cdn.clivewalkden.co.uk

Issued by Amazon

About this certificate

This digital certificate with serial number 0b:fc:86:3e:34:20:5c:75:fb:9c:88:fe:37:7f:43:41 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cdn.clivewalkden.co.uk

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:fc:86:3e:34:20:5c:75:fb:9c:88:fe:37:7f:43:41
Serial Number (int): 15932689533150159143610911633421845313
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 19:d6:5f:33:26:c2:b6:4d:92:64:c9:69:c1:f3:e8:2e:9a:b0:e7:fd
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): d8:db:1a:4c:5f:e6:eb:b7:6f:23:ad:8c:68:46:83:0c:5b:ad:7f:53
Fingerprint (sha256): 43:bf:87:16:56:8e:a7:a6:d7:fb:b5:fb:da:36:1f:27:85:d7:91:c4:79:49:76:b7:a7:c4:09:44:d9:f6:ce:1c

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate cdn.clivewalkden.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cdn.clivewalkden.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdn.clivewalkden.co.uk

Other certificates including the domain name clivewalkden.co.uk

(limited to 100 certificates)
sweeps.clivewalkden.co.uk
sni64974.cloudflaressl.com
sozocms2.clivewalkden.co.uk
sni64974.cloudflaressl.com
cms.clivewalkden.co.uk
cwenterprises.co.uk
sni64974.cloudflaressl.com
sni64974.cloudflaressl.com
sni64974.cloudflaressl.com
clivewalkden.co.uk
sni64974.cloudflaressl.com
sni64974.cloudflaressl.com
sozocms2.clivewalkden.co.uk
train.clivewalkden.co.uk
dev.clivewalkden.co.uk
sni64974.cloudflaressl.com
coffee.clivewalkden.co.uk
cwenterprises.co.uk
snippets.clivewalkden.co.uk
clivewalkden.co.uk
sni64974.cloudflaressl.com
clivewalkden.co.uk
cms.clivewalkden.co.uk
sni64974.cloudflaressl.com
art.clivewalkden.co.uk
art.clivewalkden.co.uk
photos.clivewalkden.co.uk
sni64974.cloudflaressl.com
sni64974.cloudflaressl.com
sni64974.cloudflaressl.com
coffee.clivewalkden.co.uk
cwenterprises.co.uk
sni64974.cloudflaressl.com
art.clivewalkden.co.uk
sni64974.cloudflaressl.com
sni64974.cloudflaressl.com
sni64974.cloudflaressl.com
sni64974.cloudflaressl.com
photos.clivewalkden.co.uk
clivewalkden.co.uk
sni64974.cloudflaressl.com
clivewalkden.co.uk
sni64974.cloudflaressl.com
sni64974.cloudflaressl.com
sni64974.cloudflaressl.com
sni64974.cloudflaressl.com
sni64974.cloudflaressl.com
cdn.clivewalkden.co.uk
staging.clivewalkden.co.uk
sni64974.cloudflaressl.com
snippets.clivewalkden.co.uk
coffee.clivewalkden.co.uk
clivewalkden.co.uk
artwork.clivewalkden.co.uk
sni64974.cloudflaressl.com
sni64974.cloudflaressl.com
sozocms2.clivewalkden.co.uk
sni64974.cloudflaressl.com
dev.clivewalkden.co.uk
sni64974.cloudflaressl.com
sni64974.cloudflaressl.com
sni64974.cloudflaressl.com
sweeps.clivewalkden.co.uk
snippets.clivewalkden.co.uk
sni64974.cloudflaressl.com
telephone.clivewalkden.co.uk
cwenterprises.co.uk
sni64974.cloudflaressl.com
sni64974.cloudflaressl.com
clivewalkden.co.uk
sni64974.cloudflaressl.com
sni64974.cloudflaressl.com
telephone.clivewalkden.co.uk
artwork.clivewalkden.co.uk
dev.clivewalkden.co.uk
sni64974.cloudflaressl.com
carcrawler.clivewalkden.co.uk
staging.clivewalkden.co.uk
sni64974.cloudflaressl.com
cdn.clivewalkden.co.uk
sni64974.cloudflaressl.com
train.clivewalkden.co.uk
sni64974.cloudflaressl.com
sweeps.clivewalkden.co.uk
sni64974.cloudflaressl.com
sni64974.cloudflaressl.com
sozocms2.clivewalkden.co.uk
sni64974.cloudflaressl.com
sweeps.clivewalkden.co.uk
sni.cloudflaressl.com
sni64974.cloudflaressl.com
sweeps.clivewalkden.co.uk
sni64974.cloudflaressl.com
artwork.clivewalkden.co.uk
sni64974.cloudflaressl.com
sni64974.cloudflaressl.com
sni64974.cloudflaressl.com
sni64974.cloudflaressl.com
sni64974.cloudflaressl.com
sni64974.cloudflaressl.com

Certificate

The complete raw certificate details for cdn.clivewalkden.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAGe+0hzYKazfK51sFF0
Vg9ZPApUoe9yll4FHH9/TUWuRVcxQK4mImZOix8SvNfHvhOulS8e4murQ35Ajh7W
1c3xcirHe4drC4ucuAY86GGiixBQrMQDqX47Gk7cXq2bqx6M7/7qWtP4tIRuQK65
8x3jz4STMai4N36NhDyYT1GvlxvrtbX4SYsRP4QlrzO0xYGi/+iIqXKgKH/fbf7x
2l6AV3PpCJbvDY1Rnfu9IiX7mTP2iKDaBDNR8R2w+a6VYdmLWm+6lXzU9/9DmeF8
3RtxWc+AmRXXCzlGsYOosZIDEv0/B5qpx1aVNyi1an9QFUNrQW+A32P5KxnWSibK
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15932689533150159143610911633421845313
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdn.clivewalkden.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20198928150198754411088123814203810452184876411489439641757680204798585544657031379389326839113487158802151334433963252978645818847758201803905561826672315545964177215265149539551986961574314843702316330536288987676760699945967958395515263864510680985679524509888741880074302191539659004669432853286613998643305890035491389016728862474542782304223674455591461436108319280426678360819043163410151438020793697870151983634783292627205535635282315255053519574384740151434424362356975050434502602390183660454362558474846853614391761117661336144915898395571274011653879827460862788637112447814588985959933081453837475564049
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							19d65f3326c2b64d9264c969c1f3e82e9ab0e7fd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.clivewalkden.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0021407bf25765a94f1276b193c75822c12f44eea6c33af3fa12a879d2fc593ede154bd6c5f30818020e64ed533b5b8bd0b16ed229ad8a84372103e4f69e314ea73b7bed4c1bcf2dfaded539bf01c1366df987453a6a26f8d60cb18cbff717b1720b2c15518d0274a00bbefc3b0e3f30aac95d8b262c2dbe19c58a8465ea640f975ee7b27d0de65ff425d8eb5e96e89f7d3c584a6e8b8f6cc5819adb23c8eebe8770321c63a6bca3cc9d99b3280e1c91d347e5301dac5e35158c208ded611772963b42c838a6ee226e3881f25ae352aafe15a1d1078cd072e3fcd1a47c0fa6e15eab760b077ca932cff8d395542cb03a2dae3a397e4898724b463195854b50ece6