interactives.associatedpress.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 07:25:60:49:f8:cd:75:84:cc:56:7f:6e:1c:51:71:d2 was issued on by Amazon.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=interactives.associatedpress.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:25:60:49:f8:cd:75:84:cc:56:7f:6e:1c:51:71:d2
Serial Number (int): 9498663926238681029527006696319316434
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 3b:d4:97:09:4c:cd:06:eb:84:a3:22:05:f8:33:5a:55:40:e5:77:a3
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 30:a6:17:be:2b:0c:7a:98:af:e7:0f:85:15:c8:68:28:6f:0d:1c:e0
Fingerprint (sha256): 76:cc:28:dc:69:16:54:98:d6:bf:56:8c:e9:8d:9a:52:33:be:ee:41:6f:27:ed:e6:36:06:bc:1e:a0:72:ed:3a

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate interactives.associatedpress.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for interactives.associatedpress.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

interactives.associatedpress.com
interactives.ap.org
origin-interactive-staging.associatedpress.com
interactives-staging.ap.org
origin-interactive.associatedpress.com

Other certificates including the domain name associatedpress.com

(limited to 100 certificates)
ap.org
epix.ap.org
*.dne.associatedpress.com
salesagency.associatedpress.com
associatedpress.com
kibana.associatedpress.com
transref.associatedpress.com
*.dne.associatedpress.com
ppc.associatedpress.com
igmapi.associatedpress.com
*.associatedpress.com
ap.org
nrmailsvc-use1.associatedpress.com
binaryapi.associatedpress.com
associatedpress.com
nrmailsvc-usw2.associatedpress.com
*.dne.associatedpress.com
*.dne.associatedpress.com
*.associatedpress.com
kpapiv.associatedpress.com
fox.associatedpress.com
transref.associatedpress.com
*.associatedpress.com
*.associatedpress.com
apnsapi-use1-2.associatedpress.com
associatedpress.com
votecastint.associatedpress.com
origin-interactive.associatedpress.com
transref.associatedpress.com
newsdesk.associatedpress.com
binaryapi.associatedpress.com
ppcapi.associatedpress.com
fox.associatedpress.com
kibana.associatedpress.com
vcapi.associatedpress.com
interactives.associatedpress.com
*.dne.associatedpress.com
nrcartsvc-use1.associatedpress.com
ppcapiext.associatedpress.com
fox.associatedpress.com
apcbo.associatedpress.com
apcbo.associatedpress.com
nrmailsvc-usw2-2.associatedpress.com
vcapi.associatedpress.com
kibana.associatedpress.com
associatedpress.com
*.dne.associatedpress.com
*.dne.associatedpress.com
apnsapi-usw2-2.associatedpress.com
igmapi.associatedpress.com
transref.associatedpress.com
ppcapi.associatedpress.com
newsdesk.associatedpress.com
ppc.associatedpress.com
fox.associatedpress.com
vcapiint.associatedpress.com
kpapiv.associatedpress.com
hiveprod1.associatedpress.com
ppcapiext.associatedpress.com
origin-interactive.associatedpress.com
origin-interactive.associatedpress.com
kibana.associatedpress.com
associatedpress.com
*.associatedpress.com
epix.ap.org
*.associatedpress.com
sharingnetwork.associatedpress.com
*.associatedpress.com
igmapi.associatedpress.com
*.dne.associatedpress.com
ap.org
*.associatedpress.com
*.dne.associatedpress.com
kpapi.associatedpress.com
*.dne.associatedpress.com
ingestwf.associatedpress.com
nrmailsvc-use1-2.associatedpress.com
transref.associatedpress.com
associatedpress.com

Certificate

The complete raw certificate details for interactives.associatedpress.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCK374ieHuMAW4CCIAma
yUXaXpalG4R11XBUnDkJIKaf+nK1onPb4fhkSlDVD/xcGEzisHchSeVL9jjhCSiL
bMO8fXDkVGfyS9LyvoyqxwcFK922Z2KARgkIzXbB6XRRNqbh8moTR+PjlDMbT/d5
7UOrna+hgQYYzj3C3r17738npntOEErgrky4bJOJQO6lUysUAIq03JOl4UhjSZqr
D8AqocEW3v+mROlSeYqWKdBFqpEIk/c4jSUVCOXUe4PljCiMzoPQD9Z5Etkv7LQa
bawPZAmMH3UBXhy/aMDe6+KXxDuy2OmGWucTqLJE49/TDzMQRhS5e8HVQFNkH7K4
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9498663926238681029527006696319316434
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'interactives.associatedpress.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23244968443568702359606247560757537012903879773667880838743684790644079361806671236572589534149187535659198916784287868566362907421682021539840233024274367307531839571423837796153240894395940926401621000276500063543416040285243000892527987854883459429967644943430556750070679938450931543454515149854138518857831864820804535604621138705442474378944519917079982351420330403910350452469117857208241526563089517382823866494872368645397724868113015783588778372830344134868369353495273559057418166356541661746865199397183543370515701261744749757623026460449579358740812064415467025683344149264641108397620650999169504426083
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3bd497094ccd06eb84a32205f8335a5540e577a3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (175 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactives.associatedpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactives.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-interactive-staging.associatedpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interactives-staging.ap.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-interactive.associatedpress.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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