prod-cbi-files-rbi-eu-west-2.files.rbi.zscaler.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 09:d3:fe:4c:74:00:88:4d:ce:25:79:de:36:51:c2:94 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=prod-cbi-files-rbi-eu-west-2.files.rbi.zscaler.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:d3:fe:4c:74:00:88:4d:ce:25:79:de:36:51:c2:94
Serial Number (int): 13063784388495674910502942839867032212
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 96:cb:cd:08:19:7a:6d:33:91:99:40:76:a1:42:77:22:52:ce:84:eb
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 9d:62:7a:c8:c9:49:07:17:fa:c1:e2:2c:5e:e6:d2:b6:e3:7a:d4:8d
Fingerprint (sha256): 01:1f:87:ab:49:bb:f1:41:c8:eb:d8:48:85:ed:76:4b:b1:a9:81:31:05:70:1d:87:db:cd:0d:26:34:8d:42:6b

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate prod-cbi-files-rbi-eu-west-2.files.rbi.zscaler.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod-cbi-files-rbi-eu-west-2.files.rbi.zscaler.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prod-cbi-files-rbi-eu-west-2.files.rbi.zscaler.com

Other certificates including the domain name zscaler.com

(limited to 100 certificates)
2295b6f9367c.isolation.zscaler.com
help.zscaler.com
b6b91dde138a.isolation.zscaler.com
4aa4445570ad.isolation.zscaler.com
prod.2.slot.cdn.salesforce-communities.com
8807782cb340.isolation.zscaler.com
495dc7c9c1eebce6.fra16.34807507a31a.isolation.zscaler.com
9d04a73cad33.isolation.zscaler.com
4c06f9e1ceea.isolation.zscaler.com
90ba40bedcc6.isolation.zscaler.com
leapfrog-ssl-6.gcs-web.com
0daf4aaf8715.isolation.zscaler.com
be7adaf93846.isolation.zscaler.com
slackcmgmt.corp.zscaler.com
419c298af9b8.isolation.zscaler.com
90ca2a5d4b4b.isolation.zscaler.com
0d2fa3dafa67.isolation.zscaler.com
0daf4aaf8715.isolation.zscaler.com
cd4ef2e3c3b5.isolation.zscaler.com
e1d0482394d8.isolation-beta.zscaler.com
5ab736534595.isolation.zscaler.com
prod-cbi-files-rbi-eu-west-2.files.rbi.zscaler.com
edwardjones.isolation.zscaler.com
8dbc2ce137cd.isolation.zscaler.com
6080bf184bab.isolation.zscaler.com
za.private.zscaler.com
c335970eb6dd.isolation.zscaler.com
6f5adec659b2.isolation.zscaler.com
*.isolation.zscaler.com
c6d6200817d3.isolation.zscaler.com
0b6c380ef34f.isolation.zscaler.com
cfc36a23cbc5.isolation.zscaler.com
0be06188b296.isolation.zscaler.com
5c0410637e35.isolation.zscaler.com
prod.2.slot.cdn.salesforce-communities.com
09fbd4153565.isolation.zscaler.com
78b70ff10b3c.isolation.zscaler.com
809169afaccb.isolation.zscaler.com
community.zscaler.com
cloudy.et.zscaler.com
d9d10756af02.isolation.zscaler.com
0576cea396da.isolation.zscaler.com
fdf4db6dd23d3897.fra16.0c179f1867ca.isolation.zscaler.com
9ae9b06aa209.isolation.zscaler.com
moneysupermarket.isolation.zscaler.com
2bfaa0c971a9.isolation.zscaler.com
fbe29296e3fe.isolation.zscaler.com
cloudy.et.zscaler.com
zmtr.zscaler.com
e0256a8adfcf.isolation.zscaler.com
70d3a4cc06a5.isolation.zscaler.com
83217b31cb0f.isolation.zscaler.com
091d3899714e.isolation.zscaler.com
5bdb6a614a86.isolation.zscaler.com
d261c37e4836.isolation.zscaler.com
cb652b5bbc21.isolation.zscaler.com
16c44f217f94.isolation.zscaler.com
salesloft.zscaler.com
a120d773d3a4.isolation.zscaler.com
us2-zpa-reporting.private.zscaler.com
3fc0690debaa.isolation.zscaler.com
04fc236d68d1.isolation.zscaler.com
e4b168ed0709.isolation.zscaler.com
d6d380804d4f.isolation.zscaler.com
92f2fdc4c877.isolation.zscaler.com
2961718e1cd1.isolation.zscaler.com
scim3.private.zscaler.com
a0d5ef16060c.isolation.zscaler.com
e7db5e0bb1a5.isolation.zscaler.com
09590f90ac00.isolation.zscaler.com
cbi-beta-pdx.isolation-beta.zscaler.com
86bae35f7ba5.isolation.zscaler.com
84920d21e96a.isolation.zscaler.com
400b90645084.isolation.zscaler.com
986e611ad61d.isolation.zscaler.com
a615f065c0d2.isolation.zscaler.com
b295c4210050.isolation.zscaler.com
leapfrog-ssl-6.gcs-web.com
c1b419fad5cb.isolation.zscaler.com
73f7ee820e0c.isolation.zscaler.com
666c4b5db062.isolation.zscaler.com
5b46f9dca79f.isolation.zscaler.com
blog.zscaler.com
a3fcfbb69d37.isolation.zscaler.com
fca566012735.isolation.zscaler.com
942f71648559.isolation-beta.zscaler.com
tools.zscaler.com
geox.isolation.zscaler.com
6acafac8f2bb.isolation.zscaler.com
bcba6e1568cb.isolation.zscaler.com
cloudy.et.zscaler.com
ff82163f086b.isolation.zscaler.com
e14926bb0c74.isolation.zscaler.com
5614257a63c2457e.syd16.1c08d51bf34a.isolation.zscaler.com
751b339a4638.isolation.zscaler.com
hello.zscaler.com
bce244e8f7e4.isolation.zscaler.com
b295c4210050.isolation.zscaler.com
ee9819010f2d.isolation.zscaler.com
0fadd025de1f.isolation.zscaler.com

Certificate

The complete raw certificate details for prod-cbi-files-rbi-eu-west-2.files.rbi.zscaler.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75nt0oIit+q6yOLR54+7
27+yW+jBFQhM9tNJtEIf5dpxw1xvvYm33kd24ocrlmP5nbyi1OSE89eMPE35KSXH
RU7WCTzeBJ3cWS8t4ASRFC1gjbJe2+cHKNn0aC4EglBORPUfTzCzrvaU2yEDXS2w
LbwUlYVEsA7KNQMsOXsKi6yQREwqQSt0zwzgVNUNGSeGY3JEBjOjzb3zc+jZF5cu
ZdTztyMlVrJ98hzxxUj5xcEPzV6z0qVf0Dv6tR+g1YIZxMKjMOgD0hdHJvYGKIKy
glhAluXoJo3YwPuuCR2pozPzSppiwpd+oQZgd3Z4ZV966vE9QoYCST6UOpz2djnz
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13063784388495674910502942839867032212
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod-cbi-files-rbi-eu-west-2.files.rbi.zscaler.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30246860102536203992281144334101902577789989932730309775770518119058425052092432175114933640332866586107366355498463244374594708184784413491717715213494478650768153242445592415641461810486619374379731282625905946101016786612163441802258753974780335135358526637203938622586961361993130370796657383740115059105128979924114308291498879769425129769223954161625861963124010254936061265397264131104818125433532927835587740062438715980039849901289563442208239852815992856025297251920737573913672237715117701994997858655298541013555548384412529371012516460136260223502260626942551520631721730119174874809224103275831678858003
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							96cbcd08197a6d3391994076a142772252ce84eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-cbi-files-rbi-eu-west-2.files.rbi.zscaler.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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