subscribe.autoexpress.co.uk

Issued by Amazon

About this certificate

This digital certificate with serial number 0d:37:bf:a0:d8:07:56:8d:6d:d5:69:de:ee:fb:ca:8f was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=subscribe.autoexpress.co.uk

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:37:bf:a0:d8:07:56:8d:6d:d5:69:de:ee:fb:ca:8f
Serial Number (int): 17569426956021254953234284731476724367
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b0:ef:66:fb:4b:ab:b3:b2:ac:80:46:29:ba:9f:56:33:0e:82:4b:82
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 48:f9:a9:00:0b:1b:b9:04:1f:0f:af:88:91:8b:f4:92:b4:09:23:f8
Fingerprint (sha256): 12:58:1d:8d:90:b5:ea:4c:6e:46:12:91:14:ad:ae:b1:29:98:d3:3f:a1:fc:64:49:a4:d6:33:55:db:6e:96:54

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate subscribe.autoexpress.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for subscribe.autoexpress.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

subscribe.autoexpress.co.uk

Other certificates including the domain name autoexpress.co.uk

(limited to 100 certificates)
aex-mms.autoexpress.co.uk
www2.pugpig.com
dns-vetting1-mims-pawel.map.fastly.net
san-001.ceros.com
dns-vetting1-mims-pawel.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
san-001.ceros.com
san-001.ceros.com
subscription.theweek.co.uk
adspecs.dennis.co.uk
dns-vetting1-mims-pawel.map.fastly.net
abafrica.accaglobal.com
san-001.ceros.com
aex-mms.autoexpress.co.uk
s2-san.cloudinary.com
aex-mms.autoexpress.co.uk
san-001.ceros.com
s3-cloudinary-pin.map.fastly.net
s3-cloudinary-pin.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
san-001.ceros.com
s3-cloudinary-pin.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
s3-cloudinary-pin.map.fastly.net
www2.pugpig.com
san-001.ceros.com
s2-san.cloudinary.com
s3-cloudinary-pin.map.fastly.net
quotezone.co.uk
san-001.ceros.com
subscription.theweek.co.uk
auth.autoexpress.co.uk
www2.pugpig.com
ceros1.map.fastly.net
san-001.ceros.com
san-001.ceros.com
z980.carthrottle.com
www2.pugpig.com
s2-san.cloudinary.com
www2.pugpig.com
dns-vetting1-mims-pawel.map.fastly.net
ceros1.map.fastly.net
autoexpress.co.uk
*.compareni.com
s3-cloudinary-pin.map.fastly.net
s2-san.cloudinary.com
s2-san.cloudinary.com
dns-vetting1-mims-pawel.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
dns-vetting1-mims-pawel.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
aex-mms.autoexpress.co.uk
dg-0094-4765bd0.client-tls.adestra.com
san-001.ceros.com
dns-vetting1-mims-pawel.map.fastly.net
san-001.ceros.com
s3-san.cloudinary.com
s3-cloudinary-pin.map.fastly.net
aex-mms.autoexpress.co.uk
s3-san.cloudinary.com
www2.pugpig.com
aex-mms.autoexpress.co.uk
www2.pugpig.com
dns-vetting1-mims-pawel.map.fastly.net
s3-cloudinary-pin.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
adspecs.dennis.co.uk
dg-0094-4765bd0.client-tls.adestra.com
dns-vetting1-mims-pawel.map.fastly.net
auth.astonmagazine.co.uk
san-001.ceros.com
s3-san.cloudinary.com
subscribe.autoexpress.co.uk
s2-san.cloudinary.com
s2-san.cloudinary.com
graphql.autoexpress.co.uk
s3-cloudinary-pin.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
s3-cloudinary-pin.map.fastly.net
s3-san.cloudinary.com
s2-san.cloudinary.com
san-001.ceros.com
adspecs.dennis.co.uk
san-001.ceros.com
autoexpress.co.uk
dg-0094-4765bd0.client-tls.adestra.com
www2.pugpig.com
s3-cloudinary-pin.map.fastly.net
l468.drivingelectric.com
san-001.ceros.com
san-001.ceros.com
dg-0094-4765bd0.client-tls.adestra.com
adspecs.dennis.co.uk
www2.pugpig.com
s3-cloudinary-pin.map.fastly.net
r468.evo.co.uk
san-001.ceros.com
subscribe.autoexpress.co.uk

Certificate

The complete raw certificate details for subscribe.autoexpress.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwif5FpxNk8472GNY1e4a
uUrCkWAOOI6I3QOBYsHNcJ08ThqF/Xv5tEQfTmXSjqoDDJ2g98HjDs50UUu/gaCw
j0lrOpFydwrLEjcPGPTADXo3yng3ALbNuQfV0Jbfr9uiQhMs7+4ss+ovXoSFTvIc
ZziyDnDKCQ2brM8iznElxMcDaF3riT7X78ZbHz3qawWXj3dPjaArD6hSlDvgb3IJ
KD1jIQR1+Dufizr8GUT/KlKjfMH0kAkMeNAZ1ZWPOWL8y1IndUC6vpZqttcX3+Q1
gNALODNDQQ/jdsdbRtjS7JuqQBIYs1CvWNd+ly2ekaLWW5Q36KEzryyVyJ2jr1u5
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17569426956021254953234284731476724367
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'subscribe.autoexpress.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24509942584991296567565875522471230702316103897955719504776747200196671406342943675896492590127277722145008469524023769093157547133252829169107831210106195630429629744837571057437585161376979808517742610965567319475112052005050856106795468049859767478554594699451033444379852084764965219024869041289885231114722148771886279795222239543697489623539228866456339088393757393598221946901698101147680017973006264870552812885275107607396357735483897668587377863271983090529732223942044990547395060331547554039006996297443468986791808987886609364587236591234488552140157790824444747428021780171916532779070339849586713803179
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b0ef66fb4babb3b2ac804629ba9f56330e824b82
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.autoexpress.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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