpost.com
stage.guce.oath.com
*.prod.buzzfeed.io
content.staging.huffingtonpost.com
dev.search.yahoo.com
ifthisartcouldvote.huffingtonpost.com
*.search.yahoo.com
guce.oath.com
www.huffingtonpost.com
editorial.huffingtonpost.com
src1.yahoo.com
staging.www.huffingtonpost.com
qa.preview.www.huffpost.com
*.search.yahoo.com
editorial.huffingtonpost.com
*.stage.buzzfeed.io
src6.yahoo.com
accounts.huffingtonpost.com
*.prod.buzzfeed.io
*.stage.buzzfeed.io
src1.yahoo.com
src6.yahoo.com
*.preview.www.huffpost.com
staging.preview.www.huffpost.com
secure.huffingtonpost.com
secure.huffingtonpost.com
ifthisartcouldvote.huffingtonpost.com
*.app-west.buzzfeed.io
huffingtonpost.com
ws.huffingtonpost.com
qa.mapi.huffpost.com
secure.huffingtonpost.com
*.add.my.aol.com
preview.www.huffpost.com
origin-kraken.huffpo.net
trunk.guce.oath.com
sp.huffingtonpost.com

Certificate

The complete raw certificate details for staging-userapi.huffingtonpost.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MBpPX7WhHj8YZ5czeK3
uA2ScapezEsMGKonB82mRfWVfkNZSeJexZHbFS8h+Dn27Gkfe9CRX7jNVvKNpyD6
G651PRkjaK8r3nGug53xAq4GxlSs0tpJmgQYOoMEd0Jyyv1rQMewZ30/+63b//RZ
krF8EYc8keitk2eqCcgKXptEijuhjiQmJzk5zvmMJj6BryqmY7YWlO12so+aNdr7
ZlIQezueMhY13vOroLWz7BYPt7Z0s8KXAdCKLzO9v79jznAAPy2DtdnYR3P+2idZ
N9IlWEPOjORJkBWvMp+OqwmxDNcwr5Mkod/BIH20oRipocTNkZBAMdHt/tr1Wu9/
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1277328300
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-24 18:23:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-25 00:34:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dulles'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AOL Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Huffington Post Media Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staging-userapi.huffingtonpost.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26352448879965569862691021250724171671896721234990122471297653126164537472736368585707919948266387350257768513346782713440634483555110383832814268901407858913028479358193813865442629001986459873499407354243777225132294220084220303756021087256496503347367571101502769027152302960163930419647276972457496462832572232616055198162196722734701048313747282332819886957151217314439057501016419360411961275426659738141167905601813641163170614704729121798253532997341390830661765500930517958424308674055512125462468755737851556943734401710324755999733116969169955892069022148363478770942054898628780386673154848094806883663709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/2048-l1csha2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testing-userapi.huffingtonpost.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging-userapi.huffingtonpost.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7905fc29cb72eb6256f60cb8fec430c764379e67
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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