livestream.pbskids.org

Issued by Amazon

About this certificate

This digital certificate with serial number 05:95:07:d0:76:5b:de:ff:18:ae:61:85:f9:56:93:60 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=livestream.pbskids.org

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:95:07:d0:76:5b:de:ff:18:ae:61:85:f9:56:93:60
Serial Number (int): 7419950703801593689406317694851388256
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 56:17:56:6a:34:18:9b:2c:94:8e:c5:3c:66:e3:ae:81:6c:e8:79:95
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 8e:31:7b:72:e0:d0:ac:44:0f:34:2a:dc:06:b9:43:52:80:92:60:a4
Fingerprint (sha256): b2:66:b9:7b:0c:e7:89:e9:06:cb:6d:3c:dc:ab:c4:fb:4f:ea:f8:03:7a:28:c9:bf:1b:0b:5f:65:d7:7b:3b:4d

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate livestream.pbskids.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for livestream.pbskids.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

livestream.pbskids.org

Other certificates including the domain name pbskids.org

(limited to 100 certificates)
*.pbskids.org
*.services.pbskids.org
help.pbskids.org
shop.pbskids.org
*.playground.pbskids.org
springroll-stage.pbskids.org
fdus-48.freshdesk.com
help.pbskids.org
*.playground.pbskids.org
pbskids.org
*.services.prod.pbskids.org
*.springroll-qa.pbskids.org
pbskids.org
pbskids.org
pbskids.org
springroll-stage.pbskids.org
*.prod.pbskids.org
pbskids.org
das.pbskids.org
measureup.pbskids.org
springroll-stage.pbskids.org
help.pbskids.org
shop.pbskids.org
help.pbskids.org
*.console.pbskids.org
*.services.pbskids.org
measureup.pbskids.org
fdus-48.freshdesk.com
*.springroll-qa.pbskids.org
*.playground.pbskids.org
measureup-playground.pbskids.org
*.services.preprod.pbskids.org
pbskids.org
help.pbskids.org
secure.shop.pbskids.org
*.preprod.pbskids.org
shop.pbskids.org
pbskids.org
*.prod.pbskids.org
*.shop.pbskids.org
*.shop.pbskids.org
shop.pbskids.org
*.playground.pbskids.org
shop.pbskids.org
help.pbskids.org
study.supervision.pbskids.org
*.services.pbskids.org
*.preprod.pbskids.org
*.playground.pbskids.org
pbskids.org
livestream.pbskids.org
pbskids.org
help.pbskids.org
*.preprod.pbskids.org
pbskids.org
*.prod.pbskids.org
pbskids.org
help.pbskids.org
pbskids.org
image.pbs.org
pbskids.org
pbskids.org
livestream.pbskids.org
help.pbskids.org
qoe.pbskids.org
pbskids.org
*.prod.pbskids.org
help.pbskids.org
help.pbskids.org
help.pbskids.org
*.preprod.pbskids.org
help.pbskids.org
*.pbskids.org
pbskids.org
*.prod.pbskids.org
study.supervision.pbskids.org
fdus-48.freshdesk.com
pbskids.org
teach.pbskids.org
live.pbskids.org
jenkins.springroll.pbskids.org
*.playground.pbskids.org
pbskids.org
pbskids.org
*.pbs-kids-playground.pbskids.org
supervision.pbskids.org
*.services.pbskids.org
pbskids.org
help.pbskids.org
*.playground.pbskids.org
pbskids.org
livestream.pbskids.org
help.pbskids.org
livestream.pbskids.org
help.pbskids.org
local.pbskids.org
*.preprod.pbskids.org
shop.pbskids.org
*.services.pbskids.org
help.pbskids.org

Certificate

The complete raw certificate details for livestream.pbskids.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuLlN4sC42hj8XoI8+3j
L/NK0N24kKILqBFSXMt53kVw6DOFoiPCTMa+wJBbtMdhnvkIl1dGCnATU2CMKiVo
nHx2LOlTlOLrHJ/JpE1kaPdqtKdp2rpshdjveX30Q3oPiqgHx54trLXQnGedvFVh
XwFUHfYynKf4JCjjR0nSM8M+j/xVyUFj4k16+rDI6PflvoM1zgMUtVje6MAr8kjw
gUhtw4FIAxG9vv5Bcx5FoGhFokfmlLXpSvOSgRUt6zjux5APWVfrgL0hPTN2k/5n
/daCS+YCd8L1pevMeMo3EbI9r4uNybQ6+plouurSuPPv5vHhXOTxjtPFNRVbSPmS
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7419950703801593689406317694851388256
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'livestream.pbskids.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25612023884473705439248324720618586403567022103806108287118546977163072945725135414273357606216487726962283398489854909009265805909515851288953274310086546288711779266732935214937579007788362772409010955490200018562734898542570461555352876551069072897245581048415591124363674896708085849576727748069800838696547911245313008252936444608284828996573758355721608926435817461529302966439914070391548358395508938199678459224474952675434669464545201831483843494755382429490648730735763039279386548417863354347663844342580096606364732144068205496010887146057501770529187267352808070069541146276351205121661776041460853478113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5617566a34189b2c948ec53c66e3ae816ce87995
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'livestream.pbskids.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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