*.spotlight.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:17:a6:60:b2:b8:81:3e:a1:b6:0b:d1:ed:ed:ba:93 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.spotlight.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:17:a6:60:b2:b8:81:3e:a1:b6:0b:d1:ed:ed:ba:93
Serial Number (int): 18731989309944315242411735320946915987
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 9f:28:ae:94:49:b3:c0:c2:66:da:03:46:a7:15:33:3c:c4:94:ba:70
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 3a:f7:2c:7c:3f:cf:1f:89:b5:77:a4:70:b3:c7:6e:43:07:b6:b9:f5
Fingerprint (sha256): 3d:35:86:4f:ad:d2:50:ce:6a:eb:38:8f:6c:bf:0b:d8:2f:88:0f:99:09:eb:c3:45:94:b6:42:60:40:fc:44:19

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.spotlight.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.spotlight.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.spotlight.com
spotlight.com

Other certificates including the domain name spotlight.com

(limited to 100 certificates)
tls.automattic.com
status.3dcart.com
cwl.status.cloudsigma.com
*.spotlight.com
ssl388459.cloudflaressl.com
ssl388460.cloudflaressl.com
status.airbrake.io
ssl388459.cloudflaressl.com
ssl388459.cloudflaressl.com
status.airbrake.io
ssl388460.cloudflaressl.com
ssl388459.cloudflaressl.com
ssl388460.cloudflaressl.com
ssl388458.cloudflaressl.com
status.3dcart.com
status.3dcart.com
status.3dcart.com
ssl388459.cloudflaressl.com
status.airbrake.io
ssl388460.cloudflaressl.com
ssl388459.cloudflaressl.com
ssl388460.cloudflaressl.com
ssl388458.cloudflaressl.com
ssl388459.cloudflaressl.com
ssl388459.cloudflaressl.com
status.3dcart.com
status.airbrake.io
ssl388458.cloudflaressl.com
join.spotlight.com
ssl388458.cloudflaressl.com
ssl388458.cloudflaressl.com
ssl388459.cloudflaressl.com
ssl388460.cloudflaressl.com
ssl388459.cloudflaressl.com
ssl388460.cloudflaressl.com
ssl388459.cloudflaressl.com
ssl388459.cloudflaressl.com
status.airbrake.io
ssl388458.cloudflaressl.com
join.spotlight.com
ssl388459.cloudflaressl.com
ssl388459.cloudflaressl.com
status.3dcart.com
status.3dcart.com
*.spotlight.com
ssl388458.cloudflaressl.com
ssl388459.cloudflaressl.com
ssl388460.cloudflaressl.com
status.3dcart.com
ssl388460.cloudflaressl.com
status.3dcart.com
ssl388459.cloudflaressl.com
*.spotlight.com
status.3dcart.com
ssl388459.cloudflaressl.com
ssl388458.cloudflaressl.com
ssl388459.cloudflaressl.com
ssl388458.cloudflaressl.com
ssl388459.cloudflaressl.com
ssl388460.cloudflaressl.com
ssl388460.cloudflaressl.com
ssl388460.cloudflaressl.com
ssl388459.cloudflaressl.com
status.3dcart.com
ssl388460.cloudflaressl.com
join.spotlight.com
ssl388459.cloudflaressl.com
status.airbrake.io
ssl388459.cloudflaressl.com
ssl388458.cloudflaressl.com
*.spotlight.com
ssl388459.cloudflaressl.com
status.airbrake.io
status.airbrake.io
*.spotlight.com
ssl388460.cloudflaressl.com
status.airbrake.io
ssl388458.cloudflaressl.com
sni.cloudflaressl.com
ssl388460.cloudflaressl.com
ssl388459.cloudflaressl.com
ssl388458.cloudflaressl.com
tls.automattic.com
status.airbrake.io
status.airbrake.io
status.airbrake.io
ssl388459.cloudflaressl.com
ssl388458.cloudflaressl.com
join.spotlight.com
ssl388459.cloudflaressl.com
ssl388458.cloudflaressl.com
status.3dcart.com
ssl388459.cloudflaressl.com
tls.automattic.com
status.3dcart.com
ssl388458.cloudflaressl.com
tls.automattic.com
status.airbrake.io
*.spotlight.com
status.3dcart.com

Certificate

The complete raw certificate details for *.spotlight.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlfSRGrZWdxiQxFpBWz+
gdPECM6Stp6y5Ovhofrca8E3dLiqQzUcuRYvcSkvHtiFGKvaDpKjaEj7/ZEcc/d3
KpmDKqWieD/DQs37uwsF+UeQtbNIglOg9zkIiV4wmLwd+VtNxvwdH7mK1dSsVzqZ
2SkDCJPnMVAYz8vz3T6sjofhYphrBlfBi1Ak7SG89beWarcZ/wcQhmmDbw8HlITh
vTrqqJGsxuu0TdT9D5ram4rq7//3FA2xUaPtsgsWpHO+C3tdz17ps9gU80HM9laf
PyqoQdoV3Wv+Ssjh+i5dmsZkatFHh3KvRIYYgOsmqwa5bYFIAV4/fR+2nu7Rs+py
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18731989309944315242411735320946915987
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.spotlight.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22008771389016593294624677208953890922599503188395696096429028023630326444851947251379202979127701187375339293358375906334855904286151460196144819331221536654197141239333787885025451636395200159702960193275325380453126145561327649115978051506584706362560199753968470591102815021263240984125880335405879447010218133265419966795346202148713627253762418325126906754668389427963835616157782870592880110985708594482526498553980686139586893081025804823915884664599563448986476181824874060100278011394162059183884297879309740673750490995996015271060007215065320612970658351562642017548825598777220976679156819449870469985007
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f28ae9449b3c0c266da0346a715333cc494ba70
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spotlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spotlight.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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