*.coastalliving.com

Issued by Amazon

About this certificate

This digital certificate with serial number 02:cc:5e:52:84:e7:68:5c:4a:42:fd:cb:a0:68:9b:1c was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.coastalliving.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:cc:5e:52:84:e7:68:5c:4a:42:fd:cb:a0:68:9b:1c
Serial Number (int): 3719597635054781998037689077636569884
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 73:1a:68:dd:29:c5:74:8d:f2:cc:4e:36:7b:1f:84:64:c1:6f:e3:88
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 30:36:a8:de:0a:0a:fd:23:f9:8a:79:3d:db:a8:41:c3:7e:8b:bd:9d
Fingerprint (sha256): 2b:c3:40:fd:8f:c4:1e:d7:e7:c6:45:47:b4:25:47:04:29:c4:dd:f0:df:2c:70:f5:bc:bc:9e:10:74:81:a9:4f

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.coastalliving.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.coastalliving.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.coastalliving.com
coastalliving.com
*.element.coastalliving.com

Other certificates including the domain name coastalliving.com

(limited to 100 certificates)
*.allyou.com
office.timeinc.com
subscription.timeinc.com
subscription.timeinc.com
qa-subscription.ecommerce.timeinc.com
accounts.bhg.com
*.secure.meredith.com
secure.meredith.com
qa-subscription.ecommerce.timeinc.com
qa-subscription.ecommerce.timeinc.com
tls.automattic.com
office.timeinc.com
qa-subscription.ecommerce.timeinc.com
dev-dcms.www.timeinc.net
prod-dcms.www.timeinc.net
subscription.timeinc.com
xid.people.com
www.reference.dcms-sa.timeinc.net
qa-profiles-uat.timeinc.net
qa-profiles.timeinc.net
www.reference.dcms-sa.timeinc.net
tmpcaa.enterprise.corpad.timeinc.com
profiles.timeinc.net
dev-profiles.timeinc.net
rails.timeinc.net
xid.coastalliving.com
xid.coastalliving.com
prod-dcms.www.timeinc.net
xid.coastalliving.com
xid.people.com
www.reference.dcms-sa.timeinc.net
secure.meredith.com
pages.email.coastalliving.com
accounts.bhg.com
office.timeinc.com
xid.coastalliving.com
subscription.timeinc.com
accounts.bhg.com
prod-dcms.www.timeinc.net
subscription.timeinc.com
prod-dcms.www.timeinc.net
subscription.timeinc.com
dev-dcms.www.timeinc.net
subscription.timeinc.com
qa-profiles.timeinc.net
secure.meredith.com
accounts.bhg.com
*.coastalliving.com
dailycatch.coastalliving.com
secure.meredith.com
*.allyou.com
subscription-assets.timeinc.com
subscription.timeinc.com
subscription.timeinc.com
www.reference.dcms-sa.timeinc.net
rails.timeinc.net
rails.timeinc.net
*.coastalliving.com
subscription.timeinc.com
*.coastalliving.com
pages.email.time.com
*.health.com
subscription.timeinc.com
*.health.com
office.timeinc.com
dailycatch.coastalliving.com
pages.email.coastalliving.com
subscription.timeinc.com
secure.meredith.com
subscription.timeinc.com
subscription.timeinc.com
coastalliving.com
*.secure.meredith.com
subscription.timeinc.com
office.timeinc.com
xid.coastalliving.com
dailycatch.coastalliving.com
prod-dcms.www.timeinc.net
dailycatch.coastalliving.com
*.allyou.com
xid.myrecipes.com
prod-dcms.www.timeinc.net
dev-dcms.www.timeinc.net
coastalliving.com
dev-dcms.www.timeinc.net
qa-dcms.www.timeinc.net
pages.email.coastalliving.com
*.secure.meredith.com
pages.email.coastalliving.com
secure.meredith.com
accounts.bhg.com
rails.timeinc.net
prod-dcms.www.timeinc.net
subscription.timeinc.com
secure.meredith.com
accounts.bhg.com
accounts.bhg.com
prod-dcms.www.timeinc.net
qa-profiles.timeinc.net
xid.coastalliving.com

Certificate

The complete raw certificate details for *.coastalliving.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYlzyEy5LbO9yycOgVZ2
bjLHmwhKH9UyvoitmXa0doJSgtAKaI2mCBSb1BobK85cSHr29WhOjUDu3tjK61HS
+Av/IdP3ilLP8YW79N8v7mexF89rSuc1hhAR2knoijIsFtKonfvkrbuUTpJnDute
8TbXpK5vNjo+N5g4OXo5jJpVpvkhZyPLyo1V1KTLcMu250LyuYKkxNR3SDuKxy7Q
oeqyZJCcE67dJuYH2neDsc5unGT/e9qma9P9syDHgnsVklaWZz3paeVv28Vji7kp
4DgubTxC6h4s26ZJSWxvwbBnKX/DcvgWosdgK1Cz1CCd/Qn/qu1jO/bk+MTSvpvB
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3719597635054781998037689077636569884
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-12 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.coastalliving.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24936726321360184534780954403058098387347817489885313465700801255622760725824412532956477836310022189792711206548880125305148798019426598707067751724656049089667319611227802726800272130218291245981287485346898509151679319203711276708824423433784681318776087445201696144069680251599382064950829765629705868304344595635338576866710847534669707470103372971608326581337869020528988604922791460539591192591594423733985570530349321567570771370597282355548799528770873436795214249287510546982834714790316582530442816652124742942502988495134612989983540157373319016708411789498870298223359387214770251273493529988556805358069
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							731a68dd29c5748df2cc4e367b1f8464c16fe388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coastalliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coastalliving.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.element.coastalliving.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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