foreclosures.al.com

Issued by Amazon

About this certificate

This digital certificate with serial number 01:ed:88:f6:c1:be:b7:a9:91:4e:32:c0:b5:43:71:b6 was issued on by Amazon.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=foreclosures.al.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:ed:88:f6:c1:be:b7:a9:91:4e:32:c0:b5:43:71:b6
Serial Number (int): 2562580309052915279353092924296622518
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: c7:29:55:e1:b1:c6:72:46:9a:1e:11:5b:4f:46:fc:88:23:0d:56:7b
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): f8:4a:a1:e7:4d:0d:1c:3e:06:0f:e0:38:08:9f:da:d1:ee:f8:64:d0
Fingerprint (sha256): 12:a4:a2:6d:6e:54:d7:08:10:fb:67:e9:1f:e9:93:b0:c7:34:9c:d2:c7:d3:d9:6d:49:81:1b:1e:8f:13:41:10

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate foreclosures.al.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for foreclosures.al.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

foreclosures.al.com
foreclosures.cleveland.com
foreclosures.gulflive.com
foreclosures.lehighvalleylive.com
foreclosures.masslive.com
foreclosures.mlive.com
foreclosures.nj.com
foreclosures.nola.com
foreclosures.oregonlive.com
foreclosures.pennlive.com
foreclosures.silive.com
foreclosures.syracuse.com

Other certificates including the domain name al.com

(limited to 100 certificates)
ssl374862.cloudflaressl.com
dns-vetting1-marita-ardnek.map.fastly.net
hiring.mlive.com
articles.al.com
dns-vetting1-marita-ardnek.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
jobs.thejobnetwork.com

foreclosures.al.com
br.bikeradar.com
login.pennlive.com
businessfinder.al.com
hiring.mlive.com
star2.arcpublishing.com
dns-vetting1-marita-ardnek.map.fastly.net
autos.mlive.com
ssl374863.cloudflaressl.com
advancelocal.map.fastly.net
mms.al.com
ssl374862.cloudflaressl.com
local.theameryfreepress.com
li.lisecurelink.com
dns-vetting1-marita-ardnek.map.fastly.net
jobs.thejobnetwork.com
br.bikeradar.com
advancelocal.map.fastly.net
hiring.mlive.com
nj-skypeaccess.advancelocal.net
local.crestonnews.com
dns-vetting1-marita-ardnek.map.fastly.net
advancelocal.com
dns-vetting1-marita-ardnek.map.fastly.net
ezads.mlive.com
li.lisecurelink.com
hiring.mlive.com
advancelocal.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
ssl478682.cloudflaressl.com
hiring.mlive.com
advancelocal.map.fastly.net
al.com
mms.al.com
ezads.mlive.com
sanssl2.stats.com
dns-vetting1-marita-ardnek.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
foreclosures.al.com
li.lisecurelink.com
mobileobits.al.com
advancelocal2.web.arc-cdn.net
local.thegazette.com
dns-vetting1-marita-ardnek.map.fastly.net
advancelocal.map.fastly.net
jobs.thejobnetwork.com
dns-vetting1-marita-ardnek.map.fastly.net
tls.automattic.com
li.lisecurelink.com
hiring.mlive.com
dns-vetting1-marita-ardnek.map.fastly.net
advancelocal.map.fastly.net
flyertown.ca
dns-vetting1-marita-ardnek.map.fastly.net
eastern-courier.origami.neighbourly.co.nz
jobs.thejobnetwork.com
local.bensonnews-sun.com
sanssl2.stats.com
sanssl2.stats.com
dns-vetting1-marita-ardnek.map.fastly.net
nwajobfinder.com
hiring.mlive.com
al-skypeaccess.advancelocal.net
ssl121533.cloudflaressl.com
hiring.mlive.com
dns-vetting1-marita-ardnek.map.fastly.net

local.summitdaily.com
star2.arcpublishing.com
login.al.com
dns-vetting1-marita-ardnek.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
foreclosures.al.com
nwajobfinder.com
jobs.thejobnetwork.com
ssl478681.cloudflaressl.com
ezads.mlive.com
hiring.mlive.com
sanssl2.stats.com
businessfinder.al.com
hiring.mlive.com
dns-vetting1-marita-ardnek.map.fastly.net
hiring.mlive.com
ssl374862.cloudflaressl.com
local.newstribune.info
dns-vetting1-marita-ardnek.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
dns-vetting1-marita-ardnek.map.fastly.net
br.bikeradar.com
nj-skypeaccess.advancelocal.net
star4.arcpublishing.com
li.lisecurelink.com

Certificate

The complete raw certificate details for foreclosures.al.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6/FYCnFxO2h4PZc0LRZ
biSCfmDvngbSomU5bBjtxcjr0gFctKgROmQ2LNiq0EraZRaSZXGrpGGxGUwlwVRg
KVPGiy/aMISg3Hk8To+lsmhiFxjEoYRvJAqZuvlM1xHJKjemM0I2RAaOB7bi0RbY
tYegkkMzn5HBZdIT/YxAkB05hUdYkVzuKpKze3DrwwfvtvEWAob41AQSv8HaYSDD
jlmMRoBq2n1D6myecCwB1DmQx0AbjsD0xHobOD+4RPoEyA6voT/OZrKi8wimhxLF
NsouHMQX5Zege03TILGg3FiHqy6OAsmoMzGwe7i/aWtoYVUBcV2P//iGA3313Tsx
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2562580309052915279353092924296622518
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'foreclosures.al.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21673426059052991346520551726156622997045907628886950438038982240898744184146240661504792589488184347572492109117634316406534893726203352770364093890884675003354816395663095391822482015312527874945185742887284037741700978130321961496620973702564609799046285243258790387762853341741785137603372879713330386968995405746655060969263744441917161703099894935132902817404422800363696407813260268924872341304206479549293011016024323175220775894293046093554000303088676659206894004091764241862453481727919561687639997936712367758107963496675889261083952437702889285647233665616962905468922027161608397860610065447326683181557
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c72955e1b1c672469a1e115b4f46fc88230d567b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (318 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreclosures.al.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreclosures.cleveland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreclosures.gulflive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreclosures.lehighvalleylive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreclosures.masslive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreclosures.mlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreclosures.nj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreclosures.nola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreclosures.oregonlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreclosures.pennlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreclosures.silive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foreclosures.syracuse.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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