winit-stage.motorcyclenews.com

Issued by Amazon

About this certificate

This digital certificate with serial number 08:4b:ed:b8:cd:d6:3e:e7:09:c5:6a:e4:bc:56:77:26 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=winit-stage.motorcyclenews.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:4b:ed:b8:cd:d6:3e:e7:09:c5:6a:e4:bc:56:77:26
Serial Number (int): 11028067803430841313296011541851043622
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7e:92:5c:06:45:83:e1:3c:24:d1:01:ed:6e:34:6c:fc:ca:6f:51:8d
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 69:94:b0:9b:a8:e5:c3:38:d7:66:fd:19:2f:06:9e:40:75:d2:18:9a
Fingerprint (sha256): 4d:ae:93:2c:f5:35:77:9b:0d:57:04:e2:d7:3c:d3:fe:1f:19:b2:f7:25:51:0c:34:a6:1d:b9:e3:44:9a:63:6e

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate winit-stage.motorcyclenews.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for winit-stage.motorcyclenews.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

winit-stage.motorcyclenews.com

Other certificates including the domain name motorcyclenews.com

(limited to 100 certificates)
sp.gosanangelo.com
*.motorcyclenews.com
cmp.am-online.com
www.bauermedia.co.uk
winit-stage.winchristmas.co.uk
winit.planetradio.co.uk
winit.coolfm.co.uk
*.parkers.co.uk
winit.metroradio.co.uk
winit.bauerpublishing.com
winit.rockfm2.co.uk
twinit-production.herokuapp.com
winit.metroradio2.co.uk
sellyourbike.motorcyclenews.com
www.bauermedia.co.uk
*.parkers.co.uk
www.lembit.dev.motorcyclenews.com
winit.metroradio.co.uk
sellyourbike.motorcyclenews.com
winit.metroradio.co.uk
www.bauermedia.co.uk
mcncompare.motorcyclenews.com
www.bauermedia.co.uk
winit.todaysgolfer.co.uk
sp.motorcyclenews.com
adnoncentaur3.abasoft.co.uk
sp.motorcyclenews.com
local.motorcyclenews.com
www.bauermedia.co.uk
insurance.motorcyclenews.com
winit-stage.bauerpublishing.com
*.parkers.co.uk
winit.metroradio.co.uk
winit-stage.bauerpublishing.com
winit.motorcyclenews.com
www.motorcyclenews.com
winit.metroradio.co.uk
winit.metroradio.co.uk
sellyourbike.motorcyclenews.com
*.leads.motorcyclenews.com
www.motorcyclenews.com
winit.metroradio.co.uk
winit.westsound.co.uk
www.bauermedia.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
*.parkers.co.uk
winit.metroradio.co.uk
www.bauermedia.co.uk
www.dev.motorcyclenews.com
winit.tay3.co.uk
www.bauermedia.co.uk
www.bauermedia.co.uk
*.leads.motorcyclenews.com
sp.motorcyclenews.com
*.parkers.co.uk
winit.metroradio.co.uk
winit.model-rail.co.uk
winit-stage.winchristmas.co.uk
mcncompare.motorcyclenews.com
winit.metroradio.co.uk
www.bauermedia.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
sp.motorcyclenews.com
winit.metroradio.co.uk
adnoncentaur3.abasoft.co.uk
winit.metroradio.co.uk
winit.planetradio.co.uk
www.bauermedia.co.uk
clickswin.bellamagazine.co.uk
winit.metroradio.co.uk
www.bauermedia.co.uk
winit.bikemagazine.co.uk
winit-stage.motorcyclenews.com
*.parkers.co.uk
winit.metroradio.co.uk
www.bauermedia.co.uk
winit-stage.bauerpublishing.com
winit.metroradio.co.uk
shop.motorcyclenews.com
sp.gosanangelo.com
sp.motorcyclenews.com
www.bauermedia.co.uk
www.bauermedia.co.uk
winit.bauerpublishing.com
winit.mfr3.co.uk
www.bauermedia.co.uk
winit.mfr2.co.uk
*.parkers.co.uk
winit.mfr.co.uk
winit.metroradio.co.uk
winit.metroradio.co.uk
forum.aws.motorcyclenews.com
winit-stage.bauerpublishing.com
forum.int.motorcyclenews.com
winit.metroradio.co.uk
members.stg.motorcyclenews.com

Certificate

The complete raw certificate details for winit-stage.motorcyclenews.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm58WsvjvLdZfaFabtCAT
Xo9WdSx5EqSNDUjsw1Jb3q0rtwtOkGXZvhBaVpV1LtZ8GA/jmk4zeLnGN+QyDdRZ
PpjdBMFOJS5uL5EcTb3GcBJ/FafQg5ICpqqnclDg8CCf3qIUsNRpv8gPaqCv+0dq
b4N1dvSKf6tbfr1CEuq+JEDi20Zk2TPqDor/G2+7axuUKlQFU5CGwxjPp6W3TVg8
Y0JLTs1ZAOEt92XTCwqDTJTBzmzlqdjXzopzBgRI6LPfCxds5lUvEaE1n3JCWFcF
BT+aFiAGVeNa5H77GGlZwi2bnCyS0MwH5PP2wyraHlXae5n8D3lWYGpLxkiOqzEs
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11028067803430841313296011541851043622
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'winit-stage.motorcyclenews.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19645386815982788095099020738653553952395004808439947761620927690285807335566084015699881265732968100985194096246617627125553001440930210800418343539013873369602618691322176828519954252584073030934280183616869084177141406707547201656984776992062507021816691705118044849125077114055147386366266499639007889856306075588362706079472041633330857118455514673841689950376978343326561017665990112131338048037244548925847076362077481024167503442784770505066045130181212920021699698948160541980784298606220763634792308917357949361068339007538623662843125497510514857133656251573375882562039631609991662440629575601419835223161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7e925c064583e13c24d101ed6e346cfcca6f518d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'winit-stage.motorcyclenews.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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