football.expedia.co.uk

Issued by Amazon

About this certificate

This digital certificate with serial number 06:4c:07:35:f9:7e:a0:16:c1:f5:dd:34:69:08:71:5a was issued on by Amazon.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=football.expedia.co.uk

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:4c:07:35:f9:7e:a0:16:c1:f5:dd:34:69:08:71:5a
Serial Number (int): 8370128789132829052122334560403353946
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 98:70:b4:aa:e1:fb:e7:83:a0:d2:bb:60:44:8c:0b:56:76:c5:a0:3e
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 83:e3:3c:79:61:b9:a6:92:22:64:5b:fc:6c:ba:4c:69:97:36:dc:69
Fingerprint (sha256): 06:8c:03:1a:06:27:b8:03:82:72:0c:c5:0d:ce:1a:bc:7a:ae:68:13:87:c0:7c:81:f4:7c:ba:82:87:dc:21:7e

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate football.expedia.co.uk

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for football.expedia.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

football.expedia.co.uk
football.expedia.de
*.lfc.expedia.pulselive.com
*.withyoualltheway.expedia.es
*.withyoualltheway.expedia.fr
*.football.expedia.co.uk
withyoualltheway.expedia.de
*.withyoualltheway.expedia.it
withyoualltheway.expedia.it
withyoualltheway.expedia.fr
*.football.expedia.fr
*.withyoualltheway.expedia.de
*.football.expedia.de
withyoualltheway.expedia.es
football.expedia.fr
*.withyoualltheway.expedia.co.uk
withyoualltheway.expedia.co.uk

Other certificates including the domain name expedia.co.uk

(limited to 100 certificates)
www.expedia.com
*.hotelplanner.com
movie-quote-phrasebook.expedia.co.uk
vc.expedia.co.uk
movie-quote-phrasebook.expedia.co.uk
inside.expedia.co.uk
discoverbudapest.expedia.co.uk
christmas-past.expedia.co.uk
www.visitscotland.expedia.co.uk
*.hotelplanner.com
trains.expedia.co.uk
www.expedia.com
www.muchmorocco.expedia.co.uk
*.hotelplanner.com
*.hotelplanner.com
vc.expedia.co.uk
www.expedia.com
football.expedia.co.uk
Hollandtripbuilder.expedia.de
bcexplorer.expedia.com.au
www.expedia.com
playlister.expedia.co.uk
www.expedia.com
*.hotelplanner.com
worldofmusic.expedia.co.uk
photography.expedia.co.uk
access.expedia.com
www.expedia.com
jurawhisky.expedia.co.uk
w.expedia.co.uk
*.hotelplanner.com
discoverthemagicdubai.expedia.co.uk
www.expedia.com
movie-quote-phrasebook.expedia.co.uk
www.expedia.com
groups.expedia.co.uk
groups.expedia.co.uk
www.expedia.com
w.expedia.co.uk
Jerusalem.expedia.co.uk
accent-map.expedia.co.uk
www.helpinghand.expedia.co.uk
ww.expedia.co.uk
photography.expedia.co.uk
*.hotelplanner.com
myrealstockholm.expedia.co.uk
blog.expedia.co.uk
apim.expedia.com
roadtrips.expedia.co.uk
www.expedia.com
photography.expedia.co.uk
*.hotelplanner.com
visitscotland.expedia.co.uk
www.expedia.com
w.expedia.co.uk
*.hotelplanner.com
discoveriberostar.expedia.co.uk
christmas-past.expedia.co.uk
www.expedia.com
www.expedia.com
www.expedia.com
language-of-love.expedia.co.uk
*.hotelplanner.com
*.hotelplanner.com
www.expedia.com
language-of-love.expedia.co.uk
www.expedia.com
www.discoverireland.expedia.co.uk
photography.expedia.co.uk
m.expedia.co.uk
trains.expedia.co.uk
w.expedia.co.uk
visitcopenhagen.expedia.co.uk
access.expedia.com
*.hotelplanner.com
myrealstockholm.expedia.co.uk
www.visitscotland.expedia.co.uk
christmas-past.expedia.co.uk
www.expedia.com
inside.expedia.co.uk
*.hotelplanner.com
thingstodo.expedia.co.uk
blog.expedia.co.uk
*.hotelplanner.com
apim.expedia.com
christmas-past.expedia.co.uk
city-history.expedia.co.uk
london-street-food.expedia.co.uk
groups.expedia.co.uk
soundtravels.expedia.co.uk
photography.expedia.co.uk
*.hotelplanner.com
www.expedia.com
myrealstockholm.expedia.co.uk
holidayplanner.expedia.co.uk
city-history.expedia.co.uk
*.hotelplanner.com
welcomevideo.expedia.co.uk
blog.expedia.co.uk
christmas-past.expedia.co.uk

Certificate

The complete raw certificate details for football.expedia.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1gswPzfXung6H2q70ziV
BAkr3t9NaNH915k25VVqNvxbaho2raLMkcZMK7SDsL7KkyLdA57iilzZVHGa4fpu
UH6bczJtABpABhc1URnI469q2kt9dexHuyelPuj7HEW8t973Wr/F8bKS3z/F7a8F
It+g0PBuRIld2unTgMhxLutHBGinokqXyfK0xbDBSfT0UWeebI/D3tx77kxFOCtg
mZ6mLpEMY2u6JuH/2dEtaiTBkGomy7mJIghu2miwDOepJ3mGvAoDjEUa8B9twg6T
sAgBSV7XA2JIzTJtCc7yMosJl7xeFz8F6Fslmw8QPX0aAJV5wVp3Up7dTw1cCWT7
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8370128789132829052122334560403353946
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'football.expedia.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27020514500276939464335891490993603660451039837186903128272380884622987701687731330539287389770771040034498966327534934474834150009477414053429432210900200259174660830864671256627105909735331683410975362309796727109275809432927851788943023013033508036611557694897656993091534138330938625743613642048736710118602789806139832359567441532479166054872387068536208752882373940676827482278312189690900743689370503455162403790873490394954756948714336374312952140475457213135238184998556718937235679320755363644058089062570438441161667490234179373446824523239124991018075000446988203487112663989771205720835852229018973961133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9870b4aae1fbe783a0d2bb60448c0b5676c5a03e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (477 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'football.expedia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'football.expedia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lfc.expedia.pulselive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.withyoualltheway.expedia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.withyoualltheway.expedia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.football.expedia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'withyoualltheway.expedia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.withyoualltheway.expedia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'withyoualltheway.expedia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'withyoualltheway.expedia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.football.expedia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.withyoualltheway.expedia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.football.expedia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'withyoualltheway.expedia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'football.expedia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.withyoualltheway.expedia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'withyoualltheway.expedia.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0043da38a83f7975bab0fb8e0b9cf67c35a29f65f131d8d34e12bb31b131b4945da94352b387a43f33bebc5a41bed8fab04b53623e8ce50d36805a19419ec93f39461dbe3db2e00f36275f11e8ea49f449209b05a614ce919e2b097f28bff25f50d7e8ed7c6bf8eef6bb6662acf87ef4bec210a5d6c4a8c0693c134614eb37f1b4a8e76902ae414f2e1740d377e07dad18fdb93dfe944eec1e76c6bfb05f3f85a27aea04df60a49e58a33ee0f2fc1eaa556ad04643ffec4c731533ae1e474091fdbdf03a887134a031ab7692a392db9ff13328fd5c5409d8605ea8b92c7cc9346fa5f6fe6b8d8e678a535342ebc778ad3283e59a60e3325cdc4dfe38d5659c3507