id-pre.vglive.no

Issued by Amazon

About this certificate

This digital certificate with serial number 0a:88:48:dc:ee:40:fe:14:9b:38:a4:13:4c:3b:22:41 was issued on by Amazon.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=id-pre.vglive.no

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:88:48:dc:ee:40:fe:14:9b:38:a4:13:4c:3b:22:41
Serial Number (int): 13999910168033114796084875950458348097
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 88:97:06:86:62:5c:99:9a:82:02:1c:cd:4f:b3:99:f8:9e:95:a0:3a
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): ca:b6:0d:25:04:1c:01:b1:0b:10:a9:09:91:bc:5c:ad:08:fe:fe:10
Fingerprint (sha256): 7c:ec:92:89:e8:ab:98:4a:5c:cc:83:31:f0:67:a2:57:d7:c1:b5:a6:fc:2d:96:b7:2c:08:bd:11:df:76:a8:0f

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate id-pre.vglive.no

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for id-pre.vglive.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

id-pre.vglive.no
id-pre.svd.se
id-pre.familieklubben.no
id-pre.aftonbladet.se
id-pre.vg.no
id-pre.fvn.no
id.pre.sdk-example.com
session-service.identity-pre.schibsted.com
id-pre.aftenposten.no
id-pre.godt.no
id-pre.minmote.no
id-pre.vektklubb.no
id-pre.pent.no
id-pre.vgtv.no
id-pre.e24.no
id-pre.e24dinepenger.no
id-pre.dinepenger.no
id-pre.vgd.no

Other certificates including the domain name vglive.no

(limited to 100 certificates)
cis.schibsted.com
cmp.aftenbladet.no
vglive.no
vglive.no
id.aboutme.schibsted.com
id.adressa.no
id.morgenlevering.no
cmp.aftenbladet.no
cmp.aftenbladet.no
*.vglive.no
cmp.aftenbladet.no
*.vgnett.no
vg.no
cmp.aftenbladet.no
id.tek.no
cmp.aftenbladet.no
vglive.no
id-pre.magasinpluss.no
id.dolen.no
id.magasinpluss.no
cmp.aftenbladet.no
cmp.aftenbladet.no
cmp.aftenbladet.no
stage-sse.vglive.no
vg.no
cmp.aftenbladet.no
id.aboutme.schibsted.com
*.vglive.no
id.aboutme.schibsted.com
vglive.no
vg.no
cmp.aftenbladet.no
vglive.no
vg.no
id-pre.morgenlevering.no
cmp.aftenbladet.no
id.dolen.no
sse.vglive.no
id.aboutme.schibsted.com
id-pre.adressa.no
cis.schibsted.com
cmp.aftenbladet.no
id-pre.adressa.no
cmp.aftenbladet.no
vg.no
cmp.aftenbladet.no
cmp.aftenbladet.no
id.tv.nu
cmp.aftenbladet.no
vglive.no
vg.no
vglive.no
cmp.aftenbladet.no
vglive.no
cis.schibsted.com
*.vglive.no
cmp.aftenbladet.no
vglive.no
sse.vglive.no
id.aboutme.schibsted.com
cmp.aftenbladet.no
5.session-service.identity-pre.schibsted.com
id.another-example.com
cmp.aftenbladet.no
vglive.no
cmp.aftenbladet.no
cmp.aftenbladet.no
id-pre.ebok.no
cmp.aftenbladet.no
id-pre.tv.nu
cmp.aftenbladet.no
id.aboutme.schibsted.com
vg.no
cmp.aftenbladet.no
cmp.aftenbladet.no
*.vglive.no
cmp.aftenbladet.no
cmp.aftenbladet.no
cmp.aftenbladet.no
id.aboutme.schibsted.com
id.vglive.no
vg.no
stage-sse.vglive.no
cmp.aftenbladet.no
id.schibsted.no
cmp.aftenbladet.no
id.aboutme.schibsted.com
cmp.aftenbladet.no
id-pre.vglive.no
cmp.aftenbladet.no
next.vglive.no
vglive.no
vglive.no
id.aboutme.schibsted.com
id.aboutme.schibsted.com
id-pre.vglive.no
id-pre.bsnett.no
id-pre.tv.nu
*.vglive.no
id.vglive.no

Certificate

The complete raw certificate details for id-pre.vglive.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTYQB981OY/z1ue9wtB7
C1J/fltYsa022GN4vk8cKQrllUXpbE+nOwpDfYc+bBQ58/lcqKYmrJlzV3ccEfYD
7Ojg/+LOVjk7AeJZOFGYJ7kl6Ra1c9wREY4/HcmgezTK2sFgLei8g+rwqpyDRZy1
kBzGvcJlHPDVaS1ExpuuG4Fvigsgus0MJ42xBEj21siTtzy98hIsW5IgBtehxr9C
Oy5rPSR0EbIhQakOgkQ8VjmOYs1rgFb9AylwPJ5roxlmtEkjjugK1c9erJthYhyI
lo11X4FS64dtmZZ0ADiBXWmSLnfxGsQf/mx29BV4cPSQ4tZBl9FEwNgNY7AtI05d
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13999910168033114796084875950458348097
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'id-pre.vglive.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24895605349897284625420019130167247536449722091662928576658475288470406435766113486096196925391629021727432636053757923772067256235301160599876720643748357022086885503917930263127772269531915745647296672612924254217664471209662957047473421314374576917821188656632314797375447868300792480636103349853534377134953181741323190167157048761604622585840290748471286391718647351065739117853242927166127750812971607332156678525497760956910735998857754859159145626811681147622349451052759920846086943521050665249377621361545886934052822632400273134797335315460654993254967935842390681648526932446584190962999121626713960635753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							88970686625c999a82021ccd4fb399f89e95a03a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (371 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id-pre.vglive.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id-pre.svd.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id-pre.familieklubben.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id-pre.aftonbladet.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id-pre.vg.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id-pre.fvn.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.pre.sdk-example.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'session-service.identity-pre.schibsted.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id-pre.aftenposten.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id-pre.godt.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id-pre.minmote.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id-pre.vektklubb.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id-pre.pent.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id-pre.vgtv.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id-pre.e24.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id-pre.e24dinepenger.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id-pre.dinepenger.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id-pre.vgd.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005e357b632aef40ee58ea4f6313f40eeed29b8869a24fd11f265ab6760e1fc790dd794f40d9e836167f487904940b6dce4d5c8465e89755c3a5645fcb4032935fcd221c3d90c773aa527b5ab923450fa970b18f7f7aecececa2850665c82e98fe72d427325e6c0970b00bd884bf29b6b59a8ff670a60b44ffb65f09198b1acd80ef5888c6bfc2cc4ead44c55f6e57822e1811f2eeff2fcb3137f5ed0518ccfd889eef9bdafade047f1d1cc7e659e1a99a8df49fa1d295e7697a94643ec0879e2699b9de25cdc01d966196da3c440b7ecf78d61bf604c52a055d172592bab336eccb5f2510849e9d24ade04812567b2b66dd5530b772b78ae988893ec2fae9f73e