r626.womanandhome.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 06:46:5e:9e:a7:1c:c4:f0:88:79:80:4e:5e:15:27:62 was issued on by Amazon.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=r626.womanandhome.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:46:5e:9e:a7:1c:c4:f0:88:79:80:4e:5e:15:27:62
Serial Number (int): 8340747871078130266202256496391432034
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: db:53:19:d4:2b:e9:0c:2c:18:32:74:e6:60:65:8f:97:76:74:8c:2f
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 5c:64:a0:05:d4:8d:e6:e5:85:d6:f5:cc:1f:d6:d9:de:0d:4f:03:92
Fingerprint (sha256): 08:63:59:ab:61:49:2f:c6:46:b7:86:47:22:16:cc:97:60:6e:95:88:73:f3:ef:b4:91:11:c2:b6:1d:9b:d8:49

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate r626.womanandhome.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for r626.womanandhome.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

r626.womanandhome.com
u989.theweek.com
h198.moneyweek.com
k503.theweekjunior.com
t075.itpro.co.uk
d096.theweek.co.uk
g314.kiplinger.com
r080.itpro.com

Other certificates including the domain name womanandhome.com

(limited to 100 certificates)
dns-vetting1m.map.fastly.net
cms2.ipcmediasecure.com
magazinesdirect.com
keystone.wp.timeincuk.net
campaign.ipcdigital.co.uk
competitions.womanandhome.com
try.womanandhome.com
competitions.womanandhome.com
dating.womanandhome.com
campaign.ipcdigital.co.uk
r626.womanandhome.com
dns-vetting1m.map.fastly.net
dns-vetting1m.map.fastly.net
*.ti-media.net
*.amateurgardening.com
try.womanandhome.com
keystone.ti-media.net
ti-media.map.fastly.net
keystone.ti-media.net
www.womanandhome.com
forums-secure.ybw.com
competitions.womanandhome.com
dating.womanandhome.com
dns-vetting1m.map.fastly.net
ti-media.map.fastly.net
keystone.ti-media.net
competitions.womanandhome.com
keystone.wp.timeincuk.net
magazinesdirect.com
cms2.ipcmediasecure.com
cms2.ipcmediasecure.com
dating.womanandhome.com
competitions.womanandhome.com
dns-vetting1m.map.fastly.net
keystone.ti-media.net
dating.womanandhome.com
cms2.ipcmediasecure.com
dns-vetting1m.map.fastly.net
cms2.ipcmediasecure.com
competitions.womanandhome.com
dating.womanandhome.com
subscription.womanandhome.com
comps.womanmagazine.co.uk
*.amateurgardening.com
keystone.wp.timeincuk.net
dns-vetting1m.map.fastly.net
campaign.ipcdigital.co.uk
keystone.ti-media.net
cms2.ipcmediasecure.com
dns-vetting1m.map.fastly.net
cms2.ipcmediasecure.com
ti-media.map.fastly.net
*.ti-media.net
ti-media.map.fastly.net
campaign.ipcdigital.co.uk
dns-vetting1m.map.fastly.net
dns-vetting1m.map.fastly.net
marieclaire.ipcmediasecure.com
www.womanandhome.com
dating.womanandhome.com
cms2.ipcmediasecure.com
dns-vetting1m.map.fastly.net
dating.womanandhome.com
dns-vetting1m.map.fastly.net
ti-media.map.fastly.net
dns-vetting1m.map.fastly.net
campaign.ipcdigital.co.uk
dating.womanandhome.com
forums.golf-monthly.co.uk
comps.womanmagazine.co.uk
campaign.ipcdigital.co.uk
dating.womanandhome.com
www.magazinesdirect.com
magazinesdirect.com
dating.womanandhome.com
magazinesdirect.com
*.ti-media.net
ti-media.map.fastly.net
dating.womanandhome.com
dating.womanandhome.com
womanandhome.com
ti-media.map.fastly.net
ti-media.map.fastly.net
dns-vetting1m.map.fastly.net
magazinesdirect.com
keystone.wp.timeincuk.net
hairhappy.womanandhome.com
dns-vetting1m.map.fastly.net
www.womanandhome.com
ti-media.map.fastly.net
www.womanandhome.com
comps.womanmagazine.co.uk
www.magazinesdirect.com
keystone.wp.timeincuk.net
competitions.womanandhome.com
www.womanandhome.com
keystone.wp.timeincuk.net
campaign.ipcdigital.co.uk
campaign.ipcdigital.co.uk
forums.golf-monthly.co.uk

Certificate

The complete raw certificate details for r626.womanandhome.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIvix6KfzR9qUGZY2rqY
irCu99aLL1p3L4A4FOD0USgzn74YiuKw309CNOCCDpsVuM9GcFIgYkaDwgZft00J
hRnTss2VpbuWfKdkczp6K+gpHghSQ2O+teC1TsZh8N676d22aUe0m075aYfSq4jt
K1UauEsREyIvgGaLkxhzIcwwuIVxcYE3SxSCtzR6SiSQJR2jNxOCTKjinSwVIdPI
BUwk1mriw26uWC/hxUWInmNBYB2YCD8rmd9wpSmOY2EXSHQuORSs7ECYivpbwXIX
PNvlmJRXz8B1HFYT20IQo9ylbjxtEDzNAn9I7sSVKo+ofgg41pkUPWYxOSEoBE4H
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8340747871078130266202256496391432034
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'r626.womanandhome.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22791875181742203256333838980293104896971990345042878302737509061016133002435754815362487346256159218105345019667103152927044207094684431530886899416877928393147725550494030634830784084341467340824152872338091881579331557652229975164856010161141664254359369991647494886946995019106193489093999302663116094543259076806656569007970740666523000112430920155109350436666316696246531894729931315986625051884971660691265996595117326979307566868374035910262706124119966376050581926007981138328859445941433711514252515648215461810198542170362408739624323523283346051678220735230770856389946546670124706597539605806273247709097
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							db5319d42be90c2c183274e660658f9776748c2f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (162 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r626.womanandhome.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u989.theweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h198.moneyweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'k503.theweekjunior.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't075.itpro.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd096.theweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g314.kiplinger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r080.itpro.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00080a68ddc1ea1fdcc0a62bb7877d393c599cfa894716d21d2841b7b3a71c8eeeba6f62338a999b2ec35e5222ca728f3dd988a3e2ba4bba75e2bd50404f8f7972103604a6825601e0b82ae6c79f90b5ebccb825568211b46a19b9945d994934ffd6bdf73bf3768f6d9f68e74726ce894874d9bda84c291f07e895e84929e3e07802037c0795235551652d0a10d582ba6b91275694b866e7e9e2953b5dddd36fa19521f6456acef2fc42805a55d9881fb599d5c6989ee501a150aa6aa3c1d268a7473bf6711fb093381292a7d9811a18a9993cb2f30c5d93c99c747aabc4c562869d636642aead126c146ce0cc740d639e925ec42ae8bbe53d873c85d07619c582