*.login.schibsted.com

Issued by Amazon

About this certificate

This digital certificate with serial number 08:3d:c2:ca:ad:23:48:d2:fb:14:f1:d8:64:49:4d:50 was issued on by Amazon.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.login.schibsted.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:3d:c2:ca:ad:23:48:d2:fb:14:f1:d8:64:49:4d:50
Serial Number (int): 10954504919785450779103838939667582288
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 38:fd:f5:12:23:80:91:15:72:c3:6e:b7:14:24:60:3a:17:1d:d2:d5
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 49:01:16:1a:03:5f:5f:1c:7c:95:a9:e1:74:e5:4a:49:45:af:a9:cb
Fingerprint (sha256): 09:5c:0d:3a:28:23:fd:ee:8c:71:23:2c:09:69:d2:05:d0:f5:09:cc:f6:c3:d1:f0:62:62:61:7c:76:66:e3:e9

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.login.schibsted.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.login.schibsted.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.login.schibsted.com
ambassador.schibsted.com
login.schibsted.com
login.schibsted.fi
*.payment.schibsted.no
*.login.schibsted.fi
payment.schibsted.no

Other certificates including the domain name schibsted.com

(limited to 100 certificates)
statuspage.io
session-service.login.schibsted.com
events.schibsted.com
statuspage.io
statuspage.io
cis-static.schibsted.com
statuspage.io
support.schibsted.com
session-service.identity-pre.schibsted.com
phpmyadmin.identity-dev.schibsted.com
futurereport.schibsted.com
create.schibsted.com
*.schibsted.com
cis.schibsted.com
pjgrowth.schibsted.com
user-permissions.privacy.schibsted.com
statuspage.io
phpmyadmin.identity-dev.schibsted.com
api.identity-pre.schibsted.com
identity-pre.schibsted.com
yams.schibsted.com
dev.privacy.schibsted.com
selfservice.identity-pre.schibsted.com
jssdk.privacy.pre.schibsted.com
researchtools.schibsted.com
*.pre.privacy.schibsted.com
futurereport.schibsted.com
statuspage.io
howwecare.schibsted.com
Schibsted ASA
api.identity-dev.schibsted.com
trainee.schibsted.com
api.ptx.schibsted.com
selfservice.identity-dev.schibsted.com
login.schibsted.com
tls.automattic.com
statuspage.io
statuspage.io
dev.schibsted.com
statuspage.io
*.smp.schibsted.com
statuspage.io
*.schibsted.com
id.aboutme.schibsted.com
selfservice.login.schibsted.com
statuspage.io
jssdk.privacy.pre.schibsted.com
futurereport.schibsted.com
www.schibsted.com
gsuite.schibsted.com
aboutme.schibsted.com
selfservice.identity-dev.schibsted.com
id.adressa.no
create.schibsted.com
statuspage.io
buzz.schibsted.com
linkerd.identity-dev.schibsted.com
events.schibsted.com
ptx.schibsted.com
statuspage.io
oauth.identity-pre.schibsted.com
id.morgenlevering.no
statuspage.io
statuspage.io
statuspage.io
selfservice.identity-pre.schibsted.com
22.session-service.identity-pre.schibsted.com
sms.schibsted.com
secondhandeffect.schibsted.com
ambassador.login.schibsted.dk
futurereport.schibsted.com
statuspage.io
account.schibsted.com
login.schibsted.com
api.privacy.schibsted.com
5wmkqllc4b7n7j3ctvpmnihbwca.distribusjon-pro-1.eks.schibsted.io
statuspage.io
kudos.schibsted.com
api.privacy.schibsted.com
statuspage.io
statuspage.io
*.pre.privacy.schibsted.com
selfservice.login.schibsted.com
id.dev.sdk-example.com
statuspage.io
identity-dev.schibsted.com
statuspage.io
unleash.login.schibsted.com
aboutme.schibsted.com
aboutme.schibsted.com
*.schibsted.com
profiles.schibsted.com
statuspage.io
example-app.identity-dev.schibsted.com
*.login.schibsted.com
distributionauth.distribution.schibsted.com
id.dev.sdk-example.com
statuspage.io
dev.privacy.schibsted.com
tableau.schibsted.com

Certificate

The complete raw certificate details for *.login.schibsted.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSaotJ+nYXmV9hxi8emk
qaLirSc6lgm4jgB3iOx7u52gryOduLn4Iuk4zHuasOLb76v8+rjwRHOPA17mH6EK
2xHFuWTfCdRjr2XHWNteqe5NqfwEXJGIzzi1IMhzVHmPEJtnwI/roPtrQMhcnggO
WsRvcWF1IVg18pSCO8qzNIKxGl7s3pT77c9W7jW+z4a7JPYsw0uBcA/HFICNcam9
KKNdqx4RKEuaWgWfkP1y+9inawDoFJgXdRh9TXHkghB3UtM6HFoJdkZ5msB51R5X
GUpmdqbmpViGF4y6m8ZM0y98HhhZ6W+71+s0r+aJUPO+jFnvHyo7SspfeaKOuPbY
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10954504919785450779103838939667582288
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-12 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.login.schibsted.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22868196665268727275898713834459374589585556274105793993537727114461546794650943144008420914776447749133889623796396854579408541037244911988565609249082386814942199101965678338389461973749864928875263582729060045647511759012679167928245830942773181949325559333295595059361253366077280104352257457254927092627619167440836483629536706191830734156832446845641432668233625257230077153173831090570847051652604410435072614579735956515671546079275456458272642117263430327518094493353186732144260690341237115471432201119787969477754999868155345639781005272072573259529533645905509452848217518774089436923499644237988010318053
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							38fdf5122380911572c36eb71424603a171dd2d5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.login.schibsted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ambassador.schibsted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.schibsted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.schibsted.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.payment.schibsted.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.login.schibsted.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment.schibsted.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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