recommendation-api.rcengp.ext.aws.zooplus.io

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0a:1f:2a:cb:bf:e6:04:1a:05:8d:46:2f:d6:1e:61:81 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=recommendation-api.rcengp.ext.aws.zooplus.io

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:1f:2a:cb:bf:e6:04:1a:05:8d:46:2f:d6:1e:61:81
Serial Number (int): 13454109164373791335210456607805563265
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 20:27:9b:1c:88:90:83:f9:55:a2:be:56:df:cc:72:cd:fa:aa:5a:72
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): ee:6d:8c:01:6b:3a:61:ca:61:18:27:a1:bb:d6:eb:28:af:12:d0:e9
Fingerprint (sha256): 00:99:b0:93:de:66:d6:3e:b5:42:66:fc:f2:33:eb:1e:b5:c9:db:e8:2d:1d:87:2c:7b:59:ac:8d:6d:d3:f7:e5

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate recommendation-api.rcengp.ext.aws.zooplus.io

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for recommendation-api.rcengp.ext.aws.zooplus.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

recommendation-api.rcengp.ext.aws.zooplus.io
recommendation-api.public.zooplus.net

Other certificates including the domain name zooplus.io

(limited to 100 certificates)
b3.shared.global.fastly.net
thelasttest.jiradev.zooplus.io
recommendation-api.rcengp.ext.aws.zooplus.io
self-care-api-gateway.cscp.ext.aws.zooplus.io
*.dlvryk8sp.int.aws.zooplus.io
cdn-feature-shop-9078.discod.ext.aws.zooplus.io
*.tsac.ext.zooplus.io
dii2.shpp.ext.zooplus.io
*.dnak8sp.int.aws.zooplus.io
*.zooplus.io
tf-module-nlb-test.litterbox.ext.aws.zooplus.io
*.jiradev.zooplus.io
*.accntk8sp.int.aws.zooplus.io
cdn-beta.disco.ext.aws.zooplus.io
coupon-provider-service-dev.zappd.ext.aws.zooplus.io
b3.shared.global.fastly.net
*.zooplus.io
hendrix-neo4j-prod.hendrixp.int.aws.zooplus.io
b3.shared.global.fastly.net
*.zooplus.io
*.loytyk8sd.ext.aws.zooplus.io
*.dnak8sd.int.aws.zooplus.io
*.zooplus.io
coupon-provider-service-prod.zappp.int.aws.zooplus.io
*.prcngk8sp.ext.aws.zooplus.io
*.zooplus.io
self-care-api-gateway.cscp.ext.aws.zooplus.io
personalization-tracking-api.letop.ext.aws.zooplus.io
*.zooplus.io
*.zooplus.io
hendrix-api.hendrixd.ext.aws.zooplus.io
*.zooplus.io
b3.shared.global.fastly.net
*.shopk8sp.int.aws.zooplus.io
*.srcngk8sd.ext.aws.zooplus.io
*.sndx.int.zooplus.io
b3.shared.global.fastly.net
*.zooplus.io
cdn-release.discod.ext.aws.zooplus.io
*.dlvryk8sd.ext.aws.zooplus.io
aws-accounts.wallaby-test.zooplus.io
*.catsk8sd.int.aws.zooplus.io
cdn-prod.disco.ext.aws.zooplus.io
*.idpk8sp.ext.aws.zooplus.io
*.zooplus.io
dlv-d.ext.aws.zooplus.io
*.zooplus.io
*.zooplus.io
*.ndbk8sp.int.aws.zooplus.io
dii2.shpp.ext.zooplus.io
*.zooplus.io
*.prcngk8sp.ext.aws.zooplus.io
*.ps-prod.zooplus.io
cdn-feature-shop-9782.discod.ext.aws.zooplus.io
*.srcngk8sp.int.aws.zooplus.io
coupon-provider-service-prod.zappp.ext.aws.zooplus.io
*.mdmk8sd.ext.aws.zooplus.io
b3.shared.global.fastly.net
test-rsoleto.partdev.int.int.aws.zooplus.io
b3.shared.global.fastly.net
shpd.mediazs.com
*.zooplus.io
b3.shared.global.fastly.net
finalup.jiradev.zooplus.io
*.ipsk8sd.ext.aws.zooplus.io
self-care-gateway.cscd.ext.aws.zooplus.io
coupon-provider-service-prod.zappp.ext.aws.zooplus.io
b3.shared.global.fastly.net
*.jiradev.zooplus.io
cdn-feature-shop-9782.discod.ext.aws.zooplus.io
b3.shared.global.fastly.net
*.zooplus.io
*.ndbk8sd.int.aws.zooplus.io
fileportal.mft-dev.ext.aws.zooplus.io
coupon-provider-service-prod.zappp.ext.aws.zooplus.io
b3.shared.global.fastly.net
b3.shared.global.fastly.net
*.zooplus.io
b3.shared.global.fastly.net
*.zooplus.io
*.rcengd.int.aws.zooplus.io
tf-module-nlb-test.litterbox.ext.aws.zooplus.io
*.dmmd.ext.aws.zooplus.io
cdn-feature-shop-9468.shpsrchd.ext.aws.zooplus.io
*.custsk8sd.int.aws.zooplus.io
website.sampleapd.ext.aws.zooplus.io
self-care-api-gateway.cscp.ext.aws.zooplus.io
hendrix-api-prod.hendrixp.int.aws.zooplus.io
development.jiradev.zooplus.io
b3.shared.global.fastly.net
*.dgmktk8sd.int.aws.zooplus.io
*.custsk8sp.ext.aws.zooplus.io
*.zooplus.io
dii2.shpp.ext.zooplus.io
customer-historization.idpc-dev.ext.aws.zooplus.io
b3.shared.global.fastly.net
sonarqube.sonarp.int.aws.zooplus.io
*.zooplus.io
*.edd-d.ext.aws.zooplus.io
*.custsk8sd.int.aws.zooplus.io

Certificate

The complete raw certificate details for recommendation-api.rcengp.ext.aws.zooplus.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUrIdJ4NMe8Vwx4mWyzH
aoubizstZPBHvDXpkx7PHx9LmOUTlT6fJjkJyA1baNYInr1B3fpW+vJfq+gwDsBy
Gu0onbmZxgn1b8XRTvhDhHuncjq9U+2sUaBn9Z7yPCWDRoWiQiF2nehecrnnhb4e
KaUxfM7D2w4Z0t+arkLFftNPVblXM4Db3m8Zmo3i4oCeYQwjqK2muhUAK4CbbPPs
xeIe3CV7/Qx03ijtX0MYQGu2zpB5O97Apr5DWp1MVQ/Zku7/Zgb3bD+XS80Iw5TD
yavfRvhK/nvj5mYP9DmSSmP0VgqUeJbetsE5msQoPKvswcgUw549itsMPB9+vV3Y
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13454109164373791335210456607805563265
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'recommendation-api.rcengp.ext.aws.zooplus.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21371150425501211059478264043667691675439283766666062813418014359393512723024923168189080889322243479812354929373685695553459027283283537427295316308217390755768151303015306923860087291598973989278281440407435819831743982134704468078380490464845569442183632689164006589592302110142778383486855242282859530047042918689918205521748500263436122975145182047055251902694400438542218008239840161114084608992484955629577592517172311868479640181627987218159861980742367632933616102677649597888802884760847117028372904911789937168158995844683102437165526678555831781711193254637715280173342073561004439867006213742470073538739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							20279b1c889083f955a2be56dfcc72cdfaaa5a72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recommendation-api.rcengp.ext.aws.zooplus.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recommendation-api.public.zooplus.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001862bed3460000004030047304502207fdda316d86c1bf62e2b4e2c7fdc51b6d41d9da602d4ba309b4694bd88cfd69e022100dd721e16c9fcc948bcf3b81d07aec2b36c3dc668f49eaee828a33945c96c403000760073d99e891b4c9678a0207d479de6b2c61cd0515e71192a8c6b80107ac17772b5000001862bed34960000040300473045022078f74fc7f1f2c179a916ead813d837a3720260d6b43365a517653059d06a2c2f022100a09773a4082e3a35975ff04a97c7abdf1ca2a52d35c134adb7592cf5da6ac57400770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001862bed34620000040300483046022100966403c1da69ea3be0c75fd0942d05a5b30b3c70adf523e09e85628b5943f318022100e6ba98f9e741dcbbb42463fd52e11bb9376c2104cae18de7c79d8cf8928d10be
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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