dv.paysafecash.com

Issued by Amazon

About this certificate

This digital certificate with serial number 04:bb:3a:8c:c3:5b:90:94:22:90:d5:2c:e5:26:03:21 was issued on by Amazon.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dv.paysafecash.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:bb:3a:8c:c3:5b:90:94:22:90:d5:2c:e5:26:03:21
Serial Number (int): 6289059027845711970171883868303786785
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 99:30:7e:95:c6:fd:75:63:ee:0b:95:b6:55:32:5e:e7:98:75:69:36
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 91:09:26:d5:65:13:0d:8d:66:56:4d:82:6e:9e:b0:90:56:21:ca:20
Fingerprint (sha256): 30:09:3e:dc:ee:f9:46:1a:25:98:64:6c:b8:55:7d:5d:35:3e:5a:ad:8f:d5:06:13:f5:46:06:ab:75:d5:95:b3

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate dv.paysafecash.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dv.paysafecash.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dv.paysafecash.com
www.dv.paysafecash.com
origin.dv.paysafecash.com
www2.dv.paysafecash.com
2.dv.paysafecard.com

Other certificates including the domain name paysafecash.com

(limited to 100 certificates)
registration.paysafecash.com
registration.dv.paysafecash.com
paysafecash.com
*.paysafecard.com
registration.paysafecash.com
promotion.paysafecash.com
go.paysafecash.com
dv.paysafecash.com
akamai-san29.exacttarget.com
customer-api.it.paysafecash.com
registration.dv.paysafecash.com
paysafecash.com
www.paysafecash.com
*.mt.paysafecard.com
*.pr.paysafecard.com
registration2.st.paysafecash.com
registration.st.paysafecash.com
customer-api.paysafecash.com
registration2.dv.paysafecash.com
*.dv.paysafecard.com
pages.mailer.paysafecash.com
paysafecard.com
*.paysafecard.com
view.mailer.paysafecash.com
paysafecash.com
*.pr.paysafecard.com
customer-api.st.paysafecash.com
dv.paysafecash.com
it.paysafecash.com
akamai-san29.exacttarget.com
customer-api.test.paysafecash.com
st.paysafecash.com
*.paysafecard.com
customer-api2.dv.paysafecash.com
customer-api.test.paysafecash.com
*.paysafecard.com
registration.st.paysafecash.com
cloud.mailer.paysafecash.com
registration.dv.paysafecash.com
*.mt.paysafecard.com
test.paysafecash.com
cloud.mailer.paysafecash.com
*.dv.paysafecard.com
customer-api.it.paysafecash.com
customer-api.st.paysafecash.com
paysafecash.com
click.mailer.paysafecash.com
it.paysafecash.com
go.paysafecash.com
paysafecash.com
customer-api.paysafecash.com
cloud.mailer.paysafecash.com
pages.mailer.paysafecash.com
paysafecard.com
customer-api.test.paysafecash.com
go.paysafecash.com
customer-api2.it.paysafecash.com
registration.test.paysafecash.com
st.paysafecash.com
customer-api.paysafecash.com
*.mt.paysafecard.com
paysafecash.com
paysafecash.com
test.paysafecash.com
go.paysafecash.com
akamai-san29.exacttarget.com
customer-api.it.paysafecash.com
customer-api.paysafecash.com
customer-api.dv.paysafecash.com
www.paysafecash.com
*.dv.paysafecard.com
customer-api.test.paysafecash.com
*.pr.paysafecard.com
customer-api.st.paysafecash.com
view.mailer.paysafecash.com
promotion.paysafecash.com
dv.paysafecash.com
2.it.paysafecash.com
registration.paysafecash.com
registration.test.paysafecash.com
pages.mailer.paysafecash.com
*.paysafecard.com
registration.paysafecash.com
go.paysafecash.com
st.paysafecash.com
go.paysafecash.com
registration.st.paysafecash.com
registration.paysafecash.com
dv.paysafecash.com
pages.mailer.paysafecash.com
go.paysafecash.com
*.pr.paysafecard.com
customer-api.st.paysafecash.com
*.dv.paysafecard.com
paysafecard.com
click.mailer.paysafecash.com
*.dv.paysafecard.com
customer-api2.st.paysafecash.com
www.paysafecard.com
paysafecard.com

Certificate

The complete raw certificate details for dv.paysafecash.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsijhb4Mxps3WnE4GbXw6
kOstF9J8bvG8qnrTLj4+jn1fZm9oTEyNWNMzpArepw08dRgTjbdPNIZCSAzUFVdk
qinYtUq1u9PvP3Dwbm/7bQTFGnmvxa/1cXYNDdUfc6b92eeWKDo3JlDAElQ6CY0c
dahSQAb9wyYO2dcX6mzXVwGCPq4JbZmmfK28itW6CCIys+sL44LYpv9TNlR58MsP
rCX2w1AkgdKwtVYtigHj2m60pKA/w/4LWf6/FZXs4n2LTi02tPm/OAJkdvMdRR0Q
jUNQnKcTObMZcvzDCqyVoUYNEbhFG2xE5B2A5VfXtBS2/YhFI3r5RgCmgTfnZZ/2
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6289059027845711970171883868303786785
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dv.paysafecash.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22490577262997762241090661329992503040505919999443074583495110088305958831562823449450473673942670665466857147998783998536792426524066955105266840389819235705757467296678218175952303018140098901314857404845690941587231582747279990998810930174339756794450411943110811890911025752367199161479288225120223860503524975301354470549353176771373234101493315426735803467817097913106711973475037629942811266952713728369402007468084537275541039659301693361692048780183721628436134078073192352681409073946066805619824462891363273267706424960022539508487031459944910627272902162138344156467871842421768685650779483961255935342257
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							99307e95c6fd7563ee0b95b655325ee798756936
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dv.paysafecash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dv.paysafecash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.dv.paysafecash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.dv.paysafecash.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2.dv.paysafecard.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000b03b972f66672f5e68ee033c4dc72b20a66609e838bbdff758e8ea55abd322d0e79c5f10c49b3412fdb72f03b2a07ccc71114976332326f6553155576b8619f52aa9d8e498a2ad57a90cecfa70b2411335e6f4eb49da4358fb47e52293a80e701c74fe14d7a7c214158d097e3cf177b57f4a005824431e3f5373927f96745ef27964008e148105780dde72982c42054e4f0896db737698d88dd57d56cdb177aac571e9a468b241595e09581291e560b3d7ce82256d56f52a243f343524233898372ae0df7c41c2667f0fc16a0f47379b22e6fce348a938250fcaf08d4c4f66a33f02929f0c92bd8b8243783f2a219833ecd1ada46cae65a8b82598323c73d4f