keyassets.timeincuk.net

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0c:45:73:66:72:e8:2b:09:cd:08:52:3b:5d:0e:8e:06 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=keyassets.timeincuk.net

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:45:73:66:72:e8:2b:09:cd:08:52:3b:5d:0e:8e:06
Serial Number (int): 16311345026596855130613018299254869510
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 10:a8:d0:64:bc:f7:38:b4:79:05:1c:39:1c:02:0b:ce:bf:a8:ac:6e
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 86:03:05:26:99:33:53:03:91:2b:cf:af:42:47:96:94:87:a6:27:b6
Fingerprint (sha256): 06:51:f8:55:99:3e:a4:cc:41:21:a6:2a:d0:07:88:a6:81:29:49:56:3c:02:15:33:27:df:be:b0:1f:09:63:76

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate keyassets.timeincuk.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for keyassets.timeincuk.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

keyassets.timeincuk.net

Other certificates including the domain name timeincuk.net

(limited to 100 certificates)
timeincuk.net
keystone.wp.timeincuk.net
ksassets.timeincuk.net
keyassets.timeincuk.net
campaign.ipcdigital.co.uk
keyassets-p2.timeincuk.net
*.ti-media.net
*.amateurgardening.com
wadeassets.timeincuk.net
keystone.ti-media.net
ti-media.map.fastly.net
keystone.ti-media.net
blogs.internal.timeincuk.net
ti-media.map.fastly.net
timeincuk.net
wadeassets.timeincuk.net
timeincuk.net
blogs.internal.timeincuk.net
ti-media.map.fastly.net
keystone.ti-media.net
keystone.wp.timeincuk.net
ti-media.map.fastly.net
cms2.ipcmediasecure.com
timeincuk.net
ksassets.timeincuk.net
keyassets-p2.timeincuk.net
keyassets.timeincuk.net
ksassets-preprod.timeincuk.net
ksassets.timeincuk.net
keystone.ti-media.net
*.amateurgardening.com
keystone.wp.timeincuk.net
timeincuk.net
campaign.ipcdigital.co.uk
keystone.ti-media.net
ksassets-preprod.timeincuk.net
cms2.ipcmediasecure.com
ti-media.map.fastly.net
*.ti-media.net
ti-media.map.fastly.net
campaign.ipcdigital.co.uk
wade.timeincuk.net
marieclaire.ipcmediasecure.com
ti-media.map.fastly.net
timeincuk.net
keystone.wp.timeincuk.net
secure.tablet.timeincuk.net
campaign.ipcdigital.co.uk
blogs.internal.timeincuk.net
assets.timeincuk.net
*.ti-media.net
ti-media.map.fastly.net
ti-media.map.fastly.net
ti-media.map.fastly.net
keystone.wp.timeincuk.net
timeincuk.net
ti-media.map.fastly.net
marieclaire.ipcmediasecure.com
keystone.wp.timeincuk.net
assets.timeincuk.net
keystone.wp.timeincuk.net
wade.timeincuk.net
ksassets.timeincuk.net
campaign.ipcdigital.co.uk
ksassets.timeincuk.net
keystone.wp.timeincuk.net
keystone.ti-media.net
keystone.ti-media.net
keystone.wp.timeincuk.net
campaign.ipcdigital.co.uk
*.timeincuk.net
marieclaire.ipcmediasecure.com
ti-media.map.fastly.net
campaign.ipcdigital.co.uk
keyassets-p2.timeincuk.net
campaign.ipcdigital.co.uk
keyassets-p1.timeincuk.net
assets.timeincuk.net
internal.timeincuk.net
marieclaire.ipcmediasecure.com
wpe.timeincuk.net
*.ti-media.net
*.amateurgardening.com
ti-media.map.fastly.net
timeincuk.net
*.amateurgardening.com
campaign.ipcdigital.co.uk
keyassets-p2.timeincuk.net
campaign.ipcdigital.co.uk
internal.timeincuk.net
marieclaire.ipcmediasecure.com
internal.timeincuk.net
keyassets.timeincuk.net
marieclaire.ipcmediasecure.com
ti-media.map.fastly.net
keystone.wp.timeincuk.net
ti-media.map.fastly.net
keyassets.timeincuk.net
timeincuk.net
timeincuk.net

Certificate

The complete raw certificate details for keyassets.timeincuk.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUj56HVvfklT9UY9dGfo
gbtU0epi2kvEltXH8LoSLY7Hnrak/GDelULNmCqTwD6d1apLV3cU8hfo+mzTHRGQ
Nn3orgL0IJdq3BAsSnXEkzHIDbUp+BjawYauNcE9QFTO+GmjqYr962HtsqQCj9HD
2GfaiFpVPRgOAkY4Gw/IY+sjkfeU2iTPIG1rH+aEh415OhqFH7IZ/HuqNDGhRrh0
lwn8GHx3DLajKMsfbJhEDOlB9qn+8hxth+49VisqcSMzRFVp3l8FBuj3m02UmRIB
xro3QQq6F0KykMttD7WhbxEhdtJoJJLkmbldW5uRmRXXJxUpjTidaN5BAavDEPeC
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16311345026596855130613018299254869510
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'keyassets.timeincuk.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22885119105911423934821373095245936749157219875298014858121828298624707989500476862473736279247069924067292359093603858697198235464282897979036303046242206809286911560944889396820659473125408037043561403879299778502261455423655658358178020288694705933729428763134299995302419257662751839788325164063599349311912007641605609486075123344162411289578921044755708774131603469724232350069409947804621980293640179212208993047351305899471562290638634303208412482676706864554552094250725542253539043562831851219148159403858111980245831791717596696038289090621171486858819438753278814508971071088338532638653727799900890432241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							10a8d064bcf738b479051c391c020bcebfa8ac6e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keyassets.timeincuk.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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