football.expedia.co.uk

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:da:fa:52:0f:5f:76:0e:67:15:13:ad:e9:8d:82:b3 was issued on by Amazon.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=football.expedia.co.uk

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:da:fa:52:0f:5f:76:0e:67:15:13:ad:e9:8d:82:b3
Serial Number (int): 19746189760017334336065442777744114355
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 76:7c:ff:e0:9d:58:b4:ea:cd:96:39:2b:db:f1:fa:59:73:c0:f1:00
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 59:07:19:6c:ea:49:81:c0:95:ab:49:6b:c5:2f:b1:22:22:0c:a9:8f
Fingerprint (sha256): 31:c5:92:3d:76:fc:da:93:96:73:c3:bd:ec:ff:00:c1:45:45:ec:cb:f4:fa:ff:2f:22:41:7c:be:4e:18:93:cd

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate football.expedia.co.uk

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for football.expedia.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

football.expedia.co.uk
football.expedia.de
*.lfc.expedia.pulselive.com
*.withyoualltheway.expedia.es
*.withyoualltheway.expedia.fr
*.football.expedia.co.uk
withyoualltheway.expedia.de
*.withyoualltheway.expedia.it
withyoualltheway.expedia.it
withyoualltheway.expedia.fr
*.football.expedia.fr
*.withyoualltheway.expedia.de
*.football.expedia.de
withyoualltheway.expedia.es
football.expedia.fr
*.withyoualltheway.expedia.co.uk
withyoualltheway.expedia.co.uk

Other certificates including the domain name expedia.co.uk

(limited to 100 certificates)
www.expedia.com
*.hotelplanner.com
movie-quote-phrasebook.expedia.co.uk
vc.expedia.co.uk
movie-quote-phrasebook.expedia.co.uk
inside.expedia.co.uk
discoverbudapest.expedia.co.uk
christmas-past.expedia.co.uk
www.visitscotland.expedia.co.uk
*.hotelplanner.com
trains.expedia.co.uk
www.expedia.com
www.muchmorocco.expedia.co.uk
*.hotelplanner.com
*.hotelplanner.com
vc.expedia.co.uk
www.expedia.com
football.expedia.co.uk
Hollandtripbuilder.expedia.de
bcexplorer.expedia.com.au
www.expedia.com
playlister.expedia.co.uk
www.expedia.com
*.hotelplanner.com
worldofmusic.expedia.co.uk
photography.expedia.co.uk
access.expedia.com
www.expedia.com
jurawhisky.expedia.co.uk
w.expedia.co.uk
*.hotelplanner.com
discoverthemagicdubai.expedia.co.uk
www.expedia.com
movie-quote-phrasebook.expedia.co.uk
www.expedia.com
groups.expedia.co.uk
groups.expedia.co.uk
www.expedia.com
w.expedia.co.uk
Jerusalem.expedia.co.uk
accent-map.expedia.co.uk
www.helpinghand.expedia.co.uk
ww.expedia.co.uk
photography.expedia.co.uk
*.hotelplanner.com
myrealstockholm.expedia.co.uk
blog.expedia.co.uk
apim.expedia.com
roadtrips.expedia.co.uk
www.expedia.com
photography.expedia.co.uk
*.hotelplanner.com
visitscotland.expedia.co.uk
www.expedia.com
w.expedia.co.uk
*.hotelplanner.com
discoveriberostar.expedia.co.uk
christmas-past.expedia.co.uk
www.expedia.com
www.expedia.com
www.expedia.com
language-of-love.expedia.co.uk
*.hotelplanner.com
*.hotelplanner.com
www.expedia.com
language-of-love.expedia.co.uk
www.expedia.com
www.discoverireland.expedia.co.uk
photography.expedia.co.uk
m.expedia.co.uk
trains.expedia.co.uk
w.expedia.co.uk
visitcopenhagen.expedia.co.uk
access.expedia.com
*.hotelplanner.com
myrealstockholm.expedia.co.uk
www.visitscotland.expedia.co.uk
christmas-past.expedia.co.uk
www.expedia.com
inside.expedia.co.uk
*.hotelplanner.com
thingstodo.expedia.co.uk
blog.expedia.co.uk
*.hotelplanner.com
apim.expedia.com
christmas-past.expedia.co.uk
city-history.expedia.co.uk
london-street-food.expedia.co.uk
groups.expedia.co.uk
soundtravels.expedia.co.uk
photography.expedia.co.uk
*.hotelplanner.com
www.expedia.com
myrealstockholm.expedia.co.uk
holidayplanner.expedia.co.uk
city-history.expedia.co.uk
*.hotelplanner.com
welcomevideo.expedia.co.uk
blog.expedia.co.uk
christmas-past.expedia.co.uk

Certificate

The complete raw certificate details for football.expedia.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxkskrf/RegmC7euCdBB
yfAwjxsWANUI+yTnbgNw3a9fCcj5/4AYdBRuVEUvSfrC+6fv/kYHMyPZgSB6QDJH
1D+IUlDQC7NERTY5yFtUkxE+y451auSggRw5k8Xu7haDIihdBcxJuWXz1XQSdcta
Y3kInH+lBf80vS5gYBV/opQFgSR0H3ikdaqjUYP3gP2e5/489DofqCLLATMLIslc
VT72nAJGbcMBcF8Dx7OyY2mW48c72nzqlOpiNQcWGzwAdSuZhZaRio2wKWr9ZeSQ
D9Hz6NFA6mLjBRh6pb3/P1iJuRq+CgD8AYCpQ+EBP6Jjh1ksWq5j2ROH2PUgtWqm
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19746189760017334336065442777744114355
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'football.expedia.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26143742946133740946391174906737849141251247060138660812644624548282723887655485387510369073117290030210066534567390591261171296612268841405245830622124476384659261777174138957611279976861513780441687422212317525595788085904656056718981022840983161338408877679635177546039422961470690746335172182067839112724312202899385865976668924265456877688401842036622346509022059921432080168759583036614439773555071460610244687831116753137947675286887981105282300701552539019705490338162461836215020177560348526132284927952685191496103653318340390647509768057888142130012907140513925722542188354067276304517902709713634186667579
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							767cffe09d58b4eacd96392bdbf1fa5973c0f100
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (477 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'football.expedia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'football.expedia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lfc.expedia.pulselive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.withyoualltheway.expedia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.withyoualltheway.expedia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.football.expedia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'withyoualltheway.expedia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.withyoualltheway.expedia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'withyoualltheway.expedia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'withyoualltheway.expedia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.football.expedia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.withyoualltheway.expedia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.football.expedia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'withyoualltheway.expedia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'football.expedia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.withyoualltheway.expedia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'withyoualltheway.expedia.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002029654cd4dcbedce66edd4c03a3083f9125cf5fe3085172e5d3423b8512d5a8fc16312890985277a52e4b2a7edc6e439162b10c3781ca68f50439b33496b59b57fb39fc23802a9607c165d1a3afaced4bbb138d9778aff5e0d68e40d3a2ae37e18ae9a27d8361ae52c573148280498faf3fa8571a051a9d825079267138e1af15ed95ea08630d769abea9d5ffc909657f75f15682547c1fd627b4f9381a3fed5135fbba0bad2516d184ad276674bb7518bceeb524838edaa5f1a6b1d2d7200d742f5b547d84e1b505bfa410241fef52919b7952df8042a24a74ef43f29411c651348088bcdb896d8c344a8404070ddbf515990816ab18a61c0f0dc49575a253