abonnement.clubbrugge.be

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 08:44:94:89:38:c8:b2:d9:52:a6:90:fc:b3:73:14:c9 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=abonnement.clubbrugge.be

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:44:94:89:38:c8:b2:d9:52:a6:90:fc:b3:73:14:c9
Serial Number (int): 10989912821113090467458796188951844041
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 51:2d:6e:44:54:ac:c6:ed:61:c2:02:9e:19:d3:b4:50:f1:8a:8f:a2
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 47:c2:e0:eb:9f:47:58:1e:07:b3:e8:d0:d3:56:b1:0c:e2:7c:f9:62
Fingerprint (sha256): 08:c9:a3:b3:09:d0:85:67:45:45:b8:81:99:05:dc:41:d7:55:a9:e5:ff:3c:00:24:cf:6f:57:41:de:bf:d2:ba

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate abonnement.clubbrugge.be

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for abonnement.clubbrugge.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abonnement.clubbrugge.be
*.abonnement.clubbrugge.be

Other certificates including the domain name clubbrugge.be

(limited to 100 certificates)
thelegends.clubbrugge.be
scouting.clubbrugge.be
soccerlab.clubbrugge.be
abonnement.clubbrugge.be
clubbrugge.be
printzpl.uat.apoyar.eu
printzpl.uat.apoyar.eu
sso.clubbrugge.be
bluvngoan.clubbrugge.be
clubbrugge.be
printzpl.uat.apoyar.eu
bluvngoan.clubbrugge.be
app.clubbrugge.be
www.clubbrugge.be
printzpl.uat.apoyar.eu
*.admin.ticketweb.ca
printzpl.uat.apoyar.eu
bluvngoan.clubbrugge.be
*.tickets.clubbrugge.be
printzpl.uat.apoyar.eu
live.tickets4.biz
*.clubbrugge.be
ticketmaster7.map.fastly.net
sso.clubbrugge.be
highlights.clubbrugge.be
*.admin.ticketweb.ca
clubbrugge.be
shop.clubbrugge.be
printzpl.uat.apoyar.eu
printzpl.uat.apoyar.eu
live.tickets4.biz
sports.clubbrugge.be
sso.clubbrugge.be
aereturns.ariat.com
facebook.clubbrugge.be
*.admin.ticketweb.ca
live.tickets4.biz
ticketmaster7.map.fastly.net
my.clubbrugge.be
ticketmaster7.map.fastly.net
clubbrugge.be
my.clubbrugge.be
sso.clubbrugge.be
*.admin.ticketweb.ca
shop.clubbrugge.be
bluvngoan.clubbrugge.be
printzpl.uat.apoyar.eu
*.clubbrugge.be
printzpl.uat.apoyar.eu
highlights.clubbrugge.be
sso.clubbrugge.be
campaign.clubbrugge.be
aereturns.ariat.com
bluvngoan.clubbrugge.be
sso.clubbrugge.be
ticketmaster7.map.fastly.net
sso.clubbrugge.be
facebook.clubbrugge.be
live.tickets4.biz
app.clubbrugge.be
printzpl.uat.apoyar.eu
*.clubbrugge.be
stadion.clubbrugge.be
scouting.clubbrugge.be
scouting.clubbrugge.be
printzpl.uat.apoyar.eu
ticketmaster7.map.fastly.net
staging-my.clubbrugge.be
staging-my.clubbrugge.be
clubbrugge.be
bluvngoan.clubbrugge.be
*.clubbrugge.be
aereturns.ariat.com
poty.clubbrugge.be
tickets.clubbrugge.be
scouting.clubbrugge.be
my.clubbrugge.be
bluvngoan.clubbrugge.be
ticketmaster7.map.fastly.net
printzpl.uat.apoyar.eu
clubbrugge.be
bluvngoan.clubbrugge.be
printzpl.uat.apoyar.eu
live.tickets4.biz
aereturns.ariat.com
printzpl.uat.apoyar.eu
my.clubbrugge.be
printzpl.uat.apoyar.eu
*.tickets.clubbrugge.be
scouting.clubbrugge.be
clubid.clubbrugge.be
ipo.clubbrugge.be
aereturns.ariat.com
ticketmaster7.map.fastly.net
bluvngoan.clubbrugge.be
bluvngoan.clubbrugge.be
bluvngoan.clubbrugge.be
printzpl.uat.apoyar.eu
staging-my.clubbrugge.be
tickets.clubbrugge.be

Certificate

The complete raw certificate details for abonnement.clubbrugge.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9aUupfFrLZBy9zUxtZP
zG1siAsK20tLlFa7T9P3oooA819g+xM7niKzh1+lriU31h/vVoBxoSB6k7DOjZ1/
/9Z0AXxxCsuzQElAGrUaT4mZwCECIahvCImSXDeFWr/GiXn6JtW7+/AovNAQZpOG
M6oBscWsR2L8JzzPq1HgXg2N00U/+unBUf/9Az1DFefXrw+pqaQxqb2W9uswmDIO
yMyJskeN8DZ1eFgLyRZCzqUHqAGNQwlaYo4mqxPPJo5ANfCkpscdfAj3JegN/Vl9
TJy5ZQC0xc4KaLVz+bz0372ro4G8JkMiWk/CVc6UPZVEnyossgYPxgI7bBuw3ZVs
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10989912821113090467458796188951844041
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'abonnement.clubbrugge.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21692563970313641579250975827501051700311801222209303115049031284362132031018223190825146614812557553567873278187329210143292553005477305675063710329986327518995637268085729086528569250296214046780493039933487112409684312152570646214081693386127267176488430262988745713823715188603906990682752505035111475870595581553448582732897887564974960057844300946127195551975103688246190280720527871929218010465858768642069469303489398883559728532753355907540937235756654379092801871496964770893377908549018789751665118036825050201819388343364326954816098086237470725403576573711560714822479489632158972072794482958998999231523
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							512d6e4454acc6ed61c2029e19d3b450f18a8fa2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abonnement.clubbrugge.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abonnement.clubbrugge.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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