webcast.wh.geniussports.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0b:4f:7d:f6:cc:95:08:fa:03:78:91:a8:5a:98:01:fd was issued on by Amazon.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=webcast.wh.geniussports.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:4f:7d:f6:cc:95:08:fa:03:78:91:a8:5a:98:01:fd
Serial Number (int): 15034254260101875293970793374330388989
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0a:09:7b:c5:9f:ff:b8:6e:0d:a8:40:0f:d8:ac:d2:d0:a1:99:f4:15
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 83:87:a4:fc:76:75:e7:2b:51:04:6e:66:d2:8b:02:35:32:37:96:5c
Fingerprint (sha256): be:8d:f8:ef:c8:61:16:d0:ae:10:a6:8d:b7:07:df:d2:91:c2:51:64:4b:63:fc:25:56:e7:10:2a:dd:86:c5:91

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate webcast.wh.geniussports.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webcast.wh.geniussports.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webcast.wh.geniussports.com
webcast.wh.sportingpulseinternational.com
webcast.uat.wh.geniussports.com
webcast.test.wh.geniussports.com
webcast.uat.wh.sportingpulseinternational.com
webcast.test.wh.sportingpulseinternational.com

Other certificates including the domain name geniussports.com

(limited to 100 certificates)
rabbit.geniusbet-7143.integration.geniussports.com
*.uat.webdev.geniussports.com
*.ci.opap.geniussports.com
graylog-ls-cixl.prod.aws.geniussports.com
support.sixsq.com
*.contentgraph-211883.perf.dev.aws.geniussports.com
*.ci.spt.geniussports.com
graylog-core.dev.aws.geniussports.com
*.ls.prod.aws.geniussports.com
support.wh.sportingpulseinternational.com
graylog-core.dev.aws.geniussports.com
eu-status.swrve.com
*.opap.uat.webdev.geniussports.com
*.ci.geniuslive.app.geniussports.com
fdus-35a.freshdesk.com
ci.media.api.geniussports.com
*.eu.f2p.media.geniussports.com
chronograf.tick.test.prod.aws.geniussports.com
prodwh-phpmyadmin.wh.geniussports.com
*.algotrading.ci.aws.geniussports.com
etp.status.akamai.com
*.tick.templates.prod.aws.geniussports.com
*.ci.sportsbook.app.geniussports.com
www.geniussports.com
design.geniussports.com
graylog-ls-cixl.prod.aws.geniussports.com
*.granularityconfigurator.otr.api.geniussports.com
support.wh.geniussports.com
*.uat.baseball.geniussports.com
competitions.geniussports.com
*.production.riskmanagement.app.geniussports.com
*.contentgraph-196169.perf.dev.aws.geniussports.com
fdus-35a.freshdesk.com
qa-jenkins.prod.aws.geniussports.com
*.uat.webdev.geniussports.com
*.gen.baseball.geniussports.com
etp.status.akamai.com
*.perf.prod.aws.geniussports.com
widget.wh.sportingpulseinternational.com
fdus-40.freshdesk.com
*.ci.webdev.geniussports.com
eu-status.swrve.com
*.uat.matchviewer.geniussports.com
*.geniussports.com
graylog-spt.spt.geniussports.com
www2.geniussports.com
*.h.logging.ci.riskmanagement.geniussports.com
smpp.ci.geniussports.com
se-prod-reports-api.wh.geniussports.com
*.contentgraph-211853.perf.dev.aws.geniussports.com
*.ci.aws.geniussports.com
fdus-40.freshdesk.com
graylog-core.dev.aws.geniussports.com
smpp.test.geniussports.com
eu-status.swrve.com
graylog-integration-cixl.ci.aws.geniussports.com
prodwh-ecs-cluster.wh.geniussports.com
support.sixsq.com
*.contentgraph-209475.perf.dev.aws.geniussports.com
graylog-ls-cixl.prod.aws.geniussports.com
fdus-40.freshdesk.com
*.uat.f2p.media.geniussports.com
eu-status.swrve.com
api.statistics.americanfootball.geniussports.com
betting.geniussports.com
*.uat.feed-monitor-controller.app.geniussports.com
graylog-spt.spt.geniussports.com
api.geniussports.com
eu-status.swrve.com
prod-re-phpmyadmin.wh.geniussports.com
eu-status.swrve.com
algotrading-graylog.ci.aws.geniussports.com
eu-status.swrve.com
fdus-35a.freshdesk.com
*.perf.prod.aws.geniussports.com
*.contentgraph-211929.perf.dev.aws.geniussports.com
*.da.gss-production.i.geniussports.com
*.contentgraph-191126.perf.dev.aws.geniussports.com
graylog-integration-cixl.ci.aws.geniussports.com
eu-status.swrve.com
uat.venuematches.matchmaker.api.geniussports.com
etp.status.akamai.com
graylog-otf.ci.aws.geniussports.com
*.ci.aws.geniussports.com
footballsupport.geniussports.com
*.ci.geniussports.com
eu-status.swrve.com
*.video-platform.ci.aws.geniussports.com
support.sixsq.com
*.volleyball.geniussports.com
*.sb3.prod.aws.geniussports.com
*.dev.aws.geniussports.com
*.dcd-uat.i.geniussports.com
competitions.geniussports.com
prodwh-phpmyadmin.wh.geniussports.com
ci.baseball-resulting.srt.geniussports.com
*.api.matchviewer.geniussports.com
etp.status.akamai.com
eu-status.swrve.com
*.sb1-external.production.sportsbook.app.geniussports.com

Certificate

The complete raw certificate details for webcast.wh.geniussports.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSQW3PYWN/40sevxtLgY
Ot335ZOgaEgsAYcmA4zfDvZFfgtPmsb+V7ZJW+JgWQMeUjzs01BSsWqvc60lO0Pi
3cA1NrbmNb/40FSuc3E54nCEiRfFtpVuKuFMJ/Ki64Xlf5SqGRiPuA3QiC5nswzR
KMKvv6y3SxnedW2qCedsFYZVHYsUFpI1kEcxGC/1IeTkFZm1LJ7jSrie/t1fm6Bd
mIZ4S8EmARFTfNUkNs6Vukner/xfLvISfHtByN6Rr7Ic7VpaEtrwfWeJ4dwkFnbT
TgelTH34w6ngd1ozZRDdyNsOOxFRAmax8HjacWrQYoI37ISCD34VD87U+DD5/WKz
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15034254260101875293970793374330388989
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webcast.wh.geniussports.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24381789160044512220687816239221230282709368770687784853944034849939796869439511178857915645965450722443849108427720418245751434367556381010179071311689847627624321813307385749561581959717586068664426531852438761046578679211563938556337862433497614137240086349418221050189259949599908309901520268428602851210977361233029528910834494485195728557733961071459944705337336939469982697299357244905620734436848035428808470288114887589649405006755363965326455148962780403860685326379938808792147425461936283366032717321715381780384675533025075657037679169787529435257942936776348981519612958437995228326161290881968092918629
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a097bc59fffb86e0da8400fd8acd2d0a199f415
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (237 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcast.wh.geniussports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcast.wh.sportingpulseinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcast.uat.wh.geniussports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcast.test.wh.geniussports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcast.uat.wh.sportingpulseinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcast.test.wh.sportingpulseinternational.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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