foreclosures.al.com

Issued by Amazon

About this certificate

This digital certificate with serial number 08:5b:3f:3e:92:de:71:fa:6b:a0:32:ea:51:ea:60:09 was issued on by Amazon.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=foreclosures.al.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:5b:3f:3e:92:de:71:fa:6b:a0:32:ea:51:ea:60:09
Serial Number (int): 11107605729810833449777036072967626761
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e1:61:74:f8:7b:5c:cb:49:bf:82:f5:85:b4:e4:bb:27:8b:b1:51:d7
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): eb:32:e6:1f:6c:23:b0:63:28:26:54:ea:01:ac:ae:01:7f:c8:94:4b
Fingerprint (sha256): 0a:fb:21:12:5e:dc:7f:62:23:86:a6:d3:de:52:06:1d:17:15:bc:56:3e:a1:6a:09:a0:08:72:f2:56:ad:c6:3d

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate foreclosures.al.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for foreclosures.al.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

foreclosures.al.com
foreclosures.cleveland.com
foreclosures.gulflive.com
foreclosures.lehighvalleylive.com
foreclosures.masslive.com
foreclosures.mlive.com
foreclosures.nj.com
foreclosures.nola.com
foreclosures.oregonlive.com
foreclosures.pennlive.com
foreclosures.silive.com
foreclosures.syracuse.com

Other certificates including the domain name al.com

(limited to 100 certificates)
ssl374862.cloudflaressl.com
dns-vetting1-marita-ardnek.map.fastly.net
hiring.mlive.com
articles.al.com
dns-vetting1-marita-ardnek.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
jobs.thejobnetwork.com

foreclosures.al.com
br.bikeradar.com
login.pennlive.com
businessfinder.al.com
hiring.mlive.com
star2.arcpublishing.com
dns-vetting1-marita-ardnek.map.fastly.net
autos.mlive.com
ssl374863.cloudflaressl.com
advancelocal.map.fastly.net
mms.al.com
ssl374862.cloudflaressl.com
local.theameryfreepress.com
li.lisecurelink.com
dns-vetting1-marita-ardnek.map.fastly.net
jobs.thejobnetwork.com
br.bikeradar.com
advancelocal.map.fastly.net
hiring.mlive.com
nj-skypeaccess.advancelocal.net
local.crestonnews.com
dns-vetting1-marita-ardnek.map.fastly.net
advancelocal.com
dns-vetting1-marita-ardnek.map.fastly.net
ezads.mlive.com
li.lisecurelink.com
hiring.mlive.com
advancelocal.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
ssl478682.cloudflaressl.com
hiring.mlive.com
advancelocal.map.fastly.net
al.com
mms.al.com
ezads.mlive.com
sanssl2.stats.com
dns-vetting1-marita-ardnek.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
foreclosures.al.com
li.lisecurelink.com
mobileobits.al.com
advancelocal2.web.arc-cdn.net
local.thegazette.com
dns-vetting1-marita-ardnek.map.fastly.net
advancelocal.map.fastly.net
jobs.thejobnetwork.com
dns-vetting1-marita-ardnek.map.fastly.net
tls.automattic.com
li.lisecurelink.com
hiring.mlive.com
dns-vetting1-marita-ardnek.map.fastly.net
advancelocal.map.fastly.net
flyertown.ca
dns-vetting1-marita-ardnek.map.fastly.net
eastern-courier.origami.neighbourly.co.nz
jobs.thejobnetwork.com
local.bensonnews-sun.com
sanssl2.stats.com
sanssl2.stats.com
dns-vetting1-marita-ardnek.map.fastly.net
nwajobfinder.com
hiring.mlive.com
al-skypeaccess.advancelocal.net
ssl121533.cloudflaressl.com
hiring.mlive.com
dns-vetting1-marita-ardnek.map.fastly.net

local.summitdaily.com
star2.arcpublishing.com
login.al.com
dns-vetting1-marita-ardnek.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
foreclosures.al.com
nwajobfinder.com
jobs.thejobnetwork.com
ssl478681.cloudflaressl.com
ezads.mlive.com
hiring.mlive.com
sanssl2.stats.com
businessfinder.al.com
hiring.mlive.com
dns-vetting1-marita-ardnek.map.fastly.net
hiring.mlive.com
ssl374862.cloudflaressl.com
local.newstribune.info
dns-vetting1-marita-ardnek.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
br.bikeradar.com
nj-skypeaccess.advancelocal.net
star4.arcpublishing.com
li.lisecurelink.com

Certificate

The complete raw certificate details for foreclosures.al.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+FYM5kus8g77/d4IC3G
q7PDttkRTuZLhYk1PoiIffMjWunAujDU37xJ3lcEOj0979AMvc/BeLdrn2eFWG5B
WUtPuFubbszJaUvTiPGFu7cuzPbBHjWdG3WxiCw8By7HWsO4spt0qqKSvyvtykIV
i7BcmNTpnQiaIGGIyZ6ybTdbeHCdrDBizwIeco7WMJzwBmozOWPlFXDw9Ue6zg05
w1Os87iKY/PHcxS8EVWO1ZKTd+hsrElQn5Ow8lsWgRMQDpQa/0TukdlDYTJTc/v2
Kb4W6tuT8rhou9GmNhdEO7ASgELV6vNDEcN+EucJaaPTnvRWCtudBPUg/Wyz8i9A
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11107605729810833449777036072967626761
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-16 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'foreclosures.al.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25737497441022894620032255167775288034806935598631519583355051422569507216339649890327575343461744686596558408362209427675793388825399766177337758602096755965707395449997574391214834105949601769197849181306563126739320978716975009590123144059941145087038162982991540977834374646885014075083064554322401387962223333663333014746315556263379008530595292031820517620536628294770108243169558705341570664368466209578540112876053069763193713277337296274407401779208988696679621312938990186455187182791457886521571510175666824958371918523162922077825435878627608703570094090507073840455291831886820699010789792071104653639897
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e16174f87b5ccb49bf82f585b4e4bb278bb151d7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (318 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreclosures.al.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreclosures.cleveland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreclosures.gulflive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreclosures.lehighvalleylive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreclosures.masslive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreclosures.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreclosures.nj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreclosures.nola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreclosures.oregonlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreclosures.pennlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreclosures.silive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreclosures.syracuse.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0000924914a5127217d4dec2c22ade16e11f450a0e27e84c8a2a259189fb53aa09b9f5a0eee708c6b070b5b8385a66a3c5cc765e44452792ce0504d9f9d243880859803f073d4374c1ede70099efeb81c3d53223dcef0dc4305e24a860820f9f8039ee2e51a43f6e6f2da3775827a517e687542ceab80db2dba5458b7b3e6fbfe270d6d52c5805d89062504e4370dc829e02a99ae08838f4f7662da8d11fe2f4acb6a2051898824274dbfb1116f1d6ccf5078a22ed1f3b5e294aef0509105bae787099ece78a56ff305d34f8fb22fa2dcf23de54a75057f7b7638181aba43aeca643114f949a196f526bca4685e24f7ff0b0c3c037a742b9b5ff022855987d9e12