*.bauerradio.com

Issued by Amazon

About this certificate

This digital certificate with serial number 04:d1:e4:a4:20:91:05:02:2b:1e:f4:f0:17:ff:e0:11 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.bauerradio.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d1:e4:a4:20:91:05:02:2b:1e:f4:f0:17:ff:e0:11
Serial Number (int): 6406739419460565596146383318564200465
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 9b:5b:8d:32:ec:59:12:5d:51:47:5f:02:69:89:ef:a8:ca:61:9d:d9
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): ed:05:62:bf:7f:fd:bc:9a:ab:fe:11:5a:3a:0b:4f:49:a9:0b:83:e1
Fingerprint (sha256): 16:a4:2b:f6:f4:bb:ad:9a:65:02:f4:df:9b:25:c1:7b:f9:5e:b8:c4:a6:71:cc:58:9d:dc:5f:39:97:45:a1:30

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.bauerradio.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.bauerradio.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.bauerradio.com
*.planetradio.co.uk

Other certificates including the domain name bauerradio.com

(limited to 100 certificates)
gitlab.bauerradio.com
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
*.planetradio.co.uk
sni.cloudflaressl.com
listenapi.bauerradio.com
*.planetradio.co.uk
*.bauerradio.com
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
lapi.apollo.audio
cloudinary-sni.map.fastly.net
sni.cloudflaressl.com
*.adi.cloudinary-dev.com
gitlab.bauerradio.com
cloudinary-sni.map.fastly.net
stagingapi.bauerradio.com
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
dating.bauerradio.com
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
dating.bauerradio.com
cloudinary-sni.map.fastly.net
bauerradio.com
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
listenapi.planetradio.co.uk
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
stagingapi.bauerradio.com
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
listenapi.bauerradio.com
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
*.planetradio.co.uk
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
dating.bauerradio.com
brands.tools.bauerradio.com
dating.bauerradio.com
cloudinary-sni.map.fastly.net
sni.cloudflaressl.com
cloudinary-sni.map.fastly.net
aloud.com
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
dating.bauerradio.com
listenapi.bauerradio.com
cloudinary-sni.map.fastly.net
dating.bauerradio.com
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
ssl404632.cloudflaressl.com
cloudinary-sni.map.fastly.net
webentry.bauerradio.com
stagingapi.bauerradio.com
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
dating.bauerradio.com
*.planetradio.co.uk
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
*.bauerradio.com
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
listenapi.bauerradio.com
ssl404632.cloudflaressl.com
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
gitlab.bauerradio.com
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
content.bauerweb.co.uk
cloudinary-sni.map.fastly.net
cloudinary-sni.map.fastly.net
sni.cloudflaressl.com
cloudinary-sni.map.fastly.net

Certificate

The complete raw certificate details for *.bauerradio.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpF3GZp/m8MLsf+WrfgN
VM3QWTCzhmpjhHxy5D8KWwwAX4q9bXUEvreYpZdgmvIEoUKInWOSag3uYtAREdEe
2UPq5zuh/gEHyzL4ErJRWgm2dmy7xwbXZ5/lE8LyHmxNXjQ5dRff7WQOO7qOwi5Q
ph8FcsDDdpG/2gE9xamoFBow8NX35D/I5onukYkdQmSJkB6Lwo3PeujN2L28s2gS
goGEvlMFo1DWaKEfiRfnYzywAqKaYZe4PfNuajy45Jf0TzJXQhdh8EsmzXkZrIsf
IUWMJ73knQjO4xuGxZuU9pIiTDnggQtcZ9/vHzAFl70tiQxcwUh4n0A+25QDLVwf
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6406739419460565596146383318564200465
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.bauerradio.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24561962743984712117167109687380180898214363541809916717689705360939581297768734547432077068262485927473241514107336568443463781687599373337418768440495489816294031869336628996498937254677930456632216319369585347834286415926291351923981635213623869778925655670245733798388296777465661650086407706572214944439581471653616111982414516286498205864071957100664608769447390457777548764841453494322384375445691870617638318366452396399864259661761754803516793051498610807310415309219949207725234738708280176053148688162975865661396794135134182375644762271804700555089155100160509014476725537259179382375656287336850798681989
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b5b8d32ec59125d51475f026989efa8ca619dd9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bauerradio.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.planetradio.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016387cc00fd0000040300483046022100dfe1c11b47746da40ee54c6955112e42a6d5ea38d6fa32b90a7cfd8dd84b8de302210098b37f26ea8d29f641a53a90bb4843c598c52b5eebd078736eb134f20c984fa80076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016387cc01e70000040300473045022048d8664a9a95bce583af272071fc25c68571379d2f80ce5a121b48ee6914bda802210094475b41344946362fa1f14e969cb8058c313ae186c5165f3f7a668fd8804d48
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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