www.buyvip.it

Issued by Amazon

About this certificate

This digital certificate with serial number 0b:9d:53:95:84:63:77:4d:4f:76:a1:3b:e6:f3:84:72 was issued on by Amazon.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.buyvip.it

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:9d:53:95:84:63:77:4d:4f:76:a1:3b:e6:f3:84:72
Serial Number (int): 15438393846389628593948748424957625458
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c6:94:24:97:65:41:19:ba:42:1c:b5:10:68:94:18:cc:ff:f5:0a:0b
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 27:16:bc:bd:d2:53:e2:02:74:3f:48:21:8d:c2:39:79:1a:4f:4f:40
Fingerprint (sha256): 80:f9:d4:6b:65:8c:fc:b8:64:91:c5:8c:3a:a8:55:32:58:d4:f4:87:a1:12:38:7e:af:3f:46:82:7f:84:e8:47

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate www.buyvip.it

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.buyvip.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.buyvip.it
buy-vip.it
kindlehelp.amazon.it
assistant.amazon.it
buyvip.it
help.amazon.it
support.amazon.it
www.buy-vip.it
kindlesupport.amazon.it
www.welovebrands.it
kindle-help.amazon.it
customer-service.amazon.it
renewed.amazon.it
welovebrands.it
customerservice.amazon.it
it.buyvip.com

Other certificates including the domain name buyvip.it

(limited to 100 certificates)
www.buyvip.it
www.buyvip.it
www.buyvip.it
www.buyvip.it
www.buyvip.it
www.buyvip.it
www.buyvip.it
www.buyvip.it
www.buyvip.it
www.buyvip.it

Certificate

The complete raw certificate details for www.buyvip.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3t7f8QzlOGYIinSnWgo
3XFsGgOua9QhDDI7eu5xZbZXym4Ez6YMP1OOrB3gH4PK96OP+UjMsNUX1SvvyxS5
k9gu0pNLiZlypsKQaUz756BmYIJFO46P3+5MIcx0PnztMNxsvCtbIbBUW8nFR5Jj
ijqtKI9gp6zBHbi3rXfo7i3ZsfSZ8JLMAcYJCeX6Jp3l6mFjfiUKjeae+n6ZqVuu
Cl3taupz4ntW3p5WwcuXrSnMomjy4+w5ZKHwJ3sfWOUSo137lLPdFQirDgRik411
hwawjUfBIMqxDCR0NoyQGK96hZxfyEhYGeaIIOua0c4x0sglAYo7T9TAutFMnRbD
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15438393846389628593948748424957625458
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.buyvip.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22152594818984698318162345850568756311927513934312262031521312252588341985981594566571695467019201913542459692994953296578293845973032567661179879520311278092879446161262441936151428868780110038377105819139329034873455034104199689098124223672209566237760251539977682821128378150810375170015276812423701309176920473838363098445393813065337618772577615698403953827739762095305103799040618351208979312975738525311960476245561537450487022163122886113754179584459921788771680129674456935679348205358183542986035629688659022551986475705751786018674307354264046594781350270673245679312137115569505843506674672283013707383629
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c6942497654119ba421cb510689418ccfff50a0b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (311 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buyvip.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buy-vip.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kindlehelp.amazon.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assistant.amazon.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buyvip.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'help.amazon.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'support.amazon.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buy-vip.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kindlesupport.amazon.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.welovebrands.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kindle-help.amazon.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer-service.amazon.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renewed.amazon.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welovebrands.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customerservice.amazon.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.buyvip.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0075bb2a380c0489b26ef215d7d3626bb32d80498acab769fd149a68a9c7032f7f1654c1e187db47469413c485e6e89197c958e5bae5ff82fd7152348b626345288d3102808b317ca3e6ca861354bc79cad741dff84dcb0d1186ab62b1a070bf02dfdd76e3569ee819052d5628e4cbcc0d093b41538f2df1650eb26561dacc03ede231f4cd786e07092085b507f0232bb28e3dc933afef84bcb4a5695fab46a4f6fcbd7b21f013dc89bbae3c0fcbf29ff1671eb35b5f98923274142056e20a132b659c2ffe281a4d86e2f07fc6e3e44bc5cbda05aadb5a7ada4ce63990dd58690f6cc77fa5234ecf4b70b6a83bffd3291c79e222c1afd082787a1825d24300c15f