live.diamond.zappos.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0f:ba:11:9d:01:ae:20:4d:c8:7b:dc:a9:c0:1c:f1:10 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=live.diamond.zappos.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:ba:11:9d:01:ae:20:4d:c8:7b:dc:a9:c0:1c:f1:10
Serial Number (int): 20904544392765983503369406411869843728
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 5d:17:ab:0f:77:b5:cd:09:3b:68:9f:76:3a:bc:9f:b5:da:23:00:01
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): cb:7c:ab:66:0c:04:95:7a:ae:2e:5c:37:27:f8:2b:9a:31:59:12:2d
Fingerprint (sha256): 03:a0:ab:a2:24:ca:ae:5a:58:fb:14:2b:77:d5:13:36:5a:81:3b:7a:ec:ca:0a:6b:53:f5:dd:e9:2e:a3:6c:8c

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate live.diamond.zappos.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for live.diamond.zappos.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

live.diamond.zappos.com
live.diamond.6pm.com
live-us-east-1.diamond.zappos.com
live-us-east-1.diamond.6pm.com

Other certificates including the domain name zappos.com

(limited to 100 certificates)
*.cloudcatalog.zappos.com
live.diamond.zappos.com
fosgate-live.zappos.com
zappos-ask-na.amazon.com
www.zappos.com
zycada-amzn.zappos.com
fosgate-live.zappos.com
preprod-www.zappos.com
a.zassets.com
rookieusa.zappos.com
qa.bounties.ost.zappos.com
api.akita.zappos.com
image.email.zappos.com
api.beta.cassiopeia.ugc.zappos.com
expertise.zappos.com
zcreator-prod-na.amazon.com
removals-ui.devo-bos.zappos.com
patron.zappos.com
*.cloudcatalog.zappos.com
area51.zappos.com
redirector-zapposset.zmt.zappos.com
app.us-west-2.prod.kratos.zappos.com
view.email.zappos.com
test01.findzen.com
partnercentral.zappos.com
image.email.zappos.com
luxury.zappos.com
live.diamond.zappos.com
whiterabbit.zappos.com
*.olympus.zappos.com
r.amazon.com
tryst.devo-bos.zappos.com
app.us-west-1.gamma.kratos.zappos.com
imageorigin.zappos.com
r.amazon.com
opal.zappos.com
solr.bos.zappos.com
video.zappos.com
track.zappos.com
secure-www.zappos.com
d42.ewoks.zappos.com
sitevideo.zappos.com
www.zappos.com
mailer.zappos.net
api.beta.reactions.ugc.zappos.com
beta.fluid.zappos.com
*.olympus.zappos.com
view.email.zappos.com
test01.findzen.com
jira.zappos.net
zpot-na-prod.zappos.com
partnercentral.zappos.com
*.olympus.zappos.com
skynet.zappos.com
fosgate-beta.zappos.com
live.diamond.zappos.com
live.marty.zappos.com
*.endor.zappos.com
dx1.vpce.zappos.com
vrsnl.com
pehz-rest3.devo-bos.zappos.com
*.apps.zappos.com
*.olympus.zappos.com
zappos.com
paybpeadev.zappos.com
us-west-1.gamma.kratos.zappos.com
video.zappos.com
vertex.corp.zappos.com
api.anything.zappos.com
*.apps.zappos.com
view.email.zappos.com
search.splunk.zappos.com
live.diamond.zappos.com
wms-mojito-sideline.bos.zappos.com
*.olympus.zappos.com
marketing.zappos.com
innovate.marty.zappos.com
zpot-na-prod.amazon.com
*.cloudcatalog.zappos.com
build-bos.zappos.com
expertise.zappos.com
imageorigin-qa.zappos.com
bos-reports.zappos.com
keyserver.zappos.com
*.olympus.zappos.com
auth-zappos-na.amazon.com
opal.zappos.com
api.alpha.reactions.ugc.zappos.com
vrsnl.com
sm71.devo-bos.zappos.com
*.apps.zappos.com
*.olympus.zappos.com
zappos.com
vrsnl.com
zycadaapi.zappos.com
live.diamond.zappos.com
live.diamond.zappos.com
fortinac.zappos.com
*.dev.ss.ost.zappos.com
auth-zapposcouture-na.amazon.com

Certificate

The complete raw certificate details for live.diamond.zappos.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnambITBR1Em6AaOTKzc
zwsgtG1Ojh9GMYgOmcFGWtCmP4BTMrFdZYB/guB34cNNDpPRmq+gyfYsYEvfMOCd
pFVMQCc9H7GnDQpbn9POjB83CE069w9iehwUZQXzYbF3BVZCxLt5sKScxcXqrl04
fczWxmeb/RvdDmTjDFZ8t//0sir66YtEUGns4yauQ5J7qo2Pw6G8vwyvmIbqgVKy
gFs8hx4ufT4R5cok/gJJnlCGqywgXCGGNVAeDCXSg5qbGjrOzcdzQpM0gzsdKe+u
VK09uVAO7zOOdtfwm0Gv2DFjxHAV4+kF8U3xS1le9OVgpPunVYkr7+vqPvDV/BG9
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20904544392765983503369406411869843728
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-05 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'live.diamond.zappos.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24043786485231168130645797884995976550019432026260449410492356441999302897081893484518853853559223866092315326821724380690806389851471212768513580611533471875692147846933481595151726437927547875896884483397406287611681705993152018929126869097698961801510525757952205953236236994991344719946872795492423175257494804644008053201539949225707206882105832361577773062248878502641493371153849463146415766311103666692277926107866257284208697660343834684625623335620935285502141402128456539395460065574367339973206744233680282951650277861566580729539092967566662631264686408091902528715208190060132734675723594450051003432341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d17ab0f77b5cd093b689f763abc9fb5da230001
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.diamond.zappos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.diamond.6pm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-us-east-1.diamond.zappos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live-us-east-1.diamond.6pm.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0053ac910e393b1ce7115a79abe44d240404a1ec786210af190d5b4c747ded911e77bc497a977288088ee091306cb83b170ad54c9d3b4029fe3804e4aaa1044e36a152fef4ef6b2213bfad4236748837ba11ef03c76aa2bfe43f74d06462a83ebc8fa63de13fac89cd72a10d9ac6851e49474929a7b2ab0dcef690962ea98d634fda27d3bcf602296dd9af0d95db2d6e394692f105ad69239df0d51fc8d448cc62ea183a9c135c2739062c132f675892c5deaf0babda12c24e47332e231c4e8b8b3ac53570eea88a86bd89aa4d8d3b2c233ec3f54f2dce66105543beee66794d9f5311aea37e882c239252d886a76f8cca39b0298637d980678eea57d7ff0239bf