fallback-frontpage.live.schibsted.tech

Issued by Amazon

About this certificate

This digital certificate with serial number 06:a5:cf:d2:43:1b:cf:4f:c6:aa:4b:9a:cd:b9:00:d9 was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=fallback-frontpage.live.schibsted.tech

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:a5:cf:d2:43:1b:cf:4f:c6:aa:4b:9a:cd:b9:00:d9
Serial Number (int): 8836312073838941344048813906939412697
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 52:5e:f4:ea:15:72:16:dd:b6:1d:ef:2a:f5:bf:fe:37:be:57:ec:da
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): fd:08:48:1e:5b:a1:69:27:ab:c9:ee:17:c1:7d:39:be:fc:1c:cf:8b
Fingerprint (sha256): 22:ff:06:a6:dc:2d:97:19:07:ed:1a:e3:8e:4d:aa:87:cf:e6:bb:1d:5d:8b:be:5b:74:f0:fd:3f:1e:9a:86:4c

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate fallback-frontpage.live.schibsted.tech

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fallback-frontpage.live.schibsted.tech

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fallback-frontpage.live.schibsted.tech
www.aftonbladet.se
fallback.aftonbladet.se

Other certificates including the domain name schibsted.tech

(limited to 100 certificates)
live-api-prod.schibsted.tech
vip.schibsted.tech
schibsted.tech
*.schibsted.tech
*.schibsted.tech
static.prod.schibsted.tech
folk.schibsted.tech
*.dev.convox.schibsted.tech
vip.schibsted.tech
folk.schibsted.tech
fallback-frontpage.live.schibsted.tech
schibsted.tech
eventhub.primary.live.schibsted.tech
*.schibsted.tech
*.sls.sa.schibsted.tech
ap.no
schibsted.tech
*.fallback.live.schibsted.tech
*.primary.live.schibsted.tech
*.schibsted.tech
*.pre.convox.schibsted.tech
*.schibsted.tech
*.pre.convox.schibsted.tech
liveblog-users-images.schibsted.tech
fallback-frontpage.live.schibsted.tech
*.schibsted.tech
schibsted.tech
*.schibsted.tech
schibsted.tech
vip.schibsted.tech
redirect.schibsted.tech
schibsted.tech
liveblog-static-assets.schibsted.tech
ap.no
live-api-prod.schibsted.tech
*.pro.convox.schibsted.tech
static.prod.schibsted.tech
folk.schibsted.tech
*.schibsted.tech
ap.no
schibsted.tech
*.dev.schibsted.tech
*.live.schibsted.tech
ap.no
schibsted.tech
*.schibsted.tech
vip.schibsted.tech
ap.no
static.prod.schibsted.tech
liveblog-embed.schibsted.tech
*.pro.se.convox.schibsted.tech
ap.no
*.pro.de.convox.schibsted.tech
live-api-prod.schibsted.tech
*.pro.convox.schibsted.tech
schibsted.tech
ap.no
*.pre.convox.schibsted.tech
ap.no
ap.no
*.dev.convox.schibsted.tech
*.schibsted.tech
live-api-prod.schibsted.tech
liveblog-static-assets.schibsted.tech
*.schibsted.tech
core-header.schibsted.tech
*.dev.convox.schibsted.tech
*.schibsted.tech
*.bord4.convox.schibsted.tech
*.pro.se.convox.schibsted.tech
liveblog-users-images.schibsted.tech
*.pro.de.convox.schibsted.tech
folk.schibsted.tech
fallback-frontpage.live.schibsted.tech
*.sa.schibsted.tech
liveblog-avatars.schibsted.tech
*.pre.convox.schibsted.tech
*.pre.se.convox.schibsted.tech
primary.live.schibsted.tech
schibsted.tech
most-read.schibsted.tech
ap.no
*.live.schibsted.tech
live-timeline-addon.schibsted.tech
schibsted.tech
schibsted.tech
ap.no
*.pro.convox.schibsted.tech
live-api-prod.schibsted.tech
liveblog-embed.schibsted.tech
schibsted.tech
schibsted.tech
schibsted.tech
*.pro.convox.schibsted.tech
schibsted.tech
liveblog-static-assets.schibsted.tech
ap.no
ap.no
schibsted.tech
vip.schibsted.tech

Certificate

The complete raw certificate details for fallback-frontpage.live.schibsted.tech in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzCKc9k0zzDeQJq2w8CI
Z+GssEpbaUwDq75umt9WN/DnrVhFsh0OOLnXdgmYUt8m8WRQw/348NBExbvJ64v8
xXszxifRi5hfGa/sVij06DFaSWMuVoUcOIGIaENSVLUs5dZl2Zf1+pyGwPI0HW5n
s4VD37Ga8Mj7TcKhFfvySqIoLgMd7scLDZQ1sv1E/cd3MPyITnjOlfAZwWLeizHM
ejn7JR7d+X/kRcP+M8IvujURh+iObmJs4hTf4XUrrLSERhlz5xmVMCqSxBmjsQSq
Z52WtU/tuUurR3nO/vJqD62wn/hPNMrJxdxPGKsE50gWQiC3IwcgJITx9TTJNMz6
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8836312073838941344048813906939412697
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fallback-frontpage.live.schibsted.tech'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21610686524692149243090457136226309289178030020277965614230363499346123539186531330427669209280515016475579304882322051318424383021821562619556591842164459370783564761994963111153376529502235327186879841500647211846443177579647488161080625489190761923512092235256316883188648526465376515400668422068399052805360562589160436451431969429729278123281434168381218662060963662699200177651239113113286797956005761011311061574136091300206124343724600998133231616698798620595998242191004667567198297428171559437951341084477056703753622935094708047583883274861876101536896567966661240259277782608214163644183037191724087442023
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							525ef4ea157216ddb61def2af5bffe37be57ecda
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fallback-frontpage.live.schibsted.tech'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aftonbladet.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fallback.aftonbladet.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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