queue.ticketania.com

Issued by Amazon

About this certificate

This digital certificate with serial number 05:f3:af:ab:b1:98:c5:59:69:7a:5e:6d:a4:f9:76:ec was issued on by Amazon.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=queue.ticketania.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:f3:af:ab:b1:98:c5:59:69:7a:5e:6d:a4:f9:76:ec
Serial Number (int): 7911431140208506878295204999644935916
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: e2:0d:03:e9:64:c7:65:1b:43:73:b1:fc:fb:3e:82:b1:23:f3:ce:be
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): e7:be:1f:94:a8:7d:3d:67:04:e9:49:76:33:ab:31:18:5e:44:5e:f3
Fingerprint (sha256): 52:87:44:77:9f:43:dc:c1:bb:8b:d4:fa:69:0d:20:02:65:49:ae:6c:e4:0d:1c:37:49:13:96:5f:89:90:08:14

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate queue.ticketania.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for queue.ticketania.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

queue.ticketania.com
queue.fanfares.cathaypacific.com
queue.tkt.ge
queue.sky.ch
q.axs.nu
queue.ticketarena.co.uk
dragoiscoming.tieks.com
attente.feq2019.com
queue.scandlines.com
harrypotterqueue.travelcircus.de
wait.fenty.com
wait.loud-project.com

Other certificates including the domain name ticketania.com

(limited to 100 certificates)
v3.ticketania.com
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
queue.ticketania.com
sslcertificate2.queue-it.net
queue.ticketania.com
queue.ticketania.com
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
queue.ticketania.com
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sslcertificate7.queue-it.net
sslcertificate2.queue-it.net
queue.ticketania.com
queue.ticketania.com
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
ticketania.com
queue.ticketania.com
mosa2balablabla.ticketania.com
sslcertificate2.queue-it.net
mosa2balablabla.ticketania.com
sslcertificate2.queue-it.net
queue.ticketania.com
sslcertificate1.test.queue-it.net
secure.ticketania.com
queue.ticketania.com
sslcertificate2.queue-it.net
secure.ticketania.com
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sslcertificate3.queue-it.net
sslcertificate2.queue-it.net
queue.ticketania.com
sslcertificate2.queue-it.net
queue.ticketania.com
v3.ticketania.com
queue.ticketania.com
queue.ticketania.com
queue.ticketania.com
queue.ticketania.com
sslcertificate2.queue-it.net
queue.ticketania.com
queue.ticketania.com
queue.ticketania.com
sslcertificate2.queue-it.net
queue.ticketania.com
ticketania.com
sslcertificate2.queue-it.net
queue.ticketania.com
sslcertificate2.queue-it.net
reazus.ticketania.com
queue.ticketania.com
ticketania.com
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
queue.ticketania.com
queue.ticketania.com
ticketania.com
queue.ticketania.com
mosa2balablabla.ticketania.com
mosa2balablabla.ticketania.com
queue.ticketania.com
sslcertificate2.queue-it.net
queue.ticketania.com
queue.ticketania.com
sslcertificate2.queue-it.net
queue.ticketania.com
queue.ticketania.com
sslcertificate2.queue-it.net
queue.ticketania.com
sslcertificate2.queue-it.net
queue.ticketania.com
sslcertificate2.queue-it.net
queue.ticketania.com
queue.ticketania.com
mpro-queue.ticketania.com
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
queue.ticketania.com
mpro-queue.ticketania.com
queue.ticketania.com
sslcertificate2.queue-it.net
queue.ticketania.com
queue.ticketania.com
queue.ticketania.com
queue.ticketania.com
queue.ticketania.com
queue.ticketania.com

Certificate

The complete raw certificate details for queue.ticketania.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz64/huFdHbEEWP6v9bmr
lOpOZaneGMZdp/uRUGWPcYLhXGOGVG7HOshk7mGqQUMMWZs+K0qbhPK15Wg+Cb70
VcsqYQxFVS2AhRKpCVp303g/yMdYkdTX2awGNF/kuUJCbkFOlaaH29ukhnWdSIK7
S4Si03ZomKYIzTvwbWvE/1dOu03PXqroqeDLfY8UhXBlCouK3QX9LlPyVxd1yswa
7eM88EdPNZYwiLsdVOEWesJd4o/HWjqdeCibx7C0KOxsvN9RN64Hyb49b5cZl+t/
kopB+vPz8ZRf1jXGNfhFfbeecMmPthsIGp2avAgBhOPZafxwYnSqAblDSVPSQ7Al
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7911431140208506878295204999644935916
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'queue.ticketania.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26217254094123872337518881031471298576578936192049855806438455478517511065012113482435786991240535639715853940789343587478290671821954338727660087175594855775489657629206859345794500291882277310210191407567730039679170919880439050884357319455268211843091915292873818246969051791538671912336310642708032712484879343794860093208953940789172230798673507059277222853362914446541845320481363760093558992864991349040527941367865049961275870472923153008981038507743006592699841465404746403386918594478508118586761677353549754922069253190223458730793783557310722345515386339916165953923449522189729778196348493405409495753991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e20d03e964c7651b4373b1fcfb3e82b123f3cebe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.ticketania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.fanfares.cathaypacific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.tkt.ge'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.sky.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'q.axs.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.ticketarena.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dragoiscoming.tieks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attente.feq2019.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.scandlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrypotterqueue.travelcircus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wait.fenty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wait.loud-project.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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