theoystercatchers.com

Issued by Amazon

About this certificate

This digital certificate with serial number 03:4b:e2:26:63:6b:b6:e2:a2:f4:d7:44:76:cc:81:a5 was issued on by Amazon.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=theoystercatchers.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4b:e2:26:63:6b:b6:e2:a2:f4:d7:44:76:cc:81:a5
Serial Number (int): 4381693117754695196830065915740324261
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 70:30:30:c5:d5:aa:b0:3e:d1:29:bc:61:16:35:5b:af:a7:9d:04:cc
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 0d:55:77:db:3f:21:1e:ed:30:50:cb:24:48:40:81:a0:a2:9e:c7:3c
Fingerprint (sha256): 45:0e:dd:0d:12:0c:ee:dd:07:89:de:d8:e6:3e:71:2d:57:48:62:71:72:53:22:56:ea:03:7e:df:35:90:e1:52

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate theoystercatchers.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for theoystercatchers.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

theoystercatchers.com
*.theoystercatchers.com
theengineer.co.uk
*.theengineer.co.uk
centaurmedia.com
*.centaurmedia.com

Other certificates including the domain name theoystercatchers.com

(limited to 100 certificates)
ceros1.map.fastly.net
designweek.co.uk
ceros1.map.fastly.net
ceros1.map.fastly.net
ceros1.map.fastly.net
ceros1.map.fastly.net
awards.theoystercatchers.com
club.theoystercatchers.com
ceros1.map.fastly.net
ceros1.map.fastly.net
www.theoystercatchers.com
ceros1.map.fastly.net
ceros1.map.fastly.net
ceros1.map.fastly.net
ceros1.map.fastly.net
theoystercatchers.com
ceros1.map.fastly.net
ceros1.map.fastly.net
theengineer.co.uk
ceros1.map.fastly.net
ceros1.map.fastly.net
ceros1.map.fastly.net
theoystercatchers.com
club.theoystercatchers.com
ceros1.map.fastly.net
ceros1.map.fastly.net
ceros1.map.fastly.net
ceros1.map.fastly.net
ceros1.map.fastly.net
ceros1.map.fastly.net
ceros1.map.fastly.net
ceros1.map.fastly.net
ceros1.map.fastly.net
*.ceros.com
awards.theoystercatchers.com
ceros1.map.fastly.net
theoystercatchers.com
ceros1.map.fastly.net
ceros1.map.fastly.net
ceros1.map.fastly.net
ceros1.map.fastly.net
ceros1.map.fastly.net
ceros1.map.fastly.net
www.theoystercatchers.com
ceros1.map.fastly.net
ceros1.map.fastly.net
club.theoystercatchers.com
club.theoystercatchers.com
ceros1.map.fastly.net
ceros1.map.fastly.net
ceros1.map.fastly.net
ceros1.map.fastly.net
ceros1.map.fastly.net
www.theoystercatchers.com
ceros1.map.fastly.net
ceros1.map.fastly.net
*.theoystercatchers.com
ceros1.map.fastly.net
theengineer.co.uk
*.theoystercatchers.com
www.theoystercatchers.com
*.ceros.com
ceros1.map.fastly.net
ceros1.map.fastly.net
theoystercatchers.com
ceros1.map.fastly.net
club.theoystercatchers.com
club.theoystercatchers.com
ceros1.map.fastly.net
theoystercatchers.com
ceros1.map.fastly.net
*.theoystercatchers.com
ceros1.map.fastly.net
theoystercatchers.com
ceros1.map.fastly.net
theoystercatchers.com
ceros1.map.fastly.net
www.theoystercatchers.com
theoystercatchers.com
ceros1.map.fastly.net
ceros1.map.fastly.net
ceros1.map.fastly.net
ceros1.map.fastly.net
club.theoystercatchers.com
club.theoystercatchers.com
ceros1.map.fastly.net
www.theoystercatchers.com

Certificate

The complete raw certificate details for theoystercatchers.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmwvsseKrbzQl0kxsEJO
XKIREnU/DNEkxgasXNukh31oh5jIQDRFRoixGPHvKKJyXZ4d7QE39JYzMQ+dIpgh
l56C/A4QyHWpmNucRsR4lU6siJ05ZOQ5SPFUfVYzBUKlMtwkmxHggtXL3jtblv2Q
BWlB7msXII9uoaZFX+BKmE4sd4OOg2k8Z7tZif51tpQeqAwibOfUzy9EIIIBkMum
Nq1Jubm8r8VlD5eje5StaNiLTXBwB2nLJ9RbYkrUmzkIzPS+/M780Spby4JnpikW
BZrXL+M0mr5ndu0sdqkasZ5TSktCngrsnYuF5QcpyeWr0v8UINaETKlir3VPkT/K
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4381693117754695196830065915740324261
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'theoystercatchers.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23028720167388837118645145215431852585050696127616989164775316489927653196821275023300114897661747353547996240684878392600416267244900231513662245255227942179688587117909192630333478362707484106916702186018913375235887326553432125655516724730087294528387118181220371824231533689535701322853368507451100872147596875124432016169465774337624462716162615202387026232195938853695662919789369711624301360333777448871134956286876282105069915778266635028536092706322651755720115787244648712199709758463291159153864681784827907715824424141509075211735616696375232855803938187455212349312830238802066900194007356015598519700009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							703030c5d5aab03ed129bc6116355bafa79d04cc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theoystercatchers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theoystercatchers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theengineer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theengineer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centaurmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.centaurmedia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016929fe777300000403004830460221008bc7b53cc519a8b66544a024190fd0c7b6a100e0da057aee8651db02b5293e0a022100844f77f50561daed5203c431c79a3e2347cf345fe7be1f692a70252f6febb2780076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016929fe78ba0000040300473045022100f2ae615a2757542cd6fbcc039f6321950a2b70e8584d3c71892525fde87af58402203f37b1e6acfb217394d88d76599aef3eb37f70b82f1c246555905c66bd7ba71b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000d823a2537aad7524a401346de6b292581f794e47fcc57984c3d2c0c2251e9c1ac6553045f557ed6c13a4f9253d452da2dfdb5b754c091bb6afaacb328555ceb7b950ac5cf4d299f86d6fcf9320b3dab64c9aed70e394b2c354495472d4119f3ed5144a0c9e4305d78c5b9c69d66f224afc44a6ab205ddd7a15759103ccdb836b0cf966e83819fa539b2520d0e5ccaec983e9a2f9ab7d43b49a7773a8ed3222c0231b084423b465e2407c237ed92f4ccfebea41186d11fa82bfe277cc57609a9093fb19fed59a5fe54b4917ddc00f7a1d818cdfbb89065f9854126025228c25aadb86ec012c30a986db2453ae8fa0748dca1c04ba338f5fa1d54a17f69d7bcac