*.media-allrecipes.com
Issued by Amazon
About this certificate
This digital certificate with serial number 0e:26:9b:b1:2e:61:c8:fe:33:05:d2:0e:41:ea:a3:34 was issued on by Amazon.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.media-allrecipes.com
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:26:9b:b1:2e:61:c8:fe:33:05:d2:0e:41:ea:a3:34Serial Number (int): 18809657032841002122971560057714156340
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 54:0c:58:73:d1:36:22:a2:0c:29:a8:7f:4b:c5:ff:6b:54:3e:de:7c
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 78:4a:89:e4:18:ca:8d:0b:fb:07:cf:82:04:38:f1:fe:fb:7d:5c:ac
Fingerprint (sha256): 3a:e1:96:d7:ed:6d:63:43:9a:fe:f9:39:1d:a1:af:50:c1:70:fe:15:58:0f:c4:77:b2:34:d1:0a:cb:24:da:75
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl
Check the revocation status for certificate *.media-allrecipes.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.media-allrecipes.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.media-allrecipes.com
secureimages.allrecipes.com
images.allrecipes.com
secureimages.allrecipes.com
images.allrecipes.com
Other certificates including the domain name media-allrecipes.com
(limited to 100 certificates)
*.media-allrecipes.com
*.media-allrecipes.com
*.media-allrecipes.com
*.media-allrecipes.com
*.media-allrecipes.com
*.arci.allrecipes.com
*.media-allrecipes.com
images.meredith.com
*.media-allrecipes.com
*.media-allrecipes.com
*.media-allrecipes.com
*.media-allrecipes.com
*.arci.allrecipes.com
images.meredith.com
images.meredith.com
*.arci.allrecipes.com
*.arci.allrecipes.com
*.arci.allrecipes.com
*.media-allrecipes.com
*.media-allrecipes.com
*.media-allrecipes.com
*.media-allrecipes.com
*.arci.allrecipes.com
*.media-allrecipes.com
images.meredith.com
*.media-allrecipes.com
*.media-allrecipes.com
*.media-allrecipes.com
*.media-allrecipes.com
*.arci.allrecipes.com
images.meredith.com
images.meredith.com
*.arci.allrecipes.com
*.arci.allrecipes.com
*.arci.allrecipes.com
Certificate
The complete raw certificate details for *.media-allrecipes.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGFzCCBP+gAwIBAgIQDiabsS5hyP4zBdIOQeqjNDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjA4MTQwMDAwMDBaFw0yMzA5MTIy MzU5NTlaMCExHzAdBgNVBAMMFioubWVkaWEtYWxscmVjaXBlcy5jb20wggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwPhHPTHC/DKOqZxOJuVa+CLmYr13W G++TZAQkt6rIhrTux+lTBcGkpNdjSXwE1XIT6bS72yy0h9cYly2J0SqYKcc+8nhQ LdqoByg5nX1yd4Dv9cq39usbjDurE4OToTRj/btaHIuwI33U45V5xICvzaIUmN6Q c2LHckVw6pe9AaYHJ2itNMwJ1EE03xMOYJRN5fg5rJLjmWZPJAw/HHqSH2PR1kP+ MuwK2zf/asqTX89XGvCVT+4RZ0O56g4/8mjG4MyGAskA+wyOOdMnitxweQv52UAJ LPltz5jhM6U+5/4IQsPNab4GkV2T7QDzrBdf/aMrMCd7UDOSVTaBQgM9AgMBAAGj ggMkMIIDIDAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4E FgQUVAxYc9E2IqIMKah/S8X/a1Q+3nwwVQYDVR0RBE4wTIIWKi5tZWRpYS1hbGxy ZWNpcGVzLmNvbYIbc2VjdXJlaW1hZ2VzLmFsbHJlY2lwZXMuY29tghVpbWFnZXMu YWxscmVjaXBlcy5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjA9BgNVHR8ENjA0MDKgMKAuhixodHRwOi8vY3JsLnNjYTFi LmFtYXpvbnRydXN0LmNvbS9zY2ExYi0xLmNybDATBgNVHSAEDDAKMAgGBmeBDAEC ATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFi LmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5h bWF6b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAwggF9BgorBgEE AdZ5AgQCBIIBbQSCAWkBZwB2AK33vvp8/xDIi509nB4+GGq0Zyldz7EMJMqFhjTr 3IKKAAABgppISpAAAAQDAEcwRQIhAMuGgX+0JDqnVMtOEKQkkD4wKh0DdTQNh4ML ASZLB5VoAiAGSiQ9pxbMxq8M9bz5PwpHiVgt6alpRzB0HS1zJLdQHwB2ADXPGRu/ sWxXvw+tTG1Cy7u2JyAmUeo/4SrvqAPDO9ZMAAABgppISpMAAAQDAEcwRQIgFfHN Dg+7C4K0YJXndyykbW8vvljLbb60wX5ePA6A8eUCIQDgU7qG9/anEhW8ruZrVkYj V2Oj1+jvC8ZGfBVgZGdRcwB1ALc++yTfnE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl 7bSZAAABgppISpkAAAQDAEYwRAIgSX+R1DxpnIJZY6zNEpWsOjdrcIm5bMDohS9h L7dsc/4CIH/+w6cxjg6OOm216Ztfw0PyTuFYsqXQOrMHdOvYCJyhMA0GCSqGSIb3 DQEBCwUAA4IBAQB0IEH+SVuWe/SxvA9uUF9iK2jgCMOZ7Fy48at9krsd8PK0b05y NUz6OAcppRsNaP2AQbN2BNsI7tsYbNFFv9BMi6vsrw5MeFonF+ZucbDM7ouuYHzf Z9uOpf6PMOJpp7B+BkOjkdSoLQWDnRQHPyzL4mobNILl12kOXCX9Oy0EXlvZb6R8 nV7TEBSG8KeXa6T6kCkzwSvS1yOJaU+V175tUAdws1LPnc2GsgBhxkklaZz7OYGa TxwPZ3wDIGjf/3OJOOdzGN2HvPi7vNq41DSg/QOePPb3Bpe4mvTDaJ48gCeQGsqI Q5e9ies5TbsCGh9aQACaLcu7tY/HsxWxCEIL -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8D4Rz0xwvwyjqmcTiblW vgi5mK9d1hvvk2QEJLeqyIa07sfpUwXBpKTXY0l8BNVyE+m0u9sstIfXGJctidEq mCnHPvJ4UC3aqAcoOZ19cneA7/XKt/brG4w7qxODk6E0Y/27WhyLsCN91OOVecSA r82iFJjekHNix3JFcOqXvQGmBydorTTMCdRBNN8TDmCUTeX4OayS45lmTyQMPxx6 kh9j0dZD/jLsCts3/2rKk1/PVxrwlU/uEWdDueoOP/JoxuDMhgLJAPsMjjnTJ4rc cHkL+dlACSz5bc+Y4TOlPuf+CELDzWm+BpFdk+0A86wXX/2jKzAne1AzklU2gUID PQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18809657032841002122971560057714156340 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-14 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-12 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.media-allrecipes.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30327800837275715115476949893087843990912785169614411198132763435235785259418412399902321296112983148059036206139522192077001242527846152875531503441743107694393447265511089314492223036475895527353745350068679570894302954804783390381975653255938601931432031141055921025922160735963940339003872801802388064257389610571877031509661412836956144697836684265766039768248962738666123657734308261744978272524287848012198390081741946202906495742512224282104360112332805395279003406810244206906432424367277795869398563770302019539045810465467464985375654575451833958846046105594606643821850245213498855550430245776161031455549 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 540c5873d13622a20c29a87f4bc5ff6b543ede7c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.media-allrecipes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureimages.allrecipes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.allrecipes.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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