watchdisneyfeqa.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 03:83:e9:83:79:e7:d7:06:c8:49:5d:fc:11:3d:fc:fe was issued on by Amazon.

With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=watchdisneyfeqa.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:83:e9:83:79:e7:d7:06:c8:49:5d:fc:11:3d:fc:fe
Serial Number (int): 4672611093877713732506104552897772798
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: a3:57:da:5a:50:9b:d7:fa:3b:42:cd:a8:82:54:e2:bf:b0:e5:c5:f0
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 76:46:63:cc:f1:4e:a9:c9:18:71:a4:62:77:48:2a:aa:b2:dd:56:a8
Fingerprint (sha256): 79:bd:63:1c:c7:e2:77:c6:a5:33:5b:7a:39:62:2d:13:46:bc:48:2e:99:a4:3d:80:0c:12:22:cd:36:13:82:33

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate watchdisneyfeqa.com

29

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for watchdisneyfeqa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

watchdisneyfeqa.com
*.freeform.go.com
*.ngtvfeqa.com
*.abc-studios.com
*.abcstudios.go.com
*.showms.freeform.go.com
abcfeqa.com
abcstudios.go.com
*.disneynowqa.com
*.fftvfeqa.com
*.geo.hosted.watchdisneyfeqa.com
marvelfeqa.com
fftvfeqa.com
freeform.go.com
ngtvfeqa.com
latamtvfeqa.com
*.abc.go.com
fxtvfeqa.com
*.disneynow.go.com
*.fxtvfeqa.com
*.abcfeqa.com
abc-studios.com
*.latamtvfeqa.com
*.marvelfeqa.com
*.us-east-1.aws.hosted.watchdisneyfeqa.com
disneynowqa.com
staging.marvel.com
*.cdn.watchdisneyfeqa.com
*.watchdisneyfeqa.com

Other certificates including the domain name watchdisneyfeqa.com

(limited to 100 certificates)
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com
watchdisneyfeqa.com

Certificate

The complete raw certificate details for watchdisneyfeqa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVsEbSfmmfFMH1OjBMxi
bGJ8tpKYXX8JhBjo3aXQypzbVcF8malkII9/bxJbXxYbPHuxaIhHBbk+oxVvYbZm
do/vprwKCojWk1MkdIElC1ROA9WLRXg0X8me3rRlWJWNjuEaO23Q+eqWrQVXMR2/
S5RCbbHLAfhLB3vahunZLkWMY6J6gyuc3ljIRf4ZBsW0dihOg0Gr0w82ijUOYaYq
zov0s4bcTJ76uE3njaBqpG7qoxqP7hGNyjrAm8aLRV2BirK4LIcfIBRJ5NUovNFO
29Cxq1VYENRZT6fSJEnXh9chEWvG8+PuCxd+OHu8V+5RCEeTr9qe/vxz0k8fJTfI
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4672611093877713732506104552897772798
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'watchdisneyfeqa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21379155838038185262298193961028583752198607913304029379594490545612964816043939288819541029652557323701113487132655123173685320969095134471208608473984291571607094799904175350408039605695709020900058711941402013658980798251161555710493749134720073881585114435793585775403668069810875975904519993684056329017556605044818363434928544874297319864965163433898488045857886525763497974136148480559046329615158944703851695308273592963181546339090910831484694970001504358118462467133804692029641448786124378089498365775786407964057682026649329884440742517234482755975410168621901553988534057199825888733459895815226179176557
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a357da5a509bd7fa3b42cda88254e2bfb0e5c5f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (569 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'watchdisneyfeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freeform.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ngtvfeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abc-studios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abcstudios.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.showms.freeform.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abcfeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abcstudios.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.disneynowqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fftvfeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.geo.hosted.watchdisneyfeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marvelfeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fftvfeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freeform.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngtvfeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latamtvfeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abc.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxtvfeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.disneynow.go.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fxtvfeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abcfeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abc-studios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.latamtvfeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.marvelfeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us-east-1.aws.hosted.watchdisneyfeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disneynowqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.marvel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cdn.watchdisneyfeqa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.watchdisneyfeqa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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