hosted.wh.sportingpulseinternational.com

Issued by Amazon

About this certificate

This digital certificate with serial number 07:20:4e:75:07:38:07:31:a7:19:60:ec:95:fe:86:07 was issued on by Amazon.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hosted.wh.sportingpulseinternational.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:20:4e:75:07:38:07:31:a7:19:60:ec:95:fe:86:07
Serial Number (int): 9472340769845753480804627696878257671
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ed:39:31:85:7a:5a:42:1b:ef:08:8e:ae:ed:99:78:c4:97:6e:44:6e
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): cb:67:1d:4a:43:7c:45:0f:45:cb:10:45:0b:60:31:a2:7f:c8:aa:81
Fingerprint (sha256): 7d:f0:ef:e2:ea:ff:b0:78:22:73:83:ed:81:1f:a5:0b:b1:98:ec:56:ad:05:fc:c5:3d:5c:e0:00:ac:7d:53:d9

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate hosted.wh.sportingpulseinternational.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hosted.wh.sportingpulseinternational.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hosted.wh.sportingpulseinternational.com
hosted.uat.wh.sportingpulseinternational.com
hosted.test.wh.sportingpulseinternational.com
hosted.wh.geniussports.com
hosted.uat.wh.geniussports.com
hosted.test.wh.geniussports.com

Other certificates including the domain name sportingpulseinternational.com

(limited to 100 certificates)
support.wh.sportingpulseinternational.com
support.wh.geniussports.com
widget.wh.sportingpulseinternational.com
*.sportingpulseinternational.com
webcast.wh.geniussports.com
api.wh.geniussports.com
live.wh.geniussports.com
capi.wh.sportingpulseinternational.com
img.wh.sportingpulseinternational.com
api.wh.geniussports.com
widget.wh.sportingpulseinternational.com
hosted.wh.sportingpulseinternational.com
api.wh.geniussports.com
live.wh.geniussports.com
webcast.wh.geniussports.com
live.wh.geniussports.com
api.wh.geniussports.com
statsengine-api.dcd-uat.i.geniussports.com
hosted.wh.sportingpulseinternational.com
webcast.wh.geniussports.com
*.sportingpulseinternational.com
img.wh.sportingpulseinternational.com
staff.sportingpulseinternational.com
api.wh.geniussports.com
api.wh.geniussports.com
api.wh.geniussports.com
live.wh.geniussports.com
hosted.wh.sportingpulseinternational.com
widget.wh.geniussports.com
widget.wh.geniussports.com
live.wh.geniussports.com
statsengine-stream.dcd-uat.i.geniussports.com
widget.wh.geniussports.com
*.sportingpulseinternational.com
support.wh.sportingpulseinternational.com
hosted.wh.sportingpulseinternational.com
scoutinfo.wh.geniussports.com
webcast.wh.geniussports.com
scoutinfo.wh.geniussports.com
widget.wh.sportingpulseinternational.com
live.wh.geniussports.com
live.wh.geniussports.com
support.wh.sportingpulseinternational.com
img.wh.sportingpulseinternational.com
capi.wh.aws.sportingpulseinternational.com
*.sportingpulseinternational.com
hosted.wh.geniussports.com
widget.wh.sportingpulseinternational.com
support.wh.sportingpulseinternational.com
*.sportingpulseinternational.com
api.wh.geniussports.com
img.wh.sportingpulseinternational.com
img.wh.sportingpulseinternational.com
hosted.wh.sportingpulseinternational.com
webcast.wh.geniussports.com
widget.wh.sportingpulseinternational.com
webcast.wh.geniussports.com
support.wh.geniussports.com
api.wh.geniussports.com

Certificate

The complete raw certificate details for hosted.wh.sportingpulseinternational.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfDt4mEqVkkGGKsyJ7qy
J+CxM6dduDnysKlVLJ/KTStlUf4PFxIg1wMquXBghmtZB3d3j9XWhlhkh2nv8TQu
9CZPjEskf0btlnJpB2+3fVZrIPzCO9eJVWxibU0GpimKPkFcnyCO4TBxFKnh7iYC
/z0NP1OF0Xefsg7Q5c2McLC1zJxbkA6tIzafx3ZzF8EIQRhIFfLj4bZGLq1Alm9z
2+LmFmWnnN3B6ZH0YZtzxSNnSYmOChyWIGU+FgcJ8o4TD/fmmq5YW7bj5jAikNcG
ZMYQyazxExkrfMrSmS5Gu/2lCpiTCEPrRBoG0kezhcJCrOlmEVSuUfBNPeKwBYS7
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9472340769845753480804627696878257671
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hosted.wh.sportingpulseinternational.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23977846272607744963066602065456488115007443076456914603836320519151907632179105025727894317288491622730033426057921937695730342999699676930632945270533212980291458977218199274893439031611311874598414406569605848030934578342527957952353907643868494693809699386636570181465410895888890735579060126706813460763139017616149621884232726349371221578401023704348855859121116152668443133232142871169071605157678564434921679684584002211145681637378511377863690112179471684791094146762546777177005210266454631256827677312589737829554165056466271335277175076063398956716312210455364164279882114740011641091260995523188632108003
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ed3931857a5a421bef088eaeed9978c4976e446e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (231 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosted.wh.sportingpulseinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosted.uat.wh.sportingpulseinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosted.test.wh.sportingpulseinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosted.wh.geniussports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosted.uat.wh.geniussports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hosted.test.wh.geniussports.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016a9a6c497f000004030046304402205a73413d2458805d5e48a27ab2dc4138633bb84b498c44fe4a5b6b2dce559713022070254eeeb21b1d64264e3165ffa42716e4fa1adb12debcf28c63013606b4429b0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016a9a6c4a9c00000403004730450221009f5c361526fab61a2e79151fa681ddb925c95e13e97aab73fd427081f22e2d37022036a2449ef5b7b0b04316594b60751de9f4e5fd77a94a2fa1e62e968e3aa261c6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b6901b5ab8235f56c9f71cb7d48c15c0d72460c908449cb83710585f314b6f1f2a331d54e692e49c498db55bcf3228d39627f6a639b98125653ab452d18da98f42d58194abe6b62f9819e52a9f8ec373bf7ce1fcb1cfb68a194de1dfb10031820af6a4933f3b56dd4e37584afef7629d87162aed8c7bc8119739e446db8463b1508535e27303354ae4b3e49c4bff3eb56f934f355bc3a77c99be8dc1146c5f31b5c090c1cc42aac19c3a04993a0bbf47bd746dd4b4fdeea2e9ea6d65b3466b8d60be4c873e1b33ff5de45fdca5ef2593c442b42543927b12a8e1e83b06c84764b2236bbdc33ca446dadc9a519725e9ae92946572005129f8ad4861cb0930dba0