theengineer.co.uk

Issued by Amazon

About this certificate

This digital certificate with serial number 0a:64:52:43:bd:52:1b:78:0e:d8:5a:f8:6a:c1:71:e0 was issued on by Amazon.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=theengineer.co.uk

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:64:52:43:bd:52:1b:78:0e:d8:5a:f8:6a:c1:71:e0
Serial Number (int): 13813178168168957876593151519142015456
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7b:fe:22:7b:af:7d:8f:36:ad:ce:fc:c5:13:12:99:87:e6:90:3c:3e
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 74:fa:5e:39:59:9a:0f:b4:56:c9:21:74:1d:df:67:a8:c8:d6:ba:92
Fingerprint (sha256): 3f:bf:76:e5:32:b3:7f:47:d3:d2:bb:d5:fd:55:4f:bf:65:8b:25:27:18:9a:d2:b9:5a:92:f8:e0:83:ba:4a:3a

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate theengineer.co.uk

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for theengineer.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

theengineer.co.uk
*.theengineer.co.uk
advancedmanufacturing.co.uk
*.advancedmanufacturing.co.uk
intranet.centaurmedia.com
theoystercatchers.com
*.theoystercatchers.com

Other certificates including the domain name theengineer.co.uk

(limited to 100 certificates)
ad.designweek.co.uk
theengineer.co.uk
ad.designweek.co.uk
salarysurvey.theengineer.co.uk
jobapi.theengineer.co.uk
z305.reinforcedplastics.com
theengineer.co.uk
jobs.theengineer.co.uk
www.centaur.co.uk
ad.designweek.co.uk
ad.designweek.co.uk
awards.theengineer.co.uk
ad.designweek.co.uk
ad.designweek.co.uk
ad.designweek.co.uk
theengineer.co.uk
theengineer.co.uk
ad.designweek.co.uk
awards.groundhandling.com
theengineer.co.uk
theengineer.co.uk
ad.designweek.co.uk
theengineer.co.uk
www.centaur.co.uk
ad.designweek.co.uk
theengineer.co.uk
*.theengineer.co.uk
www.theengineer.co.uk
theoystercatchers.com
e409.opticianonline.net
www.centaur.co.uk
awards.britishjournalofmidwifery.com
e409.opticianonline.net
ad.designweek.co.uk
theoystercatchers.com
ad.designweek.co.uk
myaccount.theengineer.co.uk
*.jobs.theengineer.co.uk
www.centaur.co.uk
theengineer.co.uk
ad.designweek.co.uk
ad.designweek.co.uk
theengineer.co.uk
ad.designweek.co.uk
jobs.theengineer.co.uk
www.centaur.co.uk
jobs.theengineer.co.uk
theengineer.co.uk
theengineer.co.uk
aawcsummits.com
jobs.theengineer.co.uk
american-scms.com
ad.designweek.co.uk
ad.designweek.co.uk
awards.theengineer.co.uk
e409.opticianonline.net
theengineer.co.uk
ad.designweek.co.uk
www.centaur.co.uk
www.centaur.co.uk
jobs.theengineer.co.uk
www.centaur.co.uk
dg-0189-6dc02cb.client-tls.adestra.com
ad.designweek.co.uk
awards.britishjournalofmidwifery.com
theengineer.co.uk
www.theengineer.co.uk
theengineer.co.uk
www.centaur.co.uk
ad.designweek.co.uk
staging.theengineer.co.uk
theengineer.co.uk
ad.designweek.co.uk
www.centaur.co.uk
jobs.theengineer.co.uk
awards.britishjournalofmidwifery.com
ad.designweek.co.uk
www.centaur.co.uk
salarysurvey.theengineer.co.uk
theoystercatchers.com
ad.designweek.co.uk
secure.theengineer.co.uk
www.centaur.co.uk
www.theengineer.co.uk
jobs.theengineer.co.uk
secure.theengineer.co.uk
salarysurvey.theengineer.co.uk
salarysurvey.theengineer.co.uk
ad.designweek.co.uk
ad.designweek.co.uk
dg-0053-2e1bb71.client-tls.adestra.com
theengineer.co.uk
salarysurvey.theengineer.co.uk
*.theengineer.co.uk
*.theengineer.co.uk
theoystercatchers.com
ad.designweek.co.uk
theengineer.co.uk
skinintegrityvegas.com

Certificate

The complete raw certificate details for theengineer.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiouyHciieLoc0Mn6syv
WmXM2LmQKuR4Z/0amJT44Gb/dhie05QkLNnVDScxA/ErjTtl3Ltee3TEOJE4DmC6
cMl7o98Zvs7tmISgbIgOmwIkNuJvhdC2eILJIFgOkm59BKkUugET8xD4h1iITwVo
FuOSw3k0X8pSm580ky4seNHu0C10f6pgiLox4fVqavoV5ZLrnT51Mx4ABUPtmOG3
HT1BMN5slOryhQy46YPUMTTTZBdNRudsj688nzwIYBH45rgPKflFl1C2kKveJ7aQ
SQXboPvgtiHJlQ+g27OZBwrcvzkTUIIjT/Gb39AqfegPzO4AXPoYf8mbOk6rJYbV
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13813178168168957876593151519142015456
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-04 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'theengineer.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20471406491998172438169647974239763951294696372646473073307521298826635185990749248606914146621547552711136894788261429337227809964365984609879776620703182329256676186884375636238742971746010533468578463333025222387922073978854185335828696527669070809642524329765744658146779801260284829460007972509505098695074104281968777289776525454454613587812652588793205792075765869923924171763852746713151555269166509303634581802926368272976882145466364402013676481170716715182562835143241989808872106442809729319797305657490477946635233315685740346261584606851795668526968433606055349972569388704890239006588951954846252455271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7bfe227baf7d8f36adcefcc513129987e6903c3e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (178 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theengineer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theengineer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advancedmanufacturing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.advancedmanufacturing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intranet.centaurmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theoystercatchers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theoystercatchers.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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