widget.wh.sportingpulseinternational.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0d:14:47:ef:45:a8:be:f5:78:1d:cf:d3:d3:6e:4a:81 was issued on by Amazon.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=widget.wh.sportingpulseinternational.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:14:47:ef:45:a8:be:f5:78:1d:cf:d3:d3:6e:4a:81
Serial Number (int): 17385268890545770071204300124433828481
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 5d:93:94:ed:37:ac:e9:9a:9b:bf:2d:04:c6:ab:77:92:d7:6d:8a:8b
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 94:69:c7:20:c3:ff:bd:42:d2:5c:10:79:b6:81:f0:43:99:0d:5a:81
Fingerprint (sha256): c7:47:a1:4f:bb:43:35:1d:ff:9e:4a:60:b1:d5:67:6a:11:28:ea:e1:bc:8d:ed:b7:ad:a5:82:78:2a:88:a9:b1

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate widget.wh.sportingpulseinternational.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for widget.wh.sportingpulseinternational.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

widget.wh.sportingpulseinternational.com
widget.uat.wh.sportingpulseinternational.com
widget.test.wh.sportingpulseinternational.com
widget.wh.geniussports.com
widget.uat.wh.geniussports.com
widget.test.wh.geniussports.com

Other certificates including the domain name sportingpulseinternational.com

(limited to 100 certificates)
support.wh.sportingpulseinternational.com
support.wh.geniussports.com
widget.wh.sportingpulseinternational.com
*.sportingpulseinternational.com
webcast.wh.geniussports.com
api.wh.geniussports.com
live.wh.geniussports.com
capi.wh.sportingpulseinternational.com
img.wh.sportingpulseinternational.com
api.wh.geniussports.com
widget.wh.sportingpulseinternational.com
hosted.wh.sportingpulseinternational.com
api.wh.geniussports.com
live.wh.geniussports.com
webcast.wh.geniussports.com
live.wh.geniussports.com
api.wh.geniussports.com
statsengine-api.dcd-uat.i.geniussports.com
hosted.wh.sportingpulseinternational.com
webcast.wh.geniussports.com
*.sportingpulseinternational.com
img.wh.sportingpulseinternational.com
staff.sportingpulseinternational.com
api.wh.geniussports.com
api.wh.geniussports.com
api.wh.geniussports.com
live.wh.geniussports.com
hosted.wh.sportingpulseinternational.com
widget.wh.geniussports.com
widget.wh.geniussports.com
live.wh.geniussports.com
statsengine-stream.dcd-uat.i.geniussports.com
widget.wh.geniussports.com
*.sportingpulseinternational.com
support.wh.sportingpulseinternational.com
hosted.wh.sportingpulseinternational.com
scoutinfo.wh.geniussports.com
webcast.wh.geniussports.com
scoutinfo.wh.geniussports.com
widget.wh.sportingpulseinternational.com
live.wh.geniussports.com
live.wh.geniussports.com
support.wh.sportingpulseinternational.com
img.wh.sportingpulseinternational.com
capi.wh.aws.sportingpulseinternational.com
*.sportingpulseinternational.com
hosted.wh.geniussports.com
widget.wh.sportingpulseinternational.com
support.wh.sportingpulseinternational.com
*.sportingpulseinternational.com
api.wh.geniussports.com
img.wh.sportingpulseinternational.com
img.wh.sportingpulseinternational.com
hosted.wh.sportingpulseinternational.com
webcast.wh.geniussports.com
widget.wh.sportingpulseinternational.com
webcast.wh.geniussports.com
support.wh.geniussports.com
api.wh.geniussports.com

Certificate

The complete raw certificate details for widget.wh.sportingpulseinternational.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkopmW7zzIwf60fpkEirO
vwzVjy6q1zwJd0TMKaVbDSzx5goJvaJGguuP82mnScciM9elCGbWHlcIq9jfderQ
JbEGj7yk0nRTSCkTaZjovCrzUF9u/7kkkCQTzb0s+JTX4FDt8NfE51OjsmTF3vxI
milh3ijkOQDgb7p7bCzcQMrjoi4MKeYS0KNezOQTDyOARVFvo1ZSS8QK2ePKizgf
iPmW78N0CtV+RQNZYhFr7spwK0J80dEcETmHyrTKcsfpzufMVRbcZE357p0jFOAd
GEsZILm8H20z7KTpsabhp7Ww1AlbqpUKVh0Z0E6KIMtxzsxkfP4Fp6fGJMEkT/iF
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17385268890545770071204300124433828481
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'widget.wh.sportingpulseinternational.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18499040028442434691180441654597068305613007811781581914545382519370940524928819402789407669234691835491952339508205257491698369435079787906429284446386459911025000506259971687303234146433749364147442308497495508444343494283017830694079507740613439631540122781089911232919785769134667405223609175288529881992216682903441743299597190610569132241219267297137654172014510977838338673149213560254820496164035787135852961247266297587137539022012021693810755447472852803418638444915044423137728405913716940358453034114039464695656863315875702890593754219615578695177832597160300818708664067187699513539020242169393051108853
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d9394ed37ace99a9bbf2d04c6ab7792d76d8a8b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (231 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.wh.sportingpulseinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.uat.wh.sportingpulseinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.test.wh.sportingpulseinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.wh.geniussports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.uat.wh.geniussports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widget.test.wh.geniussports.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016a9a6c49c90000040300473045022100874fda245786f57eac0c8559fdfe41928c66c126cf8583603ad9952fb2c09cc8022070d8e0dd4b380759b2aeb759e92bfa287340b5995891a691cb09b5667910bf4c0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016a9a6c4aef000004030046304402206d311833bcc8b5fc20c9cac2eb1e77256ae5027724546e7391778b20f5784e4b022027565c7e91d0200e2d8838f3fd6738820dafe04e3e201af290d13c277cd5f462
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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