jwplayer.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 08:1c:c9:87:25:36:c6:92:90:0e:2c:1a:ee:f5:4e:76 was issued on by Amazon.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jwplayer.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:1c:c9:87:25:36:c6:92:90:0e:2c:1a:ee:f5:4e:76
Serial Number (int): 10783295749967740658087582060325981814
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: aa:1e:eb:f8:aa:8b:3b:88:e9:f6:be:f3:99:02:06:b8:f7:10:ac:56
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): e7:dd:9f:f4:f1:4b:71:e6:3f:05:33:32:d3:cf:bf:4a:df:9b:fa:f9
Fingerprint (sha256): 60:be:55:31:c4:d6:45:b0:c5:e5:19:4a:6f:91:3c:f9:fb:ba:29:c7:44:fd:f8:de:a9:cd:a6:e7:54:c5:83:bb

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate jwplayer.com

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jwplayer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jwplayer.com
videoplayerbidding.com
jwplatform.com
openvideoads.co.uk
*.jwplayer.com
jwshowcase.com
*.jeroenwijering.com
longtailvideo.com
*.videoplayerbidding.com
bitsontherun.com
openvideoads.com
*.longtailvideo.com
jwstation.com
*.jwstation.com
jeroenwijering.com
*.bitsontherun.com
*.openvideoads.com
*.jwplatform.com
*.jwshowcase.com
*.openvideoads.co.uk

Other certificates including the domain name jwplayer.com

(limited to 100 certificates)
statuspage.io
vicksot.com
statuspage.io
statuspage.io
statuspage.io
a3.shared.global.fastly.net
jwplayer.com
appstatus.dancecapsules.merce.broadleafclients.com
a3.shared.global.fastly.net
jwplayer.com
statuspage.io
appstatus.dancecapsules.merce.broadleafclients.com
www.wekick.app
appstatus.dancecapsules.merce.broadleafclients.com
releases.jwplayer.com
yuiki.jp
info.jwplayer.com
a3.shared.global.fastly.net
status.affirm.com
a3.shared.global.fastly.net
support.jwplayer.com
developer.jwplayer.com
beta-developer.jwplayer.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
supportfeedback.jwplayer.com
*.jwplayer.com
statuspage.io
*.jwplayer.com
hivebloom.com
jwplayer.com
intellocator.com
jwplayer.map.fastly.net
a3.shared.global.fastly.net
statuspage.io
developer.jwplayer.com
statuspage.io
info.jwplayer.com
statuspage.io
statuspage.io
statuspage.io
grimtictac.co.za
appstatus.dancecapsules.merce.broadleafclients.com
a3.shared.global.fastly.net
appstatus.dancecapsules.merce.broadleafclients.com
statuspage.io
a3.shared.global.fastly.net
jwplatform.com
api.test.boost.jwplayer.com
statuspage.io
statuspage.io
jwplayer.com
a3.shared.global.fastly.net
hook-dev.jwplayer.com
hook-dev.jwplayer.com
statuspage.io
jwplayer.com
appstatus.dancecapsules.merce.broadleafclients.com
a3.shared.global.fastly.net
a3.shared.global.fastly.net
yofardev.fr
a3.shared.global.fastly.net
newenanalytics.uy
statuspage.io
jwplayer.com
jwplayer.com
blucubemedia.com
a3.shared.global.fastly.net
arteycreaciones.com.co
statuspage.io
a3.shared.global.fastly.net
demos.jwplayer.com
api.test.boost.jwplayer.com
api.test.boost.jwplayer.com
statuspage.io
statuspage.io
lockdown.gaborcs.com
releases.jwplayer.com
a3.shared.global.fastly.net
statuspage.io
appstatus.dancecapsules.merce.broadleafclients.com
signatures.jwplayer.com
statuspage.io
statuspage.io
demos.jwplayer.com
releases.jwplayer.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
statuspage.io
a3.shared.global.fastly.net
appstatus.dancecapsules.merce.broadleafclients.com
sl.jwplayer.com
statuspage.io
statuspage.io
statuspage.io
a3.shared.global.fastly.net

Certificate

The complete raw certificate details for jwplayer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4+owm8aBFvfp181GURX
0RVF8X6baMSAryvWWDhrISir01NsgPcFEed9dAwvg9VDKQD/jF6/EwaEJCugE1+N
rU48aCXQfpNilb8zFOGgQ66EOCjkPnCgFLyBZo5O8MG+lNck4Ic/CiTIxvOEye2h
O3v0mforjBrXEaiIp3YP1PohbtIZAs9rBY3F5mKBXk6e3712YwvGmFLrvuMl7MzL
wawYHLpdXPydegudVv3SVr39XKsk6ugGdtBH/5OJH4y+Sk7EL+Q214uiauYcz503
YC/DfSTT75IjrNvzX1OaCGRy1TRo2c/texSStFGBUhMEnJK/VLPxE65F3uaPXthm
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10783295749967740658087582060325981814
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jwplayer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21657591149293773176050550553726546172774418685476165709098766698087424138310077276594903958909397398769576020422156750459900376166692533678172061442560877084474771287709097745455300519117845974306792838165072084135116016407137306856157813915752456775648977688991902339598388854294496707294826593017255592384467985443344652136816083530306805276481118128362913178470902280856423138520605334776476748716255927063339874804370693158367646367662091298660817014333658702906663807686598778620423816450066882778812856582351769743702918177841304350645229500129652358340203327241479854580907220496991307892301766096811311261261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa1eebf8aa8b3b88e9f6bef3990206b8f710ac56
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (384 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jwplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videoplayerbidding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jwplatform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openvideoads.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jwplayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jwshowcase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jeroenwijering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longtailvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.videoplayerbidding.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bitsontherun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openvideoads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.longtailvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jwstation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jwstation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jeroenwijering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bitsontherun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.openvideoads.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jwplatform.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.jwshowcase.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.openvideoads.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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