jwplayer.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:05:ba:c0:fd:0c:98:cc:bb:75:8d:ca:84:51:aa:5e was issued on by Amazon.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jwplayer.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:05:ba:c0:fd:0c:98:cc:bb:75:8d:ca:84:51:aa:5e
Serial Number (int): 18638941243589914479232347193346206302
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a0:6e:4a:c3:ed:14:ec:49:33:25:02:b4:26:1e:c4:8c:ed:8a:f1:11
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): af:c7:ae:9a:6e:4e:79:2c:92:32:e9:db:52:0c:44:3b:59:21:92:40
Fingerprint (sha256): 08:a0:94:e4:92:82:f8:a3:9d:0a:87:a6:76:46:04:8c:0c:ec:6c:eb:a1:41:75:8b:8e:43:16:8c:43:d9:62:8d

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate jwplayer.com

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jwplayer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jwplayer.com
videoplayerbidding.com
jwplatform.com
openvideoads.co.uk
*.jwplayer.com
jwshowcase.com
*.jeroenwijering.com
longtailvideo.com
*.videoplayerbidding.com
bitsontherun.com
openvideoads.com
*.longtailvideo.com
jwstation.com
*.jwstation.com
jeroenwijering.com
*.bitsontherun.com
*.openvideoads.com
*.jwplatform.com
*.jwshowcase.com
*.openvideoads.co.uk

Other certificates including the domain name jwplayer.com

(limited to 100 certificates)
statuspage.io
vicksot.com
statuspage.io
statuspage.io
statuspage.io
a3.shared.global.fastly.net
jwplayer.com
appstatus.dancecapsules.merce.broadleafclients.com
a3.shared.global.fastly.net
jwplayer.com
statuspage.io
appstatus.dancecapsules.merce.broadleafclients.com
www.wekick.app
appstatus.dancecapsules.merce.broadleafclients.com
releases.jwplayer.com
yuiki.jp
info.jwplayer.com
a3.shared.global.fastly.net
status.affirm.com
a3.shared.global.fastly.net
support.jwplayer.com
developer.jwplayer.com
beta-developer.jwplayer.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
supportfeedback.jwplayer.com
*.jwplayer.com
statuspage.io
*.jwplayer.com
hivebloom.com
jwplayer.com
intellocator.com
jwplayer.map.fastly.net
a3.shared.global.fastly.net
statuspage.io
developer.jwplayer.com
statuspage.io
info.jwplayer.com
statuspage.io
statuspage.io
statuspage.io
grimtictac.co.za
appstatus.dancecapsules.merce.broadleafclients.com
a3.shared.global.fastly.net
appstatus.dancecapsules.merce.broadleafclients.com
statuspage.io
a3.shared.global.fastly.net
jwplatform.com
api.test.boost.jwplayer.com
statuspage.io
statuspage.io
jwplayer.com
a3.shared.global.fastly.net
hook-dev.jwplayer.com
hook-dev.jwplayer.com
statuspage.io
jwplayer.com
appstatus.dancecapsules.merce.broadleafclients.com
a3.shared.global.fastly.net
a3.shared.global.fastly.net
yofardev.fr
a3.shared.global.fastly.net
newenanalytics.uy
statuspage.io
jwplayer.com
jwplayer.com
blucubemedia.com
a3.shared.global.fastly.net
arteycreaciones.com.co
statuspage.io
a3.shared.global.fastly.net
demos.jwplayer.com
api.test.boost.jwplayer.com
api.test.boost.jwplayer.com
statuspage.io
statuspage.io
lockdown.gaborcs.com
releases.jwplayer.com
a3.shared.global.fastly.net
statuspage.io
appstatus.dancecapsules.merce.broadleafclients.com
signatures.jwplayer.com
statuspage.io
statuspage.io
demos.jwplayer.com
releases.jwplayer.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
a3.shared.global.fastly.net
appstatus.dancecapsules.merce.broadleafclients.com
sl.jwplayer.com
statuspage.io
statuspage.io
statuspage.io
a3.shared.global.fastly.net

Certificate

The complete raw certificate details for jwplayer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtx8gZShdcagQQsJxlmJ5
hFTTKaOa1jx+Pzx7kK7E4mWYmbO3t/8S/Ekyj39QB0+S/Wre1P86GlVVBR22I3v/
dL6uh2cf1bNKAdnOP6BDuKa8lbGUMjGBEPt4c5gg1UZ86f+bJMPiEJw7u3NIRZ89
erIQKXI1nqAQgyDmA276TgyWE+nbOwFc0jcHZacExO99TK4QQvpOI92pNRFVznTz
IqI45r7vTbf+cJ9gCaEFZAcmJ+r7umRVgyNec32zwkvXm+INzKlFXw2fYRo9xXti
MNWZdb0rKvVwhSKb8tHScVIHcWujfTklFF4Pzt0MMtcPvqjB+d5UoYy1aqdJfCPL
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18638941243589914479232347193346206302
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jwplayer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23116958879477794445272420249058180339744154028478685198214630173796675449889957684951633986677132806998021285810135625102415520939719432260661521869657918805416582066650301338719774401956254476161453097952135174863616752039831509961856289783748609657510534743866127011335204635357375787080402595094627425960024440590545453833957391647023269020084287011948805565008325378234882234293823810270514538677393023431571153625728009977219655363953499268309884815641666301426666262082181163288596704665355063160022628071005027198078498218625021946971614458491526107410396671693775542899899857967818857481021715925720992303967
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a06e4ac3ed14ec49332502b4261ec48ced8af111
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (384 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jwplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videoplayerbidding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jwplatform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openvideoads.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jwplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jwshowcase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jeroenwijering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longtailvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.videoplayerbidding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitsontherun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openvideoads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.longtailvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jwstation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jwstation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeroenwijering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitsontherun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.openvideoads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jwplatform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jwshowcase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.openvideoads.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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