affiliates.gettyimages.com

Issued by R3

About this certificate

This digital certificate with serial number 03:69:7b:31:1c:74:9e:e0:8b:fe:dd:48:62:f9:a2:fb:ea:bf was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=affiliates.gettyimages.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:69:7b:31:1c:74:9e:e0:8b:fe:dd:48:62:f9:a2:fb:ea:bf
Serial Number (int): 297230256365153997308394158996743983459007
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b2:77:57:19:1d:26:e1:32:8c:db:e6:e3:8b:db:8c:cc:b3:7d:4b:0c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f7:9b:9a:e8:97:f5:e9:f5:c1:56:fb:16:50:82:80:3d:a0:6b:85:09
Fingerprint (sha256): 0c:20:ed:71:ca:10:ed:95:fc:20:1d:4b:63:1e:9a:2d:85:c1:e5:92:97:1f:cc:27:17:34:87:00:73:2f:cd:4f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate affiliates.gettyimages.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for affiliates.gettyimages.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

affiliates.gettyimages.com

Other certificates including the domain name gettyimages.com

(limited to 100 certificates)
api-us-east-1.nd.nudatasecurity.com
*.gettyimages.com
embed.gettyimages.com
labs.gettyimages.com
k3.shared.global.fastly.net
foto.gettyimages.com
www.labs.gettyimages.com
embed-cdn.gettyimages.com
ews.gettyimages.com
embed-cdn.gettyimages.com
k3.shared.global.fastly.net
studio.gettyimages.com
ceros3.map.fastly.net
k3.shared.global.fastly.net
k3.shared.global.fastly.net
firstdata.gettyimages.com
smetrics.gettyimages.com
brookfield.gettyimages.com
mmpart.gettyimages.com
apply.gettyimages.com
sitemaps.gettyimages.com
labs.gettyimages.com
stories.gettyimages.com
k3.shared.global.fastly.net
workbench.gettyimages.com
api-prod.vizual.ai
mixer.gettyimages.com
k3.shared.global.fastly.net
k3.shared.global.fastly.net
workbench.gettyimages.com
services.gettyimages.com
hexion.gettyimages.com
mixer.gettyimages.com
*.dam.gettyimages.com
*.pinterestceros.com
k3.shared.global.fastly.net
view.ceros.com
developers.gettyimages.com
ceros3.map.fastly.net
remotetest.gettyimages.com
k3.shared.global.fastly.net
nd-ga.gettyimages.com
customcontent.gettyimages.com
esp.gettyimages.com
k3.shared.global.fastly.net
ceros.map.fastly.net
k3.shared.global.fastly.net
studioportfolios.gettyimages.com
legacycreative.gettyimages.com
servicestest.gettyimages.com
k3.shared.global.fastly.net
k3.shared.global.fastly.net
k3.shared.global.fastly.net
briefs-middleware.custom-content.usw2.prod-getty.cloud
k3.shared.global.fastly.net
events.gettyimages.com
www.gettyimages.com
licensecompliance.gettyimages.com
labs.gettyimages.com
mm.gettyimages.com
foto.gettyimages.com
communityassignments.gettyimages.com
stg-mm.lower-getty.cloud
k3.shared.global.fastly.net
stg-in.lower-getty.cloud
delivery.stage-gettyimages.com
services.gettyimages.com
copyrightcompliance.gettyimages.com
damhelp.gettyimages.com
leapfrog-ssl-35.gcs-web.com
k3.shared.global.fastly.net
k3.shared.global.fastly.net
ceros3.map.fastly.net
api-us-east-1.nd.nudatasecurity.com
k3.shared.global.fastly.net
communityassignments.gettyimages.com
essilormediamanager.gettyimages.com
mmx.gettyimages.com
view.ceros.com
www.gettyimages.com
leapfrog-ssl-35.gcs-web.com
k3.shared.global.fastly.net
mmpart.gettyimages.com
yearinfocus.gettyimages.com
secondary-prod-mm.prod-getty.cloud
affiliates.gettyimages.com
pdn.gettyimages.com
joinus.gettyimages.com
media.gettyimages.com
fashion.gettyimages.com
ceros3.map.fastly.net
unisys.gettyimages.com
ceros3.map.fastly.net
ceros3.map.fastly.net
k3.shared.global.fastly.net
api-us-east-1.nd.nudatasecurity.com
firstpartycookie.gettyimages.com
*.pinterestceros.com
mmx.gettyimages.com
k3.shared.global.fastly.net

Certificate

The complete raw certificate details for affiliates.gettyimages.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArErVilbPp25JsM2Iep9o
vcuyWDWiKavPGid7zhMrK9+8JsZ6wtKYF/5GmWiA2GadFTRzZPPwYjqBcMgXJGzC
LkMcaYudeuWrTOJhic4rvRNaII0NHmwlMDMKcANLQF+gLXoMjhIN7sRo//ZSwnsZ
S03n8TKsT9r2GnebXIhcuwS51zTbpgcpOau0YKwl+qSce+pA6QtV9xrqpr5Z60oZ
zx3fp82jun1/xoq/7c1BJFQRI1ychKMUwbyAzA3dlifriGm9O1Yx1kmv92bHyVtr
r0qCl2rB/dfMrXuvjje3jK1ggu3ra23w/2/PjjBsa5NHn+QvLznLNIpupnC4EUqd
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297230256365153997308394158996743983459007
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-28 18:20:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-27 18:20:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'affiliates.gettyimages.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21749890545009716100588155913660576488036596160693199006642436780078698069468036773919299666021746017571751043968168218742671577231613542456772014306440982625830028183157774154094329851612394355006207133852745492944208046239608368304917129917234449142794010961932347311413055910475844591463250984758153170438755701317732800851867122970641807850602513595072165458479843664855481331075157371434678293748378668993208989272137997948707008669152025527501802912784086268595683202952500507174937361705215614790942348369258791693098509998260039864667919328726986043575488843426155997045785237612418925786809339699142547119397
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b27757191d26e1328cdbe6e38bdb8cccb37d4b0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affiliates.gettyimages.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f262687e7000004030047304502202cea2d54a151e431f2ea5e56bde3ba31f7301372174b0be6e5f9bd88deb67473022100c4c4f8dc53f60d81f94d90a48e0f42e28edafbc70c33619151fb6ec068b95fdb007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f262687e8000004030047304502207a391fbdf3621b391130eed09b2460fa672e7bf6d01b39993cc01b029b6e1b33022100cbaf70b2cbf2cb66a4dcfb827d791249e3a65224032bf7dc2345dafca9f88d12
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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