l468.drivingelectric.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:11:4c:71:ff:28:ce:5e:11:d4:fb:7a:74:d7:f1:af was issued on by Amazon.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=l468.drivingelectric.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:11:4c:71:ff:28:ce:5e:11:d4:fb:7a:74:d7:f1:af
Serial Number (int): 16040555490894333263354991287016616367
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7a:e6:b4:6f:51:ab:d9:4b:e2:f7:9e:f5:9c:df:10:3c:f5:d3:fe:2c
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): c7:c6:86:fe:c9:60:01:49:fc:c3:82:b1:da:ae:f6:02:e4:a9:d4:e8
Fingerprint (sha256): 15:ca:c4:f3:d1:50:c0:b7:e9:b1:62:9f:6e:9e:09:dd:89:b7:a6:ec:b6:8e:29:25:f4:ad:72:a5:4e:14:0d:4d

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate l468.drivingelectric.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for l468.drivingelectric.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

l468.drivingelectric.com
u989.theweek.com
h198.moneyweek.com
r468.evo.co.uk
b915.carbuyer.co.uk
d096.theweek.co.uk
g314.kiplinger.com
c729.autoexpress.co.uk

Other certificates including the domain name drivingelectric.com

(limited to 100 certificates)
aex-mms.autoexpress.co.uk
aex-mms.autoexpress.co.uk
aex-mms.autoexpress.co.uk
s3-cloudinary-pin.map.fastly.net
mms.drivingelectric.com
s3-cloudinary-pin.map.fastly.net
br.bikeradar.com
s3-cloudinary-pin.map.fastly.net
mms.drivingelectric.com
br.bikeradar.com
s4-san.cloudinary.com
ceros1.map.fastly.net
auth.charged.dennis.co.uk
drivingelectric.co.uk
z980.carthrottle.com
auth.charged.dennis.co.uk
commercial.drivingelectric.com
drivingelectric.com
aex-mms.autoexpress.co.uk
s3-cloudinary-pin.map.fastly.net
aex-mms.autoexpress.co.uk
s3-san.cloudinary.com
*.drivingelectric.com
s4-san.cloudinary.com
aex-mms.autoexpress.co.uk
s3-cloudinary-pin.map.fastly.net
s4-cloudinary-pin.map.fastly.net
s3-san.cloudinary.com
s3-cloudinary-pin.map.fastly.net
s3-san.cloudinary.com
s3-cloudinary-pin.map.fastly.net
l468.drivingelectric.com
br.bikeradar.com
s4-san.cloudinary.com
*.drivingelectric.com
tw-mms.theweek.com
newsletter.drivingelectric.com
l468.drivingelectric.com
s4-cloudinary-pin.map.fastly.net
aex-mms.autoexpress.co.uk
a.hwstatic.com
s4-cloudinary-pin.map.fastly.net
s3-san.cloudinary.com
s3-san.cloudinary.com
s3-san.cloudinary.com
drivingelectric.co.uk
br.bikeradar.com
*.ceros.com
auth.charged.dennis.co.uk
drivingelectric.com
aex-mms.autoexpress.co.uk
br.bikeradar.com
s3-san.cloudinary.com
newsletter.drivingelectric.com
s4-cloudinary-pin.map.fastly.net
br.bikeradar.com
aex-mms.autoexpress.co.uk
commercial.drivingelectric.com
s4-cloudinary-pin.map.fastly.net
aex-mms.autoexpress.co.uk
t075.itpro.co.uk
s4-cloudinary-pin.map.fastly.net
s4-cloudinary-pin.map.fastly.net
ceros1.map.fastly.net
s3-san.cloudinary.com
media.drivingelectric.com
s3-cloudinary-pin.map.fastly.net
s3-san.cloudinary.com
blueconic.motivfinance.co.uk
newsletter.drivingelectric.com
ceros1.map.fastly.net
aex-mms.autoexpress.co.uk
br.bikeradar.com
aex-mms.autoexpress.co.uk
s3-cloudinary-pin.map.fastly.net
s3-san.cloudinary.com
tw-mms.theweek.com
aex-mms.autoexpress.co.uk
a.hwstatic.com
br.bikeradar.com
aex-mms.autoexpress.co.uk
s3-cloudinary-pin.map.fastly.net
br.bikeradar.com
br.bikeradar.com
aex-mms.autoexpress.co.uk
drivingelectric.com
s3-san.cloudinary.com
drivingelectric.com
br.bikeradar.com
s3-san.cloudinary.com
drivingelectric.com
aex-mms.autoexpress.co.uk
z980.carthrottle.com
drivingelectric.com
ceros1.map.fastly.net
auth.charged.dennis.co.uk
s3-san.cloudinary.com
s4-cloudinary-pin.map.fastly.net
s3-san.cloudinary.com
tw-mms.theweek.com

Certificate

The complete raw certificate details for l468.drivingelectric.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzsYfKKJqLwQvUAv68MzP
wf8VYZOZxoe/6tc3j5/xHZdS4gnRAmG8KTITQ1YnKj9gG4IVPs0Kw2Wu/ABcxoAv
eo5DKSvyibsF1KjGi5trwq0kMIZc5ELdkQxtCtITC0I4y94DQCvLnb3rQWwWPijV
htcSrhaDJe3X7eDxEHmYl68qoBJxbyZNll12r95yLQGR1WqQo+RF0OyrgKI63j1H
j4ZTtTbZpP2/HYAAYgZj1Ibl2wIJWOR61Uq2aqIjY0ivZ6oyIFxAh1WgRf5uG+Y8
m8tjfXd5rMYtzLOdXrzc36Q8mWKeyAMxSQe2JKpLu7Dow6V6zFpsJWjs3GXnn/b9
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16040555490894333263354991287016616367
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'l468.drivingelectric.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26102788281308233649710516679039252128890146342615870173598044379252754873697533144309120090632275012832299084634243922991293259733526127991426858911696834354685998711879594583310615851806413886181752169053827059028583966958381836012348680588196623831564903737942397993003588416767635120947403146272278536322078405124880427709157494090168062396716572555303118759450066667472361294436283579102645770564595535453170554352443796291147747788929252901030398523474821035246029354173808326851341473021975187260115178591610975261645358183954160843934577326121976764280436373275073226502969703842382895437034794483058174524841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7ae6b46f51abd94be2f79ef59cdf103cf5d3fe2c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (168 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'l468.drivingelectric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u989.theweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h198.moneyweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r468.evo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b915.carbuyer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd096.theweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g314.kiplinger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c729.autoexpress.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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