*.edp24.co.uk

Issued by Amazon

About this certificate

This digital certificate with serial number 0f:cc:ff:ba:74:87:f5:12:d7:aa:79:2d:f1:45:96:4a was issued on by Amazon.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.edp24.co.uk

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:cc:ff:ba:74:87:f5:12:d7:aa:79:2d:f1:45:96:4a
Serial Number (int): 21002835282866625211196292106551662154
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b5:a0:23:81:03:ea:d8:1f:3b:47:d2:84:53:e3:c9:bb:3d:ba:01:e2
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 46:59:0b:a1:f0:07:34:5c:3d:31:0f:5d:42:de:5d:0b:b6:04:fa:2b
Fingerprint (sha256): c2:8f:af:72:8f:ea:27:fc:25:1a:78:92:d9:93:63:6a:bd:1e:68:73:9e:26:f0:b5:b2:b6:f2:0f:ec:e0:05:81

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.edp24.co.uk

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.edp24.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.edp24.co.uk
*.pinkun.com
*.ipswichstar.co.uk
*.eadt.co.uk
*.eveningnews24.co.uk
*.thecomet.net
*.greatyarmouthmercury.co.uk
*.whtimes.co.uk
*.newhamrecorder.co.uk
*.lowestoftjournal.co.uk
*.hertsad.co.uk
*.romfordrecorder.co.uk
*.thewestonmercury.co.uk
*.ilfordrecorder.co.uk
*.northdevongazette.co.uk
*.islingtongazette.co.uk
*.theneweuropean.co.uk
*.huntspost.co.uk
*.barkinganddagenhampost.co.uk
*.hackneygazette.co.uk
*.archant.co.uk

Other certificates including the domain name edp24.co.uk

(limited to 100 certificates)
*.edp24.co.uk
edp24.co.uk
*.uat.archant.co.uk
local.bensonnews-sun.com
app.edp24.co.uk
*.advertiser24.co.uk
consent.edp24.co.uk
local.newstribune.info
*.archant.co.uk
nor-west-news.origami.neighbourly.co.nz
app.edp24.co.uk
a02342.alloaadvertiser.com
consent.norfolkbusinessawards.edp24.co.uk
consent.foodawards.devonlife.co.uk
flintshopping.mlive.com
consent.edp24.co.uk
edp24.co.uk
consent.foodawards.devonlife.co.uk
local.lutontoday.co.uk
admin.adforge.com
search.edp24.co.uk
local.hutchnews.com
consent.foodawards.devonlife.co.uk
local.bemidjipioneer.com
*.cyan.archant.co.uk
*.uat.archant.co.uk
local.pontiacdailyleader.com
parrysoundnorth.parrysound.com
consent.edp24.co.uk
local.hertfordshirelife.co.uk
app.edp24.co.uk
local.cessnockadvertiser.com.au
local.dglobe.com
*.archant.co.uk
search.edp24.co.uk
analytics.edp24.co.uk
local.fraserburghherald.co.uk
*.archant.co.uk
a02342.alloaadvertiser.com
app.edp24.co.uk
app.edp24.co.uk
local.thegazette.com
*.advertiser24.co.uk
*.advertiser24.co.uk
local.bromleytimes.co.uk
edp24.co.uk
local.eastlondonadvertiser.co.uk
*.uat.archant.co.uk
edp24.co.uk
*.uat.archant.co.uk
consent.foodawards.devonlife.co.uk
www.edp24.co.uk
local.edp24.co.uk
consent.norfolkbusinessawards.edp24.co.uk
*.uat.archant.co.uk
consent.edp24.co.uk
*.advertiser24.co.uk
local.eastlondonadvertiser.co.uk
consent.agriculturaltrader.co.uk
local.insidebiz.com
*.uat.archant.co.uk
fk.local.kentonline.co.uk
local.durhamtimes.co.uk
mylocal.jacksonville.com
consent.foodawards.devonlife.co.uk
consent.foodawards.devonlife.co.uk
consent.norfolkbusinessawards.edp24.co.uk
search.edp24.co.uk
consent.edp24.co.uk
consent.foodawards.devonlife.co.uk
flintshopping.mlive.com
a02342.alloaadvertiser.com
local.wvnews.com
consent.edp24.co.uk
edp24.co.uk
app.edp24.co.uk
consent.foodawards.devonlife.co.uk
search.edp24.co.uk
edp24.co.uk
consent.foodawards.devonlife.co.uk
*.edp24.co.uk
consent.foodawards.devonlife.co.uk
*.archant.co.uk
*.advertiser24.co.uk
consent.norfolkbusinessawards.edp24.co.uk
shopping.nola.com
*.edp24.co.uk
consent.edp24.co.uk
consent.norfolkbusinessawards.edp24.co.uk
shopping.cleveland.com
local.eastlondonadvertiser.co.uk
manukau-courier.origami.neighbourly.co.nz
shopping.nj.com
*.cyan.archant.co.uk
*.archant.co.uk
local.eastlondonadvertiser.co.uk
consent.edp24.co.uk
app.edp24.co.uk
local.madisoncourier.com
consent.norfolkbusinessawards.edp24.co.uk

Certificate

The complete raw certificate details for *.edp24.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzpAEUt3tlsGw+9k5V8Q
qnYcTqTPd0JYtxVc6t1ZLiTu//MFEdnzD1L6GqAQoXixthjCf0rdHrj+jDFSt4vo
JMbN516GFL+RAODqFLMBVyLOrYMXhFQx5e2DlQglERpBG2RXgphq0YoKrn8Y42p3
/1wqRkjSIwsUkwFuKqSr9XAMoEEsGgJPeit73mRPnqyfg/nlwjGyjLiqcU0TIjbo
65s+4Td4OZpTn0xwRUB+EBl3Rqii8U1YkMIR46v+LxLhvuxi0VfxrwM1gbzL1q/t
TJwz9tQD7uFpUMP8e62gtylndPC75jVcTXAWrJ1awCFjUkdMkH/MzRXBeGalRNuS
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21002835282866625211196292106551662154
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.edp24.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24140240524213536918424675846792674684471134445300027316297122556874794188082894987098915669946804341237871530651120209711336190808419441753073094655181534208921144730328334890558800514941404473029481573112570430622086808428889104103683302940194591234309006796209197787336836849189428947683532179413142066712021666359337863990609215305033694481315758037260537416645782587837426604515262177645641267949127936875442716042607505823862686269565432259246849828794996544184343965444757555776611075364658735351833251488018350773215374461619966132949419514017789149472823905911526221479195368851310873335075842739615804658323
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b5a0238103ead81f3b47d28453e3c9bb3dba01e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (465 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.edp24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pinkun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ipswichstar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eadt.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eveningnews24.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thecomet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greatyarmouthmercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.whtimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newhamrecorder.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lowestoftjournal.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hertsad.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.romfordrecorder.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thewestonmercury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ilfordrecorder.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northdevongazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.islingtongazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.theneweuropean.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.huntspost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.barkinganddagenhampost.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hackneygazette.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.archant.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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