static.abcotvs.com

Issued by Amazon

About this certificate

This digital certificate with serial number 05:f5:8c:6f:87:87:96:9b:51:f2:30:84:f6:42:b1:68 was issued on by Amazon.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=static.abcotvs.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:f5:8c:6f:87:87:96:9b:51:f2:30:84:f6:42:b1:68
Serial Number (int): 7921101082880554982361988897874030952
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 33:5b:97:6a:07:6d:a6:0b:0e:83:39:84:81:d9:b1:5e:11:4b:12:a5
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 47:c3:f5:4a:02:de:18:61:5e:30:94:0c:ca:1a:50:58:d7:47:dc:36
Fingerprint (sha256): 16:58:e3:3e:0a:1f:29:2a:ac:8d:cb:87:5a:e4:7f:ae:08:18:23:db:7a:c9:a5:9b:18:e1:23:6f:22:59:c5:34

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate static.abcotvs.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for static.abcotvs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

static.abcotvs.com
a.abclocal.go.com
cdn.abclocal.go.com
cdns.abclocal.go.com
media.abclocal.go.com

Other certificates including the domain name abcotvs.com

(limited to 100 certificates)
editions.geo.hosted.abcotvs.com
stage.api.abcotvs.com
abcotvs.com
cdn1.edgedatg.com
qa.static.abcotvs.com
cdns.abclocal.go.com
editions.geo.hosted.abcotvs.com
sweepstakes.abc.go.com
dev2.breakingnews.abcotvs.com
qa.siteeditor.abcotvs.com
editions.geo.hosted.abcotvs.com
stage.api.abcotvs.com
static.abcotvs.com
api.abcotvs.com
dev.sweepstakes.abc.com
clips.abcotvs.com
dev.sweepstakes.abc.go.com
static.abcotvs.com
preview.api.abcotvs.com
sweepstakes.abc.go.com
editions.geo.hosted.abcotvs.com
editions.geo.hosted.abcotvs.com
sweepstakes.abc.go.com
qa.static.abcotvs.com
static.abcotvs.com
api.abcotvs.com
editions.geo.hosted.abcotvs.com
qa.siteeditor.abcotvs.com
preview.api.abcotvs.com
sweepstakes.abc.go.com
editions.geo.hosted.abcotvs.com
qa.cdn.abcotvs.com
geo.hosted.abcotvs.com
geo.hosted.abcotvs.com
sweepstakes.abc.com
dev.static.abcotvs.com
editions.geo.hosted.abcotvs.com
static.abcotvs.com
api.abcotvs.com
abcotvs.com
qa.api.abcotvs.com
preview.api.abcotvs.com
preview.static.abcotvs.com
editions.geo.hosted.abcotvs.com
stage.api.abcotvs.com
cdn1.edgedatg.com
editions.geo.hosted.abcotvs.com
qa.api.abcotvs.com
qa.simplepost.abcotvs.com
editions.geo.hosted.abcotvs.com
qa.cms.abcotvs.com
cms.abcotvs.com
editions.geo.hosted.abcotvs.com
qa.api.abcotvs.com
qa.api.abcotvs.com
qa.breakingnews.abcotvs.com
api.abcotvs.com
qa.breakingnews.abcotvs.com
qa.api.abcotvs.com
cdn1.edgedatg.com
dev.cdn.abcotvs.com
cms.abcotvs.com
qa.api.abcotvs.com
api.abcotvs.com
dev2.cms.abcotvs.com
dev.sweepstakes.abc.go.com
dev2.cms.abcotvs.com
7online.com
siteeditor.abcotvs.com
jenkins.cd.prod.abcotvs.com
simplepost.abcotvs.com
editions.geo.hosted.abcotvs.com
dev.cdn.abcotvs.com
simplepost.abcotvs.com
editions.geo.hosted.abcotvs.com
api.abcotvs.com
cdn1.edgedatg.com
siteeditor.abcotvs.com
preview.api.abcotvs.com
editions.geo.hosted.abcotvs.com
static.abcotvs.com
geo.hosted.abcotvs.com
siteeditor.abcotvs.com
static.abcotvs.com
abcotvs.com
api.abcotvs.com
qa.simplepost.abcotvs.com
simplepost.abcotvs.com
editions.geo.hosted.abcotvs.com
breakingnews.abcotvs.com
geo.hosted.abcotvs.com
geo.hosted.abcotvs.com
qa.images.cms.abcotvs.com
breakingnews.abcotvs.com
sweepstakes.abc.go.com
qa.api.abcotvs.com
dev2.breakingnews.abcotvs.com
dev.cdn.abcotvs.com
cdns.abclocal.go.com
dev.api.abcotvs.com

Certificate

The complete raw certificate details for static.abcotvs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cQvzXboN6FuaNLHCGxD
Z/zasnzu4JWKhTEJ8kdbfC+lofJdToTZ0UHAlvbyitL7YQMHJ3cIfbZOh/x2NilI
euufxLlzPUPwp3EbhBdHUrkSx2QaHE2+BakxF14Z45IaAM60w1CFFGEglgfk/gug
TL99E7xoEwlAl516Mizua+NCEaUcv4FSrU33/WmAmmc3trTWkp6ChO032+rjtSXe
V/eN/MTgHWIyj6E9j2tMZ9JrIoBIu96U00Y4lp6TNxAybemZ3a9F6HWbtSczA+pd
qesS0DKJygK21d0LC5ydANNSXPxeXdc2mrVu/sHIDCDIlt3r9+jQvb/Brw9nbndZ
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7921101082880554982361988897874030952
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-29 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'static.abcotvs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26985502239457224472395652956515075070966653995426181115460824324811178152020874054635208406309564010668432043237573916643244519971135063170791448979504333113448274620165609453747499637744738896390924991214688803091247112565837289740263091422581977933504558999831853280737571830078948364640394942730220094543433206092668971931514378717892323592373117737682879851510721582618440053899356421895988697062103907982118593884891993096257694030477233312715594188866090936800181525685150146869224257834970602607976448453756912280453603986077421395916621475897760343584663385777536695722477939602559335725013744992364195699037
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							335b976a076da60b0e83398481d9b15e114b12a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.abcotvs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.abclocal.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.abclocal.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdns.abclocal.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.abclocal.go.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000b6329e54dd9914dac508b20f4e429226e51b772ba5c04e07fd07eac532eb4b94f3947359f573ddb87619cfef4acb4f50df5162ed7a9fff5762ea6ff14c8d8ff94c911b600911a45fe48172505b86bbea207832d84f7f595e2e6d8d99f40e032ea2e893eab20936a3f40ab29dd5c9af370ae91ab93d814c2e00304ffcc098ee6ff62502dae4850b698414f2dc23ae5adea33eb94cc5bfc14cc5694e5b1cd08be6b8b12e0df0bbb1cfce203cca0250e32e8b320823dacc4a320ee348dd5033ddf0f31463c3e89545e969538498e997a05803585082102a9b4f8033a7d9853a51f1a4a1191a2298dbc7cfb604cffe0de508626c71d52db3be4ac8d27a271aa2e59