timesspecial.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 02:43:9e:10:b2:4f:11:11:69:4e:3e:71:1a:96:f2:7e was issued on by Amazon.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=timesspecial.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:43:9e:10:b2:4f:11:11:69:4e:3e:71:1a:96:f2:7e
Serial Number (int): 3009545824643559878437449589532848766
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: c1:34:8b:5b:43:83:90:ac:64:31:2b:9c:a1:c6:3c:48:0b:11:6e:85
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): da:30:c7:39:98:e8:70:47:7a:71:df:49:e4:f9:75:27:7b:51:5a:05
Fingerprint (sha256): 23:ae:1a:8f:26:97:85:1e:e0:e4:c3:6d:48:e7:0d:0f:d9:77:5f:5d:c6:56:fc:3f:de:0a:f8:35:ce:49:c0:0e

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate timesspecial.com

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for timesspecial.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

timesspecial.com
timesspecials.in
www.timesspecialcontest.com
www.timesspecial.com
www.timesspecials.com
toispecials.in
toispecials.com
www.timesspecials.timesgroup.com
knowledgeknockoutcontest.com
www.timesspecial.timesgroup.com
timesspecials.timesgroup.com
www.toispecials.in
www.toispecials.com
www.toispecials.timesgroup.com
timesspecial.timesgroup.com
timesspecials.com
www.timesspecials.in
www.knowledgeknockoutcontest.com
toispecials.timesgroup.com
timesspecialcontest.com

Other certificates including the domain name timesspecial.com

(limited to 100 certificates)
timesspecials.timesgroup.com
timesspecial.com
timesspecial.com

Certificate

The complete raw certificate details for timesspecial.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzZoJvtNXaMHdYwztBlz
aRSgxBSwQTyD/wY0I9+nlQdoyzjxh+bA4gf2HPPYub9J0v4569wd0BuLijy7TSPD
8a+FDIhW3EdykH+LiaXz/Asza738Hyc6nshY8FyWLXwWz01vaWHi8wlSHYFFOv2t
5SggdcsRTbIiV1Xfaw1mVfHfVkMu/d0DV7JQAD9lxn0YEf4rkM56YgYEQz2Ib9ce
1rxF1bMxJ6XoQPsnDx/Z24yzXtDARkTHvgLanI64Y4+bFdoV0c4FYzd10s03TVBq
mriPeH4aXdEfhXlH8YVwUbtAC29XPn1MW084VSuDDVlbxROXwzfQ1mKWq0gOEZjI
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3009545824643559878437449589532848766
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'timesspecial.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20098719504711581263156863660014384155875077096967623468873023472431510788397101585577659666622362293616339076739802010911398406502350999164892867026829740213745487605510364730397232419828684369290105857212487217696823048060851701366757924551563833997460151798653377232425950017404929882367122442894335225725522659895308548723852730613684892341906805802612860812650217877464554890198514118178753268347083648939103524745789552269460803651145274741553277834044567270461703049619663576078449908173023584883084116808975479698560387714587438414786365906269445601140744127764102367535408025197658095603394411588445770663937
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c1348b5b438390ac64312b9ca1c63c480b116e85
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (504 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timesspecial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timesspecials.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timesspecialcontest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timesspecial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timesspecials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toispecials.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toispecials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timesspecials.timesgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knowledgeknockoutcontest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timesspecial.timesgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timesspecials.timesgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.toispecials.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.toispecials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.toispecials.timesgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timesspecial.timesgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timesspecials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timesspecials.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.knowledgeknockoutcontest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toispecials.timesgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timesspecialcontest.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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