*.torontolife.com

Issued by Amazon

About this certificate

This digital certificate with serial number 07:a6:89:68:a9:29:ad:96:23:6f:fc:47:5d:62:16:87 was issued on by Amazon.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.torontolife.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:a6:89:68:a9:29:ad:96:23:6f:fc:47:5d:62:16:87
Serial Number (int): 10169304231209146616380103127497578119
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 72:1c:aa:a6:2f:18:ec:fc:29:82:b5:78:e1:0b:4f:23:91:ae:60:f5
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 74:10:02:9d:00:da:f9:9d:80:35:38:39:46:28:c7:ca:d7:88:b0:22
Fingerprint (sha256): 90:7c:b7:b3:e2:cd:85:a3:40:13:83:95:9b:1f:fb:73:01:b1:21:27:55:47:ed:1a:7c:02:ea:09:49:83:6a:38

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.torontolife.com

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.torontolife.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.torontolife.com
*.ottawamagazine.com
macleans.ca
*.quillandquire.com
todaysparent.com
*.fashionmagazine.com
*.chatelaine.com
mightymag.ca
*.macleans.ca
*.todaysparent.com
4000-15-684578694a-shop.darwin.cx
chatelaine.com
quillandquire.com
ottawamagazine.com
fashionmagazine.com
*.mightymag.ca
torontolife.com

Other certificates including the domain name torontolife.com

(limited to 100 certificates)
stage.torontolife.com
nfoon.torontolife.com
stage.torontolife.com
torontolife.com
stage.torontolife.com
tburden.torontolife.com
www.torontolife.com
torontolife.com
secure.torontolife.com
members.torontolife.com
www.torontolife.com
*.torontolife.com
*.torontolife.com
members.torontolife.com
nfoon.torontolife.com
dev.torontolife.com
tburden.torontolife.com
qa.torontolife.com
*.torontolife.com
dev.torontolife.com
www.torontolife.com
*.torontolife.com
stage.torontolife.com
members.torontolife.com
secure.torontolife.com
torontolife.com
qa.torontolife.com
bhill.torontolife.com
stage.torontolife.com
dev.torontolife.com
*.torontolife.com
*.torontolife.com
qa.torontolife.com
secure.torontolife.com
*.torontolife.com
udobrowolska.torontolife.com
stage.torontolife.com
torontolife.com
stage.torontolife.com
torontolife.com
www.torontolife.com
tburden.torontolife.com
qa.torontolife.com
dev.torontolife.com
stage.torontolife.com
*.torontolife.com
udobrowolska.torontolife.com
ebrukson.torontolife.com
www.torontolife.com
stage.torontolife.com
torontolife.com
secure.torontolife.com
www.torontolife.com
hbaradaran.torontolife.com
dev.torontolife.com
dev.torontolife.com
www.torontolife.com
dev.torontolife.com
stage.torontolife.com
jmykolyn.torontolife.com
dev.torontolife.com
tburden.torontolife.com
torontolife.com
tburden.torontolife.com
dev.torontolife.com
tburden.torontolife.com
www.torontolife.com
*.torontolife.com
torontolife.com
www.torontolife.com
nfoon.torontolife.com
members.torontolife.com
*.torontolife.com
*.torontolife.com
torontolife.com
hbaradaran.torontolife.com
*.torontolife.com
tburden.torontolife.com
dev.torontolife.com
hbaradaran.torontolife.com
torontolife.com
listings.torontolife.com
stage.torontolife.com
torontolife.com
*.torontolife.com
tburden.torontolife.com
dev.torontolife.com
members.torontolife.com
members.torontolife.com
www.torontolife.com
*.torontolife.com
www.torontolife.com
*.torontolife.com
dev.torontolife.com
*.torontolife.com
tburden.torontolife.com
www.torontolife.com
*.torontolife.com
torontolife.com
*.torontolife.com

Certificate

The complete raw certificate details for *.torontolife.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliwkIuLeTzbi7vHzPBnX
iaeEm6AJTbzttY/nKy8PRdBvVdICMifNaDi2NslV/td8L51iXJKe3MZb0SNXJHZl
BsJgHFu1Z48Qdpm182jTKQauHzLlMBHxhRSyPXwrC0vJNfWCb2rwm0aS9Bw/MSoG
p0bRJlR04Lkln0icnyMYtM8dEsrCKkXFUsIX+WKyVd593xxq8TIvUxrd4tQRDTib
qx+iUfg0yXPPZT3PuajzvExUI8LaLIlgIeTCVot1sRHhIt3bRL3Cm1Ro5Yby0TiP
aQ494CWLtbYb36tO5gpgBg8aYWuHFtqp8qkWp/sZiLlUtn2pXcPoSePapaCgSmb+
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10169304231209146616380103127497578119
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.torontolife.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18957512560844235726259208072775667992827818943397720426070288000562654281959901917812918973058031655839924644389618558711263625464344335160855647240402681867514190790622379452582998411271866664363989511460298178168078643150148233974129953505288971521892301968729094462805175494897916751177052371844569169202660592027206579569177807776930061200914898944696819900625095370294420121809975207174158099677175555669179815227705835603730333492460039874660474682791931351438871814605206671864073317120885439491266529859340125241496238915497371307453039860728895826490739211911793977948745794722256312562085276448929794686659
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							721caaa62f18ecfc2982b578e10b4f2391ae60f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (331 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.torontolife.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ottawamagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macleans.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.quillandquire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'todaysparent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fashionmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chatelaine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mightymag.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.macleans.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.todaysparent.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4000-15-684578694a-shop.darwin.cx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatelaine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quillandquire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ottawamagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fashionmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mightymag.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torontolife.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001710ea3b5230000040300483046022100ebbf9fa928cfb14dfc2d866e32222321b817ae7a015271df2f2f4a432495a81c022100ed052b88f2db05bf4ddde98c0dcdca1fcc301035077f1b10415aaa1374dabb0b0077005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca000001710ea3b5750000040300483046022100a524c8410c6d30a70e82bb37ec79ac3b2c7cf0244a52068a7814f697ab74c92e022100f2451f37fd5f314ddae0e8e504adce6b1f71383772b136cf11dd2ffa790d9813
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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