octane-magazine.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 06:2e:49:0a:15:8b:bf:a0:f2:11:97:87:61:2c:39:43 was issued on by Amazon.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=octane-magazine.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:2e:49:0a:15:8b:bf:a0:f2:11:97:87:61:2c:39:43
Serial Number (int): 8215695045052919859014418511367518531
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 01:66:ae:f1:9e:63:06:17:75:56:ef:9b:03:f0:1b:dc:ed:fc:08:5c
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 29:11:d3:a3:d3:22:36:f2:d0:b0:7a:5a:42:3a:4c:00:b1:34:43:75
Fingerprint (sha256): ff:c8:ff:7a:6b:32:02:83:4e:05:a2:c2:e2:3e:e0:ee:e7:1b:52:b5:a5:43:47:58:d0:31:9c:ab:b3:8d:c0:bc

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate octane-magazine.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for octane-magazine.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

octane-magazine.com
enzo-magazine.co.uk
offers.astonmagazine.co.uk
aneveningwithastonmartin.co.uk
*.enzo-magazine.co.uk
mag.autoexpress.co.uk
*.octane-magazine.com
vantagemag.co.uk
mag.evo.co.uk
www.vantagemag.co.uk

Other certificates including the domain name octane-magazine.com

(limited to 100 certificates)
www2.pugpig.com
dns-vetting1-mims-pawel.map.fastly.net
subscribe.octane-magazine.com
dns-vetting1-mims-pawel.map.fastly.net
subscription.theweek.co.uk
adspecs.dennis.co.uk
dns-vetting1-mims-pawel.map.fastly.net
abafrica.accaglobal.com
dns-vetting1-mims-pawel.map.fastly.net
www2.pugpig.com
subscription.theweek.co.uk
www2.pugpig.com
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
www2.pugpig.com
www2.pugpig.com
dns-vetting1-mims-pawel.map.fastly.net
adspecs.dennis.co.uk
dns-vetting1-mims-pawel.map.fastly.net
auth.astonmagazine.co.uk
dns-vetting1-mims-pawel.map.fastly.net
adspecs.dennis.co.uk
www2.pugpig.com
adspecs.dennis.co.uk
www2.pugpig.com
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
www2.pugpig.com
adspecs.dennis.co.uk
www2.pugpig.com
abafrica.accaglobal.com
www2.pugpig.com
www2.pugpig.com
www2.pugpig.com
dns-vetting1-mims-pawel.map.fastly.net
www2.pugpig.com
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
www2.pugpig.com
www2.pugpig.com
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
abafrica.accaglobal.com
dns-vetting1-mims-pawel.map.fastly.net
subscription.theweek.co.uk
subscription.theweek.co.uk
auth.subscription.theweek.co.uk
www2.pugpig.com
www2.pugpig.com
www2.pugpig.com
auth.astonmagazine.co.uk
www2.pugpig.com
www2.pugpig.com
subscribe.octane-magazine.com
adspecs.dennis.co.uk
www2.pugpig.com
dns-vetting1-mims-pawel.map.fastly.net
www2.pugpig.com
www2.pugpig.com
www2.pugpig.com
www2.pugpig.com
abafrica.accaglobal.com
www2.pugpig.com
www2.pugpig.com
www2.pugpig.com
www2.pugpig.com
aneveningwithastonmartin.co.uk
www2.pugpig.com
www2.pugpig.com
astonmagazine.co.uk
www2.pugpig.com
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
www2.pugpig.com
astonmagazine.co.uk
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
abafrica.accaglobal.com
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
www2.pugpig.com
dns-vetting1-mims-pawel.map.fastly.net
www2.pugpig.com
www2.pugpig.com
auth.subscription.theweek.co.uk
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
dns-vetting1-mims-pawel.map.fastly.net
subscription.theweek.co.uk
dns-vetting1-mims-pawel.map.fastly.net
aneveningwithastonmartin.co.uk
adspecs.dennis.co.uk
auth.astonmagazine.co.uk
dns-vetting1-mims-pawel.map.fastly.net
www2.pugpig.com

Certificate

The complete raw certificate details for octane-magazine.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDZCm9v1bwvgHYE/fDFO
D1rDqWZD0TJK94vc0JCza5R6ti6CaVIpCndPEFl0197xSgb7hf+4gslx5PT9hRik
j3F72DM0Bga+VJSJL4Gyu4xwyR82PeMI1R+rqOEW6ULzYfQ+OjUObfMtSTuwWNKZ
WZrrwJeHRWK5OyXnYllhENCG+aIG8Aqz5sW3V3wwKV+tXU5kxbVPAJJ2b4xgGyED
pDzDzNQhDAsEOyBucRcfDCYeVUeHOk44VaXQ5jfvZCjmTuOPdX+uVuAq6PrMVSLl
GuSUwsSx4QYPPf424PoCIX/XKFJdTTLtlqu/+wnw/H+UQhT6LVoIaYSEVY4PLl1w
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8215695045052919859014418511367518531
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'octane-magazine.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17195166172665182445236116009416223267515308492617979877217731674290603925346431382712819296158495751844400515825131009359552149325201379608977914197761225386004335974873300573597062802321878585485473241562970453412312590616869605579213292911732642423056986866762017713839705819420872279690511414238151165572064141239371944867389870428279018458727205506921292657871440752151838337656272124460499358077357537124164531509825569910244089803231748472221115674945512962553758179147741875338064597878575779990051570563710804750881272109342040749325317575716840509018392191350925277824832371249034749130041681139899450618051
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0166aef19e6306177556ef9b03f01bdcedfc085c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (229 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'octane-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enzo-magazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offers.astonmagazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aneveningwithastonmartin.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.enzo-magazine.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mag.autoexpress.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.octane-magazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vantagemag.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mag.evo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vantagemag.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							016800760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018901ab41ea000004030047304502204dbb0b824ee864c653deffc63829f816d0647056b2ff00e166f8e2e4bdfd87e0022100df126d8e5770d750bd7f6c606172fe96875c910b30a805bb7ae3ef446b399a6000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018901ab42160000040300473045022100e22e9f53dc95546cadca40204057b005b088d391ce4aac6856c47b2e235edfaa02200e40244c32f489a3a8aece35babefcafb492a58d4bbba32d6f6b1f9c48c81fed007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018901ab41de0000040300473045022001ba25b064dc06bb953179d80495caac1fca0ec3428b99206572ef360168d6140221009b0e44ba4077c4a548e988df305c38009c9f0f19a2efd1fb91df83e3d13b5e89
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b88d2843992ab1e25cb30ba14bde5a00852b565f9f28e560ad7652171dd97ff33a3ab7de25203d7a6fce517c0a042ea050d0689f3600f2fbe6171dab238214f7f7fbac960e5cb5aad435a3729f464aa8c39143f7e89d203e34d8ea8a7a43104e9c73004d6145f4406d0dfb7c52e6194decb6139a273bc6381c6da24be2bb9db5733a275ee0728a29913a667b2d114d2c64285e9ceb7c57e6b75cd1bd8f9080a6b901c80564a59d059bdfde08cfdf29f3004d0cb31f516f5f40751aae863f9c7e460b9efefc46d911d40cbade946cd5d3484b4352d3f4bf5e1df7fa02fec66e6b5283dab3328cc98b522097b098c7a5e30197915d0a168d056b1c560344243993