stpreview.worldsingles.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0a:52:a3:b5:de:5e:bc:4b:66:fc:e0:a1:76:07:2a:06 was issued on by Amazon.

With 29 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stpreview.worldsingles.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:52:a3:b5:de:5e:bc:4b:66:fc:e0:a1:76:07:2a:06
Serial Number (int): 13721368742132025301909797826128718342
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3f:8a:9f:96:9a:22:e4:a6:e5:2b:df:6f:78:24:33:d2:27:9a:3c:da
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 9a:9d:22:82:3e:3a:d5:c0:6e:60:67:63:ba:01:d4:f2:d6:c2:2e:79
Fingerprint (sha256): c0:b9:7e:30:6d:74:eb:8a:e9:37:2e:49:f7:1f:08:41:75:64:6d:19:e7:4e:04:83:3e:1a:a0:d3:2c:8f:fd:bd

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate stpreview.worldsingles.com

29

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stpreview.worldsingles.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stpreview.worldsingles.com
stpreview.arablounge.fr
stpreview.latinromantico.com
stpreview.ethiopianpersonals.com
stpreview.turkishpersonals.com
stpreview.italianosingles.com
stpreview.romaniakiss.com
stpreview.salaamlove.com
stpreview.jamaicandating.com
stpreview.soulsingles.com
stpreview.albanianpersonals.com
stpreview.arablounge.com
stpreview.eligiblegreeks.com
stpreview.ghanalove.com
stpreview.hyesingles.com
stpreview.iranianpersonals.com
stpreview.lovingbbw.com
stpreview.pakistanilounge.com
stpreview.islamicmarriage.com
stpreview.serbianlove.com
stpreview.serbiandating.com
stpreview.africanlove.com
stpreview.haitidating.com
stpreview.kenyandating.com
stpreview.nigeriandating.com
stpreview.caribbeanmatches.com
stpreview.vietvibe.com
stpreview.desikiss.com
stpreview.elb.desikiss.com

Other certificates including the domain name worldsingles.com

(limited to 100 certificates)
preview.worldsingles.com
*.worldsingles.com
worldsingles.com
*.worldsingles.com
*.worldsingles.com
www.worldsingles.com
*.worldsingles.com
stauth.worldsingles.com
*.worldsingles.com
*.worldsingles.com
worldsingles.com
*.worldsingles.com
worldsingles.com
system.worldsingles.com
*.worldsingles.com
*.worldsingles.com
*.worldsingles.com
api.worldsingles.com
*.worldsingles.com
colormelove.worldsingles.com
worldsingles.com
worldsingles.com
*.worldsingles.com
www.worldsingles.com
stsystem.worldsingles.com
worldsingles.com
colormelove.worldsingles.com
www.worldsingles.com
worldsingles.com
stauth.worldsingles.com
billingadmin.worldsingles.com
auth.worldsingles.com
worldsingles.com
www.worldsingles.com
stlogin.worldsingles.com
worldsingles.com
*.worldsingles.com
worldsingles.com
st.secure.worldsingles.com
stbilling.worldsingles.com
worldsingles.com
*.worldsingles.com
*.worldsingles.com
*.worldsingles.com
www.worldsingles.com
worldsingles.com
*.worldsingles.com
worldsingles.com
*.worldsingles.com
system.worldsingles.com
www.worldsingles.com
*.worldsingles.com
worldsingles.com
worldsingles.com
affiliate.worldsingles.com
stbillingadmin.worldsingles.com
www.worldsingles.com
*.worldsingles.com
worldsingles.com
*.worldsingles.com
*.worldsingles.com
*.worldsingles.com
*.worldsingles.com
*.worldsingles.com
worldsingles.com
sni.cloudflaressl.com
primg.worldsingles.com
auth.worldsingles.com
admin2016.worldsingles.com
worldsingles.com
stpreview.worldsingles.com
worldsingles.com
api.worldsingles.com
admin2016.worldsingles.com
*.worldsingles.com
*.worldsingles.com
*.worldsingles.com
*.worldsingles.com
stadmin.worldsingles.com
www.worldsingles.com
worldsingles.com
worldsingles.com
worldsingles.com
*.worldsingles.com
worldsingles.com
www.worldsingles.com
*.worldsingles.com
stadmin.worldsingles.com
*.worldsingles.com

Certificate

The complete raw certificate details for stpreview.worldsingles.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA12E2bBHdeNtukhrFJiQe
xEpjXJFoIZ4G95rBUcRMh9qxyqZsl1nHyTVcWM1pC9r2z20tIHCX8Xncgh1/KdMv
iig9aM3gj35FHkKOYEWJGS3laE847xPKk0JL/4o+/WEbtDirIYsl6iRX40+QbgAa
cF5ECYmOIPPG1sjHQI9tAsNQidK7srs9f/OxPwdWDYj2xq20c3dcvjL8AQb2CGml
C4YoW6Toa9I70kEQmZoW0AGHSSyNRHWdJAL/jd8VrSBiKIjUjkPcwF2x/HmKnfxQ
TPL5itYPjI1DbJ0GHEfhfMNRJ1S7zwAEO9PFgEl6wHIqzojq70l3aOUFDLNEzdZo
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13721368742132025301909797826128718342
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stpreview.worldsingles.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27189172880760813429159727929242639035010126687108175798775298796736479624117502377679389332110703945766970903824386452124849660858280835587457548293868291806513604219476792143988024527282911025780915451263946433278119812374041712805491938960072112932849314420985255673451558297692427627886667538414076874897108979922370728128817168307458101762241722085675582298948221920336802885471770067175126196163855668043166455365176975019565286520464049910665111044234890131855795937444547059142267058452447237865872511712637110002173708393151030019580111506368851904061751769948879293880614595738130116211082534616764683544701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f8a9f969a22e4a6e52bdf6f782433d2279a3cda
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (829 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpreview.worldsingles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpreview.arablounge.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpreview.latinromantico.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpreview.ethiopianpersonals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpreview.turkishpersonals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpreview.italianosingles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpreview.romaniakiss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpreview.salaamlove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpreview.jamaicandating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpreview.soulsingles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpreview.albanianpersonals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpreview.arablounge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpreview.eligiblegreeks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpreview.ghanalove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpreview.hyesingles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpreview.iranianpersonals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpreview.lovingbbw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpreview.pakistanilounge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpreview.islamicmarriage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpreview.serbianlove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpreview.serbiandating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpreview.africanlove.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpreview.haitidating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpreview.kenyandating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpreview.nigeriandating.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpreview.caribbeanmatches.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpreview.vietvibe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpreview.desikiss.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stpreview.elb.desikiss.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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