live.diamond.zappos.com

Issued by Amazon

About this certificate

This digital certificate with serial number 07:9c:b7:0d:7b:31:ad:1c:eb:99:a1:b6:d3:ad:f0:df was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=live.diamond.zappos.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:9c:b7:0d:7b:31:ad:1c:eb:99:a1:b6:d3:ad:f0:df
Serial Number (int): 10118307029476136237575086784532836575
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 5e:33:04:cd:6a:35:5a:dd:e1:04:d8:1e:c6:49:ad:46:4d:ff:ad:3c
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): e5:c8:2a:d6:3c:32:4b:ae:85:85:0f:52:8d:63:22:4d:18:f3:80:af
Fingerprint (sha256): 00:2f:28:96:27:a0:bb:86:c5:12:07:68:50:b3:c8:b5:2e:16:77:b1:3c:e0:fc:62:40:7b:47:07:f8:32:73:20

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate live.diamond.zappos.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for live.diamond.zappos.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

live.diamond.zappos.com
live.diamond.6pm.com
live-us-east-2.diamond.zappos.com
live-us-east-2.diamond.6pm.com

Other certificates including the domain name zappos.com

(limited to 100 certificates)
*.cloudcatalog.zappos.com
live.diamond.zappos.com
fosgate-live.zappos.com
zappos-ask-na.amazon.com
www.zappos.com
zycada-amzn.zappos.com
fosgate-live.zappos.com
preprod-www.zappos.com
a.zassets.com
rookieusa.zappos.com
qa.bounties.ost.zappos.com
api.akita.zappos.com
image.email.zappos.com
api.beta.cassiopeia.ugc.zappos.com
expertise.zappos.com
zcreator-prod-na.amazon.com
removals-ui.devo-bos.zappos.com
patron.zappos.com
*.cloudcatalog.zappos.com
area51.zappos.com
redirector-zapposset.zmt.zappos.com
app.us-west-2.prod.kratos.zappos.com
view.email.zappos.com
test01.findzen.com
partnercentral.zappos.com
api.prod.cassiopeia.ugc.zappos.com
image.email.zappos.com
luxury.zappos.com
live.diamond.zappos.com
whiterabbit.zappos.com
*.olympus.zappos.com
r.amazon.com
tryst.devo-bos.zappos.com
app.us-west-1.gamma.kratos.zappos.com
imageorigin.zappos.com
r.amazon.com
opal.zappos.com
solr.bos.zappos.com
video.zappos.com
track.zappos.com
secure-www.zappos.com
d42.ewoks.zappos.com
sitevideo.zappos.com
www.zappos.com
mailer.zappos.net
api.beta.reactions.ugc.zappos.com
beta.fluid.zappos.com
*.olympus.zappos.com
view.email.zappos.com
test01.findzen.com
jira.zappos.net
zpot-na-prod.zappos.com
partnercentral.zappos.com
*.olympus.zappos.com
skynet.zappos.com
fosgate-beta.zappos.com
irt.ewoks.zappos.com
live.diamond.zappos.com
live.marty.zappos.com
*.endor.zappos.com
*.us-west-1.gamma.kratos.zappos.com
dx1.vpce.zappos.com
vrsnl.com
pehz-rest3.devo-bos.zappos.com
*.apps.zappos.com
*.olympus.zappos.com
zappos.com
paybpeadev.zappos.com
us-west-1.gamma.kratos.zappos.com
*.us-west-1.gamma.kratos.vrsnl.zappos.com
video.zappos.com
vertex.corp.zappos.com
api.anything.zappos.com
*.apps.zappos.com
view.email.zappos.com
search.splunk.zappos.com
live.diamond.zappos.com
wms-mojito-sideline.bos.zappos.com
*.olympus.zappos.com
marketing.zappos.com
innovate.marty.zappos.com
zpot-na-prod.amazon.com
*.cloudcatalog.zappos.com
build-bos.zappos.com
expertise.zappos.com
imageorigin-qa.zappos.com
radius.zappos.com
bos-reports.zappos.com
*.us-west-1.gamma.kratos.zappos.com
keyserver.zappos.com
*.olympus.zappos.com
auth-zappos-na.amazon.com
opal.zappos.com
api.alpha.reactions.ugc.zappos.com
vrsnl.com
sm71.devo-bos.zappos.com
*.apps.zappos.com
*.olympus.zappos.com
zappos.com
vrsnl.com

Certificate

The complete raw certificate details for live.diamond.zappos.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWJj89SxT+RLCBhxp8+j
2ZFaDdS3m3lmGj7PTnI2QNFpgJhWbcuVc2Z6E4MWpxMEX4y8MHFlohM3MQ8qiYST
Q/EVYGZMPmVkSsA9JUui6BSvSxynOhkh9kxvuh13xTcx37q34LevqIMCdHhOxaoW
GXoOJSmaLzaRFRKe8l383ZjYA8EptIAgYr6cZD3IlVqARydfy9xLal8FWZfsMWng
JJynZNsxpAF9Np3oZR/wc1zs/ucp+2Gm9szoVyBRp/WV+Jxkw/0bq3kFffExFLZ7
H5agPj0287d2O7ced9T5d1XtGWX+2CgkqJdTQgSB8S3a526kHZLG7lsf5k8LWXof
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10118307029476136237575086784532836575
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'live.diamond.zappos.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22897651332777569844496057330420621632524320258806767175799260082177549286332142285311320122917112767246705720705145865045998957812153922264846316663112930605942097009459229263525949206661981259334690133002005083445728939055914039239487783387928971072359508599885744411354714276137875263746313038326647379754243694064190447631687263558078235642295253783740845624824950310631523625268265465646155346680903884449300124570201844228800345743575075914307594774281682139629801638952856992969311646205783563510530213830954539412226078107999326898559957664656731748390283911106941189638988282393529027826752656933543149707137
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5e3304cd6a355adde104d81ec649ad464dffad3c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.diamond.zappos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.diamond.6pm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-us-east-2.diamond.zappos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-us-east-2.diamond.6pm.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000017d92cadec4000004030047304502203bd025a2542dde1ba52540f42429b5ec6537778536a8c6c421d08f0ff00426be022100bf28685aa9c92a6befc86252df3297a521fded20b78232bd182144dc6f5a501f00770035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c0000017d92cadf060000040300483046022100850e6ea223cd191066dc507b83acfb7dad221165998a7baeceaf3f75c2d96514022100d7229ebb8cc2a74d196973d77f1a39dcb7232e7bb2668833d70733cfa959d552007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000017d92cadf220000040300473045022001878b98d7fe60997885243f63e0b2bd7825d32adc00691f786fd2c9118a7cc2022100a70fc55449ec13cdd612ca4c246ef9412136f682c89f767e2c05bdb999811e35
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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