*.torontolife.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0a:68:8c:ab:9b:cf:04:24:90:5e:af:f4:66:f9:36:fb was issued on by Amazon.

With 25 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.torontolife.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:68:8c:ab:9b:cf:04:24:90:5e:af:f4:66:f9:36:fb
Serial Number (int): 13835131964717525706386701009374754555
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0d:b6:73:fe:b1:83:c1:b7:65:c1:34:48:eb:e0:e9:be:43:36:20:16
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): f0:31:66:40:61:b8:cf:6f:20:13:3f:5b:96:22:74:a8:f4:d0:26:ff
Fingerprint (sha256): 65:a4:5c:b5:f9:34:ab:44:38:78:76:86:a2:88:3a:1e:67:36:eb:fd:b1:4e:ab:a6:30:73:1c:6c:a3:3d:7e:60

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate *.torontolife.com

25

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.torontolife.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.torontolife.com
canadianbusiness.com
hellomagazine.ca
*.chatelaine.com
*.secure.canadianbusiness.com
*.darwin.cx
torontolife.com
fashionmagazine.com
*.fr.chatelaine.com
chatelaine.com
ottawamagazine.com
*.canadianbusiness.com
*.macleans.ca
*.fashionmagazine.com
quillandquire.com
macleans.ca
*.chatelaine.darwin.cx
*.quillandquire.com
*.secure.darwin.cx
*.macleans.darwin.cx
*.fr.chatelaine.darwin.cx
*.hellomagazine.darwin.cx
*.ottawamagazine.com
*.hellomagazine.ca
*.todaysparent.darwin.cx

Other certificates including the domain name torontolife.com

(limited to 100 certificates)
stage.torontolife.com
nfoon.torontolife.com
stage.torontolife.com
torontolife.com
stage.torontolife.com
tburden.torontolife.com
www.torontolife.com
torontolife.com
secure.torontolife.com
members.torontolife.com
www.torontolife.com
*.torontolife.com
*.torontolife.com
members.torontolife.com
nfoon.torontolife.com
dev.torontolife.com
tburden.torontolife.com
qa.torontolife.com
*.torontolife.com
dev.torontolife.com
www.torontolife.com
*.torontolife.com
stage.torontolife.com
members.torontolife.com
secure.torontolife.com
torontolife.com
qa.torontolife.com
bhill.torontolife.com
stage.torontolife.com
dev.torontolife.com
*.torontolife.com
*.torontolife.com
qa.torontolife.com
secure.torontolife.com
*.torontolife.com
udobrowolska.torontolife.com
stage.torontolife.com
torontolife.com
stage.torontolife.com
torontolife.com
www.torontolife.com
tburden.torontolife.com
qa.torontolife.com
dev.torontolife.com
stage.torontolife.com
*.torontolife.com
udobrowolska.torontolife.com
ebrukson.torontolife.com
www.torontolife.com
stage.torontolife.com
torontolife.com
secure.torontolife.com
www.torontolife.com
hbaradaran.torontolife.com
dev.torontolife.com
dev.torontolife.com
www.torontolife.com
dev.torontolife.com
stage.torontolife.com
jmykolyn.torontolife.com
dev.torontolife.com
tburden.torontolife.com
torontolife.com
tburden.torontolife.com
dev.torontolife.com
tburden.torontolife.com
www.torontolife.com
*.torontolife.com
torontolife.com
www.torontolife.com
nfoon.torontolife.com
members.torontolife.com
*.torontolife.com
*.torontolife.com
torontolife.com
hbaradaran.torontolife.com
*.torontolife.com
tburden.torontolife.com
dev.torontolife.com
hbaradaran.torontolife.com
torontolife.com
listings.torontolife.com
stage.torontolife.com
torontolife.com
*.torontolife.com
tburden.torontolife.com
dev.torontolife.com
members.torontolife.com
members.torontolife.com
www.torontolife.com
*.torontolife.com
www.torontolife.com
*.torontolife.com
dev.torontolife.com
*.torontolife.com
tburden.torontolife.com
www.torontolife.com
*.torontolife.com
torontolife.com
*.torontolife.com

Certificate

The complete raw certificate details for *.torontolife.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtlJ5K+bif1iHZSNMTUJm
fP74Q0UZJlSyd05lIBTE9e8WOCyTgmT3t4TKwdpi6Gs+XKOL8aQhHNs8uO4pvqM9
1MUwyokmKGFFfWjeYLvHUaz0BwKV3tex8L4+j5HyL1C7Zg520bIWdiHvz/JSbr72
7Pfbbi7LcBZUeyDggp6/+b9AFVJU81Ra0kfexOVOVKcbEj8PnLNqLg5huoGoh93k
wrapAA8th3Z38k1HLouCiB3jHxi4wB9b48HNvl7eouaMrycwDBZXKHJWwSRMyd9d
wuQ1D2Ly1OqY/RL/hEthgFrsL9Qbg5NV9hTuDi6kVvbbKST17NQsAzQ8P8UtRVmH
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13835131964717525706386701009374754555
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.torontolife.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23016040616700766502351741323314449504338460808915421063706226942067007699418134669838471001730106621129357460677482107626239805360603012081374762046951363540660518908130588501203313150959550894416479149251288136083948743648707241464254306317797863385419172442311213344198589946945492108353831548544345332979111854925810616577768823737189952878636020219870436908335400216874379592853622335619714324123893286221024912171794561856911864248253713371009618340626000524299401373086566796747698436686171208759361478048463218156225938654511369387326496803534151309936348207609473679215020945288546062311491074579409690789661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0db673feb183c1b765c13448ebe0e9be43362016
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (523 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torontolife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canadianbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hellomagazine.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chatelaine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.canadianbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.darwin.cx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torontolife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fashionmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fr.chatelaine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatelaine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ottawamagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.canadianbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.macleans.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fashionmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quillandquire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macleans.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chatelaine.darwin.cx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quillandquire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.secure.darwin.cx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.macleans.darwin.cx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fr.chatelaine.darwin.cx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellomagazine.darwin.cx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ottawamagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hellomagazine.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.todaysparent.darwin.cx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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