*.wynnresorts.com

- Wynn Resorts Holdings, LLC -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 06:7f:b6:7c:33:2d:dd:eb:27:6f:18:cb:ad:15:c4:e4 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Wynn Resorts Holdings, LLC

Organization: Wynn Resorts Holdings, LLC
State / Province: Nevada
Locality: Las Vegas
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:7f:b6:7c:33:2d:dd:eb:27:6f:18:cb:ad:15:c4:e4
Serial Number (int): 8638490914422619862631580878794769636
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 39:e8:ad:68:be:1e:44:d1:5a:62:9f:5f:12:a0:33:18:3b:1e:62:5d
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): a2:94:e0:c3:a7:cc:a1:d4:b6:71:83:f1:38:65:09:07:6d:cd:5e:18
Fingerprint (sha256): 3d:96:5a:67:80:7e:4c:5f:d8:da:d1:69:8c:78:8b:f2:59:5e:55:d0:97:95:a3:37:c2:78:f0:86:d7:21:61:63

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-3.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-3.crl

Check the revocation status for certificate *.wynnresorts.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.wynnresorts.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.wynnresorts.com
wynnresorts.com

Other certificates including the domain name wynnresorts.com

(limited to 100 certificates)
vress.wynnresorts.com
eol.wynnresorts.com
wef.wynnresorts.com
s3-cloudinary-pin.map.fastly.net
s3-cloudinary-pin.map.fastly.net
sip.wynnpalace.com
wynnazurefw01.azure.wynnresorts.com
acedge.wynnmacau.com
s3-san.cloudinary.com
www.wynnmeetings.com
access.wynnlasvegas.com
access.wynnlasvegas.com
wef.wynnresorts.com
api.wynnresorts.com
wynnresorts.com
s3-san.cloudinary.com
s3-cloudinary-pin.map.fastly.net
wynnresorts.com
s3-san.cloudinary.com
s4-cloudinary-pin.map.fastly.net
mail.wynnresorts.com
www.wynnmeetings.com
s3-cloudinary-pin.map.fastly.net
mail.wynnresorts.com
s4-cloudinary-pin.map.fastly.net
s4-cloudinary-pin.map.fastly.net
s3-san.cloudinary.com
s3-cloudinary-pin.map.fastly.net
s3-san.cloudinary.com
s3-cloudinary-pin.map.fastly.net
securemail.wynnresorts.com
s4-cloudinary-pin.map.fastly.net
s4-cloudinary-pin.map.fastly.net
purchasing.wynnresorts.com
a.hwstatic.com
www.wynnmeetings.com
vress.wynnresorts.com
s4-cloudinary-pin.map.fastly.net
s3-san.cloudinary.com
press.wynnresorts.com
s3-san.cloudinary.com
s3-san.cloudinary.com
MACVPMSPROAPP15
purchasing.wynnresorts.com
s3-san.cloudinary.com
s4-cloudinary-pin.map.fastly.net
s3-san.cloudinary.com
ds.wynnresorts.com
s3-san.cloudinary.com
s4-cloudinary-pin.map.fastly.net
skypeweb.wynnlasvegas.com
s4-cloudinary-pin.map.fastly.net
mail.wynnresorts.com
purchasing.wynnresorts.com
vress.wynnresorts.com
s4-cloudinary-pin.map.fastly.net
thewire.wynnresorts.com
s4-cloudinary-pin.map.fastly.net
s4-cloudinary-pin.map.fastly.net
www.wynnresorts.com
mdm.wynnresorts.com
wynnresorts.com
purchasing.wynnresorts.com
s3-san.cloudinary.com
wynnresorts.com
s3-san.cloudinary.com
s3-san.cloudinary.com
eol.wynnresorts.com
thewire.wynnresorts.com
thewire.wynnresorts.com
purchasing.wynnresorts.com
thewire.wynnresorts.com
sip.wynnpalace.com
wynnresorts.com
*.wynnresorts.com
wynnresorts.com
s3-cloudinary-pin.map.fastly.net
s3-san.cloudinary.com
s4-cloudinary-pin.map.fastly.net
a.hwstatic.com
wynnresorts.com
s3-san.cloudinary.com
s4-cloudinary-pin.map.fastly.net
wynnresorts.com
eol.wynnresorts.com
s3-san.cloudinary.com
wynnresorts.com
s3-san.cloudinary.com
*.wynnresorts.com
api.wynnresorts.com
s3-san.cloudinary.com
s4-cloudinary-pin.map.fastly.net
s4-cloudinary-pin.map.fastly.net
s3-san.cloudinary.com
s3-cloudinary-pin.map.fastly.net
api.wynnresorts.com
seg.wynnlasvegas.com
mail.wynnresorts.com
s3-san.cloudinary.com
s3-san.cloudinary.com

Certificate

The complete raw certificate details for *.wynnresorts.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCWaLmgOLn8XcFOEXkWH
yfvagor5QPXSUVHAoCKH0gu6oeQwpHSrRjJMSN5Egh9VCa7j+0UhGXfjvpBva8Vy
KED4X2+f3NSesMJsMLu/+epfp7uG2zoxXq3uu1wbrTsbPP6b14E/oaGmFf9yGAQ0
th8Xnk+RADiyOeiDSAXCLl4HDItbjhdtUi0ZfkWck5wAjPfLFtNnW0Nc0ahNl4PL
YzLxe1I/c/WwlslH2a82O8gKnrg28U9OjbpiTOovRlohqrph0+XuHrqgC+r+CGHd
LKmtSWePXF6JAGEcBErldgjXtML0AsGlWJlrd/LJmTUqGmEIfP5ULU53JQdt75Ve
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8638490914422619862631580878794769636
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nevada'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Las Vegas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wynn Resorts Holdings, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.wynnresorts.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23751343704338698008930120416883800890377752370721053283770378847382581229399604752166689863666842614729099474482914886367522278132866494991078100836550112993740409385858266031298805486709214730770845880513906708767668840349128799738114533444667367120405689529014744638577358304359898588420526962449825149028914041285865886582149109607322479387537167472200725584450398573180078602110826104562809844473336751139609321691690371354749635936591484271762486987563059495546998226404799738563378058635663140655779120268500250093916456574751164128033408408640938836085334746159301837349633345955587160484072313266507657600661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							39e8ad68be1e44d15a629f5f12a033183b1e625d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wynnresorts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wynnresorts.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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