ie.api.atom.nowtv.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0c:1b:21:ff:b8:ae:0b:16:52:68:ca:7c:a9:93:24:2a was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ie.api.atom.nowtv.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:1b:21:ff:b8:ae:0b:16:52:68:ca:7c:a9:93:24:2a
Serial Number (int): 16091617544453439720884422792176673834
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7a:7c:0e:a5:7b:1f:94:70:8e:39:45:47:45:00:67:f3:58:dd:6e:76
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): ee:f3:c8:00:9d:5b:4f:4f:18:89:ac:02:10:fa:92:24:12:85:9c:6d
Fingerprint (sha256): 03:b7:11:76:92:d0:36:eb:15:ec:7e:6b:c0:00:d3:5c:39:7f:6f:d5:7d:cd:46:f1:1e:1d:e8:10:c5:41:bc:d8

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate ie.api.atom.nowtv.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ie.api.atom.nowtv.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ie.api.atom.nowtv.com
api.atom.nowtv.com
cms.atom.nowtv.com

Other certificates including the domain name nowtv.com

(limited to 100 certificates)
secure03.stage.lithium.com
skyidapp.sky.com
www.nowtv.com
crosstv.nowtv.com
secure03.stage.lithium.com
secure03.stage.lithium.com
search.nowtv.com
chromecast.nowtv.com
www.stage.nowtv.com
www.nowtv.com
uiapi.id.int.nowtv.it
services.stage.nowtv.com
secure03.stage.lithium.com
ie.api.atom.nowtv.com
crmg-local.nowtv.com
geekzone.nowtv.com
www.stage.nowtv.com

help.nowtv.com
roku.int.nowtv.com
staging.ott.sky.com
stg1.skyidapp.sky.com
secure03.stage.lithium.com
api.nowtv.com
secure03.stage.lithium.com
uc18.janrainengage.com
ie.api.stage2.atom.nowtv.com
secure03.stage.lithium.com
slo.skyidappintl.sky.com
*.api.stage.nowtv.com
id.nowtv.com
secure03.stage.lithium.com
skyidapp.sky.com
slo.skyidappintl.sky.com
www.stage.nowtv.com
www.stage.nowtv.com
ie.api.atom.nowtv.com
click.messaging.nowtv.com
www.stage.nowtv.com
services.nowtv.com
secure03.stage.lithium.com
ott.sky.com
*.api.nowtv.com
uiapi.id.int.nowtv.it
secure03.stage.lithium.com
uc18.janrainengage.com
slo.skyidappintl.sky.com
secure03.stage.lithium.com
ie.api.stage1.atom.nowtv.com
secure03.stage.lithium.com

www.stage.nowtv.com
www.nowtv.com
my.nowtv.com
uiapi.id.int.nowtv.it
staging.ott.sky.com
crmg.nowtv.com
secure03.stage.lithium.com
www.nowtv.com
onebrief.nowtv.com
stage-mcs-gatekeeper.sky.com
services.stage.nowtv.com
secure03.stage.lithium.com

secure03.stage.lithium.com
community.nowtv.com
interest.sky.com
staging.ott.sky.com
secure03.stage.lithium.com
secure03.stage.lithium.com
nowtv.com
nowtv.com
cms.stage1.atom.nowtv.com
device.nowtv.com
api.atom.nowtv.com
slo.skyidappintl.sky.com
www.stage.nowtv.com
signup.nowtv.com
*.api.nowtv.com
skyidapp.sky.com
www.stage.nowtv.com
secure03.stage.lithium.com
ott.sky.com
cks-thirdparty.ovp.stable-int.nowtv.com
www.nowtv.com
webstatic.stage.nowtv.com
watch.stage.nowtv.com
*.stage.nowtv.com
www.stage.nowtv.com
secure03.stage.lithium.com
api.stage1.atom.nowtv.com

www.nowtv.com
uc18.janrainengage.com
www.nowtv.com
www.stage.nowtv.com
uiapi.id.int.nowtv.it
secure03.stage.lithium.com
services.nowtv.com
ott.sky.com

Certificate

The complete raw certificate details for ie.api.atom.nowtv.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjLhYSRvD1/X79sfSFKJ
yJ5+exyJikCA4dfMjcni4AVi3C/EDQEsYdljZpCjHyRWf057P+wazt2eIE2HrcJJ
o9Q5MYtQSlLtKozRJ+TW21N1XyWlzLOPoZTOaRdKjinNSTv0b2ROgWF1SPXHIVDO
bGh5Sk7gGoKvFE+/saTYgeqU1Re7AjsoEHdx/9H9Bg/eXl1i4OplYcaWYDKVvFTm
fAqC0P3kdfEovUX3y0xa/030TLo0iFr/JIFn9CRm8yRjCW9rrnsvSaql9rYMu60F
UJsrUwkCJqKLC6yXIMNmnqa49CsRXzBqf3/Rx387xb+Ot3T6Gj5TXJlFLTC6t52o
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16091617544453439720884422792176673834
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ie.api.atom.nowtv.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24010367998251548474484455073285788314089873523252239440576918987899380603382672054077656347968195370426513251370124028570726172282639088552279677594198532501812240742997011212478775340367495217573170299516612955092015525550656855833008444103130080422419827982837014620589721354953173093878128620653047783775321338587627550201437377243167746851625603705670935644592259790266523915673707388113202588247788097564090440285184484658020241454969074791808339985793469551897387095590094483109680750300521602022619150109223122451179647622089937346700228890241344603229571391925595355992041708961930939279808005071609733687453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7a7c0ea57b1f94708e394547450067f358dd6e76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ie.api.atom.nowtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.atom.nowtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.atom.nowtv.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001864cc82874000004030048304602210082452414ce4f6e8612db36b248545f6ecbe9ff5a2b3fe3119791b39e3626aaf6022100bf4317103c0fa437030d828a9ba35cadc802abef87e90f6bf0f092e3a3f01ad700770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001864cc828b20000040300483046022100c9f238ffe3f35505fb752048182fb2eb196bc6663857d5f7f21b86ccd2fe853d02210094f77803d7226fb7f328975e6107468e0603e9ab28278a29d2d0e18ebad1d9be0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad417000001864cc828ae000004030046304402201ae41a9760ea3a9cfe91973b4669de6ba4c3ed41d91f730dc3604ceeb21f615d02202af799d36066badda57416ce75f1d37f5f184156c638ee49fbcc0b84363c71f3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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