bsp.elpais.com.uy

Issued by Amazon

About this certificate

This digital certificate with serial number 08:ad:33:76:df:16:f6:d4:78:0c:24:47:69:c1:ad:29 was issued on by Amazon.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bsp.elpais.com.uy

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:ad:33:76:df:16:f6:d4:78:0c:24:47:69:c1:ad:29
Serial Number (int): 11533135143661734261056020295224241449
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f8:a3:99:e6:16:f3:9a:44:f3:37:4f:40:00:78:c8:cc:f9:ca:aa:49
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 19:95:5c:06:7f:cc:04:97:29:eb:58:86:5e:56:af:c5:e3:55:fd:9c
Fingerprint (sha256): 12:0c:80:11:10:ca:08:c8:0f:66:88:9a:12:e6:65:0c:60:f6:f3:db:0c:1a:6b:f9:b2:ec:d5:51:9b:3e:20:f9

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate bsp.elpais.com.uy

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bsp.elpais.com.uy

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bsp.elpais.com.uy
cms.web.production.el-pais.brightspot.cloud
verify.cms.web.production.el-pais.brightspot.cloud
*.web.production.el-pais.brightspot.cloud
web.production.el-pais.brightspot.cloud
origin.web.production.el-pais.brightspot.cloud
verify.origin.web.production.el-pais.brightspot.cloud
*.origin.web.production.el-pais.brightspot.cloud
static.web.production.el-pais.brightspot.cloud
el-pais.brightspotcdn.com

Other certificates including the domain name elpais.com.uy

(limited to 100 certificates)
ssl955615.cloudflaressl.com
ssl515051.cloudflaressl.com
sslnons.icommarketing.com
sslnons.icommarketing.com
ssl515052.cloudflaressl.com
sslnons.icommarketing.com
sslnons.icommarketing.com
sslnons.icommarketing.com
ssl515050.cloudflaressl.com
bsp.elpais.com.uy
sslnons.icommarketing.com
comercialpymes.elpais.com.uy
comercialpymes.elpais.com.uy
sslnons.icommarketing.com
ssl515052.cloudflaressl.com
ssl515050.cloudflaressl.com
sslnons.icommarketing.com
ssl515051.cloudflaressl.com
ssl515050.cloudflaressl.com
ssl515050.cloudflaressl.com
sslnons.icommarketing.com
sslnons.icommarketing.com
registro.elpais.com.uy
*.elpais.com.uy
sslnons.icommarketing.com
sslnons.icommarketing.com
sslnons.icommarketing.com
www.comercialpymes.elpais.com.uy
sslnons.icommarketing.com
*.elpais.com.uy
ssl515051.cloudflaressl.com
registro.elpais.com.uy
sslnons.icommarketing.com
ssl515052.cloudflaressl.com
penca.elpais.com.uy
*.elpais.com.uy
bsp.elpais.com.uy
*.elpais.com.uy
sslnons.icommarketing.com
sslnons.icommarketing.com
sslnons.icommarketing.com
comercialpymes.elpais.com.uy
comercialpymes.elpais.com.uy
sslnons.icommarketing.com
sslnons.icommarketing.com
registro.elpais.com.uy
bsp.elpais.com.uy
*.elpais.com.uy
www.comercialpymes.elpais.com.uy
sni.cloudflaressl.com
ssl943426.cloudflaressl.com
sslnons.icommarketing.com
www.comercialpymes.elpais.com.uy
ssl515052.cloudflaressl.com
sslnons.icommarketing.com
sslnons.icommarketing.com
*.elpais.com.uy
sslnons.icommarketing.com
ssl515051.cloudflaressl.com
sslnons.icommarketing.com
sni.cloudflaressl.com
sslnons.icommarketing.com
*.elpais.com.uy
bsp.elpais.com.uy
bsp.elpais.com.uy
sslnons.icommarketing.com
*.elpais.com.uy
ssl515051.cloudflaressl.com
ssl515052.cloudflaressl.com
registro.elpais.com.uy
comercialpymes.elpais.com.uy
sslnons.icommarketing.com
bsp.elpais.com.uy
*.elpais.com.uy
sslnons.icommarketing.com
sslnons.icommarketing.com
sslnons.icommarketing.com
comercialpymes.elpais.com.uy
sslnons.icommarketing.com
www.comercialpymes.elpais.com.uy
sslnons.icommarketing.com
sslnons.icommarketing.com
comercialpymes.elpais.com.uy
ssl515052.cloudflaressl.com
sslnons.icommarketing.com
sslnons.icommarketing.com
ssl515050.cloudflaressl.com
*.elpais.com.uy
sslnons.icommarketing.com
sslnons.icommarketing.com
registro.elpais.com.uy
sslnons.icommarketing.com
ssl955615.cloudflaressl.com
sslnons.icommarketing.com
ssl515050.cloudflaressl.com
sslnons.icommarketing.com
ssl515051.cloudflaressl.com
*.elpais.com.uy
sslnons.icommarketing.com
bsp.elpais.com.uy

Certificate

The complete raw certificate details for bsp.elpais.com.uy in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/28U0pgRkBryGMKIjBd
Oww1VDR7aa9RNzQP++aAk9PlsvhQhMk0JEqezdKLKjuUg8+mWmIH+ZD78ZOpBzyu
L44D+1Ag1yw6YD9Frtx+zegtbk/0L6WIeiYZcLpytLPMbLiKEzesb3hztEINFR0t
foJh4rSOM3R942UQST5mtkkk9mT2ppmVFoF9Pi0dRaFC9uGJIVU2kswyqxAZNh+w
cg4Q0f8T+tZwoOeQmE58xipT8NAfOjbQ5zeUCB2vbjg+RZf7KFaw3A0ckO5Ob+mL
P+GYswnxo4nh+YsfX+cN8RJWUjI9KDcjgQfs0jI6a9Uh+N3gTRZaKneGyU7rhCY4
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11533135143661734261056020295224241449
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bsp.elpais.com.uy'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19692058980088622274181426947554732089497036784279228916608170460453966676464236373055127280804035236765528091517434366814457545655569828413630985448736976558763203998584349216029747763371815337654010213627016586641276411389887761492383753700574111823726437305551751834121177835486733886967708222455716886932726629980925907904558420787055499812764865446689485993520483857339230463669033942596730282290313216675686462526216633813206756246872745525444061512734963406490752812164318306932386001181710078010936940126601601150758965562938206774487155263916351075130231568209700889247127390279577101009342055342774851876917
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f8a399e616f39a44f3374f400078c8ccf9caaa49
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (432 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsp.elpais.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.web.production.el-pais.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verify.cms.web.production.el-pais.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.web.production.el-pais.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.production.el-pais.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.web.production.el-pais.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'verify.origin.web.production.el-pais.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.origin.web.production.el-pais.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.web.production.el-pais.brightspot.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'el-pais.brightspotcdn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0040665ef0afe03f21e996753452b7ca250ec6fe64a1524dd857ebdb032f2efb7a6c8d7e46828fd430a178e4d197fb0156fcdc5f4b137185683bc6c7cc1466f1324504c97a0a25a2bca760b0ac52a18d8b39e46a01042f35674a7054932886e9b23d7999f5130850d052521cb94acf279a4f336195ffdefce3d83c06411ba151ecf0b22e901f6907ab8bf807667a455039b2f10089a3274c9a96b984fa03ca0d613f6ea092d52066bf5a143a2894fe5d54f1965586a8bb7b6cf34fe46837cc5c561f4d18868f10c314c068cd16d7fda70ada6edd78f63b324c32442e8de469b3707ab25846b1a8572d5848d8d2dc19adb7525da2b8120078154acaaf13ffe2ebec