watchdisneyfeqa.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 01:27:f0:c4:9f:3d:fc:3f:42:86:d1:10:92:72:8d:92 was issued on by Amazon.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=watchdisneyfeqa.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:27:f0:c4:9f:3d:fc:3f:42:86:d1:10:92:72:8d:92
Serial Number (int): 1536610929575555587011078915724840338
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 7e:1b:b0:e6:18:36:f7:eb:e5:15:ab:67:d2:47:ac:ba:fa:8b:bb:b3
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 72:b0:89:5c:a9:de:98:25:2e:35:9d:e5:2a:2d:eb:d4:37:02:6f:17
Fingerprint (sha256): 6a:a0:fd:73:f4:87:ea:9b:81:54:5b:30:c4:4d:ec:0c:e9:95:b8:48:b8:81:ef:17:e1:ef:ec:56:37:10:b1:5d

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate watchdisneyfeqa.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for watchdisneyfeqa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

watchdisneyfeqa.com
*.freeform.go.com
*.ngtvfeqa.com
*.abc-studios.com
*.abcstudios.go.com
*.showms.freeform.go.com
abcfeqa.com
abcstudios.go.com
*.disneynowqa.com
*.fftvfeqa.com
*.geo.hosted.watchdisneyfeqa.com
marvelfeqa.com
*.staging.marvel.com
fftvfeqa.com
ngtvfeqa.com
freeform.go.com
latamtvfeqa.com
*.abc.go.com
fxtvfeqa.com
*.disneynow.go.com
*.fxtvfeqa.com
*.abcfeqa.com
abc-studios.com
*.latamtvfeqa.com
*.marvelfeqa.com
*.us-east-1.aws.hosted.watchdisneyfeqa.com
disneynowqa.com
staging.marvel.com
*.cdn.watchdisneyfeqa.com
*.watchdisneyfeqa.com

Other certificates including the domain name watchdisneyfeqa.com

(limited to 100 certificates)
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com

Certificate

The complete raw certificate details for watchdisneyfeqa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt738WTZ9oLuJoxoLpSW7
UcttGZi5mClkXVRwyWjMByLVC4sEhtC3YzoGO3LNW+cmSIM3rA094mHq67FcsttE
g7aqMQleyXEDWzywiHrgZfN7nY5h73w5sHsPyx0HSBCOrt8aUm7nJTqHFhS2yq4T
wJWADsAgnwo3LrM8z49c/8biKJIltphjM5JmxP3gQv3fsCR4QtzopADZB258aaGP
Tp/KR40Mb3X+aLXVJnD3fzx+cBwtQTYKqSFgoUA68Kx9muKxiPrz+R/eCpIkhqk9
+ziLRiwmIeR9nXu8qDuakIW+TcbcCSKMK3xIVnAr1ztvHwzOf72vum1STVkI3A9C
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1536610929575555587011078915724840338
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'watchdisneyfeqa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23195295267053305648744120105958160156984249636497100408494265195108125869658357696001249935851788305290654058959474005559620337173129902521947047862076102079154878111229478123967695446291165194152515017213167636671064200345947418397829143123054272978763906584325770703982732524671587633078367448855956502052628356677934622256182198529647924626299892693832454684015934086784182418453210505444911643633267841565126691391184256535875987425591068475921060380536107941050082200746753439697333855262380391132976889341824601100328892272823619011078948911105658815430245700249965833818414938348443047524535952699996209365647
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7e1bb0e61836f7ebe515ab67d247acbafa8bbbb3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (591 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchdisneyfeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freeform.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ngtvfeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abc-studios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abcstudios.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.showms.freeform.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abcfeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abcstudios.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.disneynowqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fftvfeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geo.hosted.watchdisneyfeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marvelfeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.marvel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fftvfeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngtvfeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeform.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latamtvfeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abc.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxtvfeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.disneynow.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxtvfeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abcfeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abc-studios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.latamtvfeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marvelfeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-east-1.aws.hosted.watchdisneyfeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disneynowqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.marvel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.watchdisneyfeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watchdisneyfeqa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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