r468.evo.co.uk

Issued by Amazon

About this certificate

This digital certificate with serial number 06:a9:dd:77:2e:b7:1e:c2:80:09:a9:54:c5:10:38:72 was issued on by Amazon.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=r468.evo.co.uk

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:a9:dd:77:2e:b7:1e:c2:80:09:a9:54:c5:10:38:72
Serial Number (int): 8857357998933316458924640398098839666
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 9f:02:a8:ae:5d:e0:4e:80:f0:f1:96:7f:3e:fe:98:5b:ed:86:c1:08
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): b8:5c:3c:2a:d9:f5:2c:c7:ef:27:4c:f4:cf:a6:fd:8b:99:45:df:14
Fingerprint (sha256): 17:e6:84:9f:5d:11:d8:8c:a8:89:e6:d8:da:70:df:24:fa:bd:5d:59:02:72:83:23:fa:c5:16:6e:12:25:1b:12

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate r468.evo.co.uk

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for r468.evo.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

r468.evo.co.uk
u989.theweek.com
b915.carbuyer.co.uk
d096.theweek.co.uk
g314.kiplinger.com
c729.autoexpress.co.uk

Other certificates including the domain name evo.co.uk

(limited to 100 certificates)
www.pugpig.com
aex-mms.autoexpress.co.uk
san-001.ceros.com
dns-vetting1j.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
s2-san.cloudinary.com
san-001.ceros.com
san-001.ceros.com
subscription.theweek.co.uk
adspecs.dennis.co.uk
san-001.ceros.com
aex-mms.autoexpress.co.uk
san-001.ceros.com
www.pugpig.com
s2-san.cloudinary.com
aex-mms.autoexpress.co.uk
san-001.ceros.com
www.pugpig.com
s3-cloudinary-pin.map.fastly.net
s3-cloudinary-pin.map.fastly.net
dns-vetting1j.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
san-001.ceros.com
derstandard-spat.derstandard.at
dns-vetting1j.map.fastly.net
s3-cloudinary-pin.map.fastly.net
s3-cloudinary-pin.map.fastly.net
san-001.ceros.com
www.martechsocial.com
s2-san.cloudinary.com
dns-vetting1j.map.fastly.net
dns-vetting1j.map.fastly.net
s3-cloudinary-pin.map.fastly.net
www.pugpig.com
san-001.ceros.com
subscription.theweek.co.uk
evo.co.uk
san-001.ceros.com
dns-vetting1j.map.fastly.net
san-001.ceros.com
z980.carthrottle.com
s2-san.cloudinary.com
dns-vetting1j.map.fastly.net
www.pugpig.com
www.pugpig.com
s3-cloudinary-pin.map.fastly.net
s2-san.cloudinary.com
dns-vetting1j.map.fastly.net
s2-san.cloudinary.com
auth.evo.co.uk
*.content.pugpig-dev.com
derstandard-spat.derstandard.at
dg-0094-4765bd0.client-tls.adestra.com
dg-0094-4765bd0.client-tls.adestra.com
aex-mms.autoexpress.co.uk
mms.evo.co.uk
subscribe.evo.co.uk
dg-0094-4765bd0.client-tls.adestra.com
san-001.ceros.com
san-001.ceros.com
s3-san.cloudinary.com
s3-cloudinary-pin.map.fastly.net
dns-vetting1j.map.fastly.net
aex-mms.autoexpress.co.uk
s3-san.cloudinary.com
dns-vetting1j.map.fastly.net
aex-mms.autoexpress.co.uk
dns-vetting1j.map.fastly.net
s3-cloudinary-pin.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
www.pugpig.com
adspecs.dennis.co.uk
dns-vetting1j.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
www.pugpig.com
derstandard-spat.derstandard.at
auth.astonmagazine.co.uk
san-001.ceros.com
s3-san.cloudinary.com
s2-san.cloudinary.com
dns-vetting1j.map.fastly.net
s2-san.cloudinary.com
*.content.pugpig-dev.com
s3-cloudinary-pin.map.fastly.net
dns-vetting1j.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
s3-cloudinary-pin.map.fastly.net
s3-san.cloudinary.com
s2-san.cloudinary.com
san-001.ceros.com
adspecs.dennis.co.uk
san-001.ceros.com
dns-vetting1.map.fastly.net
dg-0094-4765bd0.client-tls.adestra.com
s3-cloudinary-pin.map.fastly.net
l468.drivingelectric.com
www.pugpig.com
san-001.ceros.com
dns-vetting1j.map.fastly.net

Certificate

The complete raw certificate details for r468.evo.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHaXMVPuAoWI3G4DRVVy
HHlHsW0KK8oST7D8l1ziM1EktwMZYidKA2327FHrTqeAluMJmjWUFQrvsfXONQHk
8o9d09Y2mgt1RA79pkg8Tv/khh/MXYrOg3gdQZyZUmZ3Wg8TumEBaYedBhtzl24U
bfSzpO3rr6ZopnPWdFmmT9pchNP0qGHHRWHp1Q7GotBoAFc732HjqIoedZ0/GZvW
kS9VHcwnlsEL4tDiNv9PB9HV3kKF09ukDVVAmHI2u1GnAoKFk3MB2nNBGbG0hk3L
7+0W2+jY3Z56nolMxTcXY6pulCwIJwzrvBohY+0Yjccxgok/hR21QqSj2vJFfim9
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8857357998933316458924640398098839666
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'r468.evo.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24296233756134229547285775220567392363822511390111343653976930966050048869399578692440637349166437390304391913695610520246953500805492721147556226534114457085191123854492074855804097390615982293044124761812356809422816777324597114654675684453939132357317691565034356337205066493283160778889115477143437600118453121085117143981075431308971119436174055473942082469832416732409910864442900682964139760685512999314847778152188359329756325481509228975472424025452941837475995471889888950903652809896382944427831280847156516561736893435861452160240023237768424387057357658944472210941122281716628110105553774121328956783979
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f02a8ae5de04e80f0f1967f3efe985bed86c108
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'r468.evo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u989.theweek.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b915.carbuyer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd096.theweek.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'g314.kiplinger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c729.autoexpress.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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