*.weightwatchers.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0a:9d:ba:c8:e1:00:e3:a5:a0:66:94:cb:ee:05:d2:0f was issued on by Amazon.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.weightwatchers.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:9d:ba:c8:e1:00:e3:a5:a0:66:94:cb:ee:05:d2:0f
Serial Number (int): 14111259008093110972548844555921117711
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 76:9f:1a:55:96:18:57:44:48:1e:36:bf:eb:13:4e:7f:29:0b:7e:e8
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 6e:b2:85:f9:b2:98:e3:04:f5:4c:33:dd:0b:79:fc:1d:49:fc:de:0f
Fingerprint (sha256): 0d:dc:8e:11:67:d2:4c:f6:60:50:17:2c:27:32:df:06:4c:5c:49:a7:dc:86:20:b3:37:5d:07:c1:d2:fd:ce:1e

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.weightwatchers.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.weightwatchers.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.weightwatchers.com
*.dev.weightwatchers.com
*.qa.studiotechnonprod.us-east-1.aws.wwiops.io
*.dev.studiotechnonprod.us-east-1.aws.wwiops.io
*.qa.weightwatchers.com
*.prod.studiotech.us-east-1.aws.wwiops.io

Other certificates including the domain name weightwatchers.com

(limited to 100 certificates)
api.retail.qat2.weightwatchers.com
*.weightwatchers.com
prospective.shared.global.fastly.net
new.weightwatchers.com
wwcruisesweeps.weightwatchers.com
*.weightwatchers.com
*.staging.ctech.weightwatchers.com
*.weightwatchers.com
answers-texaneyecare.pagescdn.com
www.devstage1.weightwatchers.com
*.staging.ctech.weightwatchers.com
www.weightwatchers.co.uk
new.weightwatchers.com
prospective.shared.global.fastly.net
rewards.weightwatchers.com
wwapp.tools.weightwatchers.com
*.corp.weightwatchers.com
e.ww.svcs.qat2.weightwatchers.com
signup.mobile.weightwatchers.com
*.devstage4.weightwatchers.com
shop.live.weightwatchers.com
es.soa.qat2.weightwatchers.com
*.weightwatchers.com
na.erp.weightwatchers.com
mag.corp.weightwatchers.com
clinic.weightwatchers.com
join.weightwatchers.com
wwaw.svcs.qa.weightwatchers.com
www.weightwatchers.co.uk
cfjump.weightwatchers.com
preview.store.weightwatchers.com
auth.eu.weightwatchers.com
*.staging.ctech.weightwatchers.com
*.qa.weightwatchers.com
www.gtm.weightwatchers.com
gtm.weightwatchers.com
*.tools.weightwatchers.com
prospective.shared.global.fastly.net
privacy.weightwatchers.com
prospective.shared.global.fastly.net
rundeck.qa.weightwatchers.com
prospective.shared.global.fastly.net
mobile.psqa.weightwatchers.co.uk
api.devstage1.weightwatchers.com
knapia.weightwatchers.com
mobile.qat4.weightwatchers.com
api.weightwatchers.com
admanager.corp.weightwatchers.com
*.qat2.weightwatchers.com
weightwatchers.com
prospective.shared.global.fastly.net
customer-test.ssl.fastly.net
www.devstage1.weightwatchers.com
mi.weightwatchers.com
wwapp.tools.weightwatchers.com
workshopcoaches.weightwatchers.com
prospective.shared.global.fastly.net
*.weightwatchers.com
www.qa.weightwatchers.com
clinic.weightwatchers.com
*.weightwatchers.com
prospective.shared.global.fastly.net
*.qat2.weightwatchers.com
cms.tools.weightwatchers.com
mobile.psqa.weightwatchers.co.uk
preview.store.weightwatchers.com
*.weightwatchers.com
mi.weightwatchers.com
*.weightwatchers.com
*.weightwatchers.com
www.qa.weightwatchers.com
*.weightwatchers.com
spice.weightwatchers.com
*.devstage4.weightwatchers.com
*.weightwatchers.com
*.weightwatchers.com
customercare.weightwatchers.com
prospective.shared.global.fastly.net
wwaw.svcs.qa.weightwatchers.com
sts.weightwatchers.com
weightwatchers.com
*.weightwatchers.com
blog-hitchhikers.yext.com
help.weightwatchers.com
*.staging.ctech.weightwatchers.com
getstarted.weightwatchers.com
rb87ymi4.weightwatchers.com
prospective.shared.global.fastly.net
dps-stage.pluralsight.com
sts.weightwatchers.com
*.svcs.weightwatchers.com
*.psqa.weightwatchers.com
new.weightwatchers.com
prospective.shared.global.fastly.net
*.qat2.weightwatchers.com
mobile.psqa.weightwatchers.co.uk
help.qa.weightwatchers.com
live.weightwatchers.com
mobile.qa.weightwatchers.com
mi.weightwatchers.com

Certificate

The complete raw certificate details for *.weightwatchers.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA47DW06/1gMXb6SnbNIOH
o4wqsopk/fd4OgR/Rr4ICtUEB4QHvcXeWfqNoAWeJhXi4GsDOeUKMCLtPZodfsBe
Ze9WUwUXGU1l8GeGbpMQ/Znb+LZvxJqYjVcyuc+nVyjFFa1ppFfd3Jh3O8A0UIdr
YqIFlcC/Mx4QIVr0pf1bZo+ebMs2zCsLYxhBcVV4+w43TVeifOqfdy4NbFJ/1e1d
V6AgFpaAvvp6gmykOO2PoTbwRFx6HMtsOQNGyrBvDinAwHjlaXms+CIZ2cWP3CNn
LZW3mIvV1E23IieGQQpNS6wUg+mXgbm5wAZkHx7+qPgEhMnP8P4t26trtDeQLlUL
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14111259008093110972548844555921117711
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.weightwatchers.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28743297870922188619516820732423090263518232092672484822857875062552188705351061767766369322619741281075488571355989819216011977510120728413292325361822430852659527691329847761357664396971386667644783504895783240639846666673079636217338814368130468611590991590122802968652052915086205997799373387616186646697995321931965186031427633428256989886919782758259275412605051898698875938259688385224832925720050087610797279223759323299343299291463173046902225593706234192421421901481137590142855566532494355651855906337626665853282688932270250878375137259273289600437094362948317284045253022313300530599994851320074415180661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							769f1a5596185744481e36bfeb134e7f290b7ee8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (216 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weightwatchers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.weightwatchers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.studiotechnonprod.us-east-1.aws.wwiops.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dev.studiotechnonprod.us-east-1.aws.wwiops.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qa.weightwatchers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.studiotech.us-east-1.aws.wwiops.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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