*.worldsingles.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0b:34:1b:04:a7:43:08:69:26:38:89:33:1d:a3:3a:3f was issued on by Amazon.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.worldsingles.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:34:1b:04:a7:43:08:69:26:38:89:33:1d:a3:3a:3f
Serial Number (int): 14892055384014868679457159775342770751
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0c:ed:7a:0e:64:d8:80:7f:02:83:b0:a1:88:78:30:85:5b:0f:1c:41
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 4a:52:cb:05:ee:61:7e:bd:04:60:45:89:94:a7:1a:c4:ad:d2:eb:78
Fingerprint (sha256): 13:aa:97:8d:a1:9b:1f:17:67:ff:77:2e:d2:4f:a4:07:b4:99:2f:7b:b7:5a:d6:78:8d:23:45:e7:10:fa:30:94

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.worldsingles.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.worldsingles.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.worldsingles.com
*.greeksingles.com
greeksingles.com
albaniansingles.com
*.albaniansingles.com
muslimsingles.com
*.muslimsingles.com

Other certificates including the domain name worldsingles.com

(limited to 100 certificates)
preview.worldsingles.com
*.worldsingles.com
worldsingles.com
*.worldsingles.com
*.worldsingles.com
www.worldsingles.com
*.worldsingles.com
stauth.worldsingles.com
*.worldsingles.com
*.worldsingles.com
worldsingles.com
*.worldsingles.com
worldsingles.com
system.worldsingles.com
*.worldsingles.com
*.worldsingles.com
*.worldsingles.com
api.worldsingles.com
*.worldsingles.com
colormelove.worldsingles.com
worldsingles.com
worldsingles.com
*.worldsingles.com
www.worldsingles.com
stsystem.worldsingles.com
worldsingles.com
colormelove.worldsingles.com
www.worldsingles.com
worldsingles.com
stauth.worldsingles.com
billingadmin.worldsingles.com
auth.worldsingles.com
worldsingles.com
www.worldsingles.com
stlogin.worldsingles.com
worldsingles.com
*.worldsingles.com
worldsingles.com
st.secure.worldsingles.com
stbilling.worldsingles.com
worldsingles.com
*.worldsingles.com
*.worldsingles.com
*.worldsingles.com
www.worldsingles.com
worldsingles.com
*.worldsingles.com
worldsingles.com
*.worldsingles.com
system.worldsingles.com
www.worldsingles.com
*.worldsingles.com
worldsingles.com
worldsingles.com
affiliate.worldsingles.com
stbillingadmin.worldsingles.com
www.worldsingles.com
*.worldsingles.com
worldsingles.com
*.worldsingles.com
*.worldsingles.com
*.worldsingles.com
*.worldsingles.com
*.worldsingles.com
worldsingles.com
sni.cloudflaressl.com
primg.worldsingles.com
auth.worldsingles.com
admin2016.worldsingles.com
worldsingles.com
stpreview.worldsingles.com
worldsingles.com
api.worldsingles.com
admin2016.worldsingles.com
*.worldsingles.com
*.worldsingles.com
*.worldsingles.com
*.worldsingles.com
stadmin.worldsingles.com
www.worldsingles.com
worldsingles.com
worldsingles.com
worldsingles.com
*.worldsingles.com
worldsingles.com
www.worldsingles.com
*.worldsingles.com
stadmin.worldsingles.com
*.worldsingles.com

Certificate

The complete raw certificate details for *.worldsingles.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDs8lIATnXAwvo/0uPZ9
ZQtXie4kvBO92KH7YjXHFDS+eSBuwWur72GEY5sOUHMrmIQEtzeznp8JgN/g1WHT
1d7aaGVR/1xBiwEEeq1/fkvKXB4qaXk6MRtvCcpLc/GRsardCAHcuSV7RhlLhWS6
lKzVZbRu7/GY+REIaoQY7HsngcBAFEM2PiFUdOsV5yvqZ0rjqQsLoE5Qma3IL9Qu
1itFH5S9gzEuvVTm23SZ2HQZUr9G9Z/vItkJNemL5BYOblNjsjIdPchy+y1C4iBz
HqIYEVKR0b8ZhjbxnGhn5wR3AtTBq3zTjoU27hG5Im0k/2CseLxhzQke8HMgz5ot
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14892055384014868679457159775342770751
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-05 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.worldsingles.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17702573371589945271913996554776743740411811824629240356413910858532602065687197606537441663161654749253944584982112408734957375751239117052446695414541965153855723291557547796345126119586137097071550531546577419406296912052397608825486017377967430711281706774129050680055383418159429946624656202079967978306177204887590457393335096509342580296601547263573299131820355484204315939903936351242961543518269268378728310676894290402842098008224080917386378489465671520820367156912584487905973278763858396704166834829545257348972064971731751294546892361657761561206299786621554184788419407473937450072219856707856216239437
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0ced7a0e64d8807f0283b0a1887830855b0f1c41
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worldsingles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greeksingles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greeksingles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'albaniansingles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.albaniansingles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muslimsingles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.muslimsingles.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016ed38fa55a0000040300483046022100b10c39ff77dfc668ed4e0e1a28967277b7c7e699d98286990e98b01c53ca3e0c02210083d21ece15b4128910a74ecb1e599e9424944f5bad8d99da0e36a1034f0b5b380077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016ed38fa5f60000040300483046022100886854e875f790dbf63a8b6c529710fbcbf280a68d7fc77e461f7a6bda5a37fa022100e555ea29b1428b315bebf90fb98e3a09492312fbef27817039a514321d21364d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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