leads.glcdigitalmarketing.co.uk

Issued by Amazon

About this certificate

This digital certificate with serial number 03:4d:37:38:c5:22:9a:66:f1:9f:6b:f0:ae:8f:ae:af was issued on by Amazon.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=leads.glcdigitalmarketing.co.uk

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4d:37:38:c5:22:9a:66:f1:9f:6b:f0:ae:8f:ae:af
Serial Number (int): 4388610875777610542873378475834584751
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: cf:a8:68:91:67:ed:b5:72:4f:03:70:2e:81:0e:52:85:3f:ca:f3:15
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 90:53:f5:6c:1d:78:fe:f1:52:65:1d:18:3c:f5:e2:74:fa:a3:f5:be
Fingerprint (sha256): 07:c2:f2:a8:97:02:9c:64:fa:e6:0e:1b:25:f6:75:9b:74:8d:66:e9:f3:61:52:cc:d2:fe:90:66:7e:69:c6:96

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate leads.glcdigitalmarketing.co.uk

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for leads.glcdigitalmarketing.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

leads.glcdigitalmarketing.co.uk
leads.directresponsept.com
leads.dkm.agency
leads.topfiremedia.com
leads.idigitalstrategies.com
leads.etaktiker.com
leads.digitalshift.pro
leads.fullsail.media
leads.pplpractice.com
leads.clickvantage.com

Other certificates including the domain name glcdigitalmarketing.co.uk

(limited to 100 certificates)
funnels.glcdigitalmarketing.co.uk
*.glcdigitalmarketing.co.uk
leads.glcdigitalmarketing.co.uk
*.glcdigitalmarketing.co.uk
glcdigitalmarketing.co.uk
*.glcdigitalmarketing.co.uk
*.glcdigitalmarketing.co.uk
*.glcdigitalmarketing.co.uk
leads.glcdigitalmarketing.co.uk
glcdigitalmarketing.co.uk
*.glcdigitalmarketing.co.uk
leads.glcdigitalmarketing.co.uk
leads.glcdigitalmarketing.co.uk
*.glcdigitalmarketing.co.uk
*.glcdigitalmarketing.co.uk
glcdigitalmarketing.co.uk
*.glcdigitalmarketing.co.uk
*.glcdigitalmarketing.co.uk
glcdigitalmarketing.co.uk
dashboard.concentricmanagement.com
*.glcdigitalmarketing.co.uk
*.glcdigitalmarketing.co.uk
funnels.glcdigitalmarketing.co.uk
leads.glcdigitalmarketing.co.uk
dashboard.concentricmanagement.com
glcdigitalmarketing.co.uk
*.glcdigitalmarketing.co.uk
glcdigitalmarketing.co.uk
*.glcdigitalmarketing.co.uk
*.glcdigitalmarketing.co.uk
funnels.glcdigitalmarketing.co.uk
glcdigitalmarketing.co.uk
glcdigitalmarketing.co.uk
*.glcdigitalmarketing.co.uk
*.glcdigitalmarketing.co.uk
glcdigitalmarketing.co.uk
glcdigitalmarketing.co.uk
glcdigitalmarketing.co.uk

Certificate

The complete raw certificate details for leads.glcdigitalmarketing.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukklLA9F+Y0zFss30Gdc
SmLbnUDFifaIPs1yFG2b+oRP1h14mP9k/ByOl46tGB7INo7zzqK0NPFsfXLxTGwT
VdCCVsqiNWoaw6ENxUEtc61Sk/ZGeqArvVl5R6p/n1xIX1P7ltisNzWU5d4BgA75
pAy9GIy12gtauhrF8gtvogyYPgKp25VxYuhJQ80kwujquHhiTwn9khX61QzS4JWH
UHcuasogsIYbPG76S9vup+5jikWfBUWMDgJ4q6kfTbXVv65R5ZNMkUW5mNlNw2vR
Xku3HstSJNhf3SLYY93cUMVJ99AyROEDK/yn2eSUsSFhh+E3bjFjt54IfI8EzZYr
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4388610875777610542873378475834584751
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'leads.glcdigitalmarketing.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23516393967875110017389899036223673306864255677007782660017534349071469457330984475683342515492558879128540182512534552195454349373879516205739144791518787281921195371047866715537554745835873980655784060155363135037395416470832499410325992425800671639022035799421249406265237662761925747890581627196747008540014117835354225287767510435283783570994769197546977551677167155446641882219539288869742455808260391508227781739405933766186863465574250162787081182922249149058779782931722813615755106113344727997105455555186044537320912860414980858310925814992308742771573577491948732606301703833286789073865509029504099953541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cfa8689167edb5724f03702e810e52853fcaf315
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (250 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.glcdigitalmarketing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.directresponsept.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.dkm.agency'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.topfiremedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.idigitalstrategies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.etaktiker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.digitalshift.pro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.fullsail.media'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.pplpractice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leads.clickvantage.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016d5e917cfa000004030046304402203c3e69d404f2189eeafdf55f65d98c97bcbb36c2157f7b9cb9a69847577b96d6022074c9e6b7c7258b6d6156fe9222dfbc8413087b7efe6d15ef77f2da466cc824240076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016d5e917d44000004030047304502201274bc1048cb9dc648826546e7150fa86c5c76275ad3069c11aa106ede684d5702210099e8e886e3ebc809d7715aebdabca321857a6524ffeef2ed670fb19ad630aea0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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