alltrails.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 09:5e:ed:3c:eb:69:83:79:78:16:30:e9:73:2b:eb:0c was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=alltrails.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:5e:ed:3c:eb:69:83:79:78:16:30:e9:73:2b:eb:0c
Serial Number (int): 12455939624388868344760934877964790540
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ab:7a:4d:3d:37:13:58:5e:f3:d5:a8:b4:6a:d3:54:90:1d:3e:ef:7f
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): d3:18:59:b1:5c:74:88:63:41:a4:c2:16:cf:84:dd:a2:0b:af:a7:c9
Fingerprint (sha256): 04:41:2e:a2:ce:d7:04:65:bf:5f:c1:d9:74:66:2e:16:d0:6b:60:2c:89:a9:1d:43:79:8c:77:28:61:37:0d:5b

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate alltrails.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alltrails.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alltrails.com
*.alltrails.com

Other certificates including the domain name alltrails.com

(limited to 100 certificates)
adminsupport.maxwellhealth.com
fluxx.totemapp.net
alltrails.com
orders.alltrails.com
orders.alltrails.com
support.alltrails.com
orders.alltrails.com
orders.alltrails.com
easymarkit.totemapp.net
www.distilnetworks.com
adminsupport.maxwellhealth.com
adminsupport.maxwellhealth.com
orders.alltrails.com
adamlyonsw.totemapp.net
adminsupport.maxwellhealth.com
*.alltrails.com
orders.alltrails.com
dojo-madness.totemapp.net
*.alltrails.com
*.alltrails.com
about.ksting.com
about.ksting.com
orders.alltrails.com
*.alltrails.com
support.alltrails.com
orders.alltrails.com
*.dev.alltrails.com
atlantis.dev.alltrails.com
lp.alltrails.com
about.ksting.com
*.alltrails.com
www.distilnetworks.com
adminsupport.maxwellhealth.com
adminsupport.maxwellhealth.com
about.ksting.com
fr.cdn-assets.alltrails.com
www.distilnetworks.com
adminsupport.maxwellhealth.com
orders.alltrails.com
adminsupport.maxwellhealth.com
press.getsundaily.com
console.alltrails.com
adminsupport.maxwellhealth.com
*.alltrails.com
alltrails.com
alltrails.com
about.ksting.com
*.alltrails.com
alltrails.com
www.distilnetworks.com
shop.alltrails.com
support.alltrails.com
dodo.totemapp.net
adminsupport.maxwellhealth.com
totem.alltrails.com
fluxx.totemapp.net
www.distilnetworks.com
press.swipecast.com
support.swimlane.com
geppetto-api.production.alltrails.com
adminsupport.maxwellhealth.com
picachocoffee.totemapp.net
bonusly.totemapp.net
intothewhoknows.totemapp.net
adminsupport.maxwellhealth.com
archmission.totemapp.net
about.ksting.com
support.swimlane.com
about.ksting.com
*.alltrails.com
press.getsundaily.com
archmission.totemapp.net
*.alltrails.com
about.ksting.com
orders.alltrails.com
britttest.totemapp.net
support.alltrails.com
www.distilnetworks.com
alltrails.com
adminsupport.maxwellhealth.com
fourpointsbar.totemapp.net
totem.alltrails.com
www.distilnetworks.com
*.webdev.alltrails.com
adminsupport.maxwellhealth.com
www.distilnetworks.com
about.ksting.com
*.alltrails.com
insitome.totemapp.net
orders.alltrails.com
beardedbastard.totemapp.net
journal.alltrails.com
shop.alltrails.com
cdn-assets-2.alltrails.com
shop.alltrails.com
orders.alltrails.com
fr.cdn-assets.alltrails.com
*.alltrails.com
*.dev.alltrails.com
orders.alltrails.com

Certificate

The complete raw certificate details for alltrails.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0dWjiH0RMKlrg/+OsOF
xaVbtnd8HRqmpy/a8ikSfZCo+SkekG4DPgK5KoFxRN0JQ0Zfj6KJpFQOPP4RxDWr
hr9A7TjqIV8Hzbn4HCHo1CR+ksuL5oVvb/aVPRkIrOFdWdM6lF5+KidLZtWS94ET
ORzAsrqt4ctd4ji1wZ/rQGFQzjEDU6tDCUHaZhxoY0xNb4irzK8IvEXeVkk8GyBq
wW84zddB38DEV1QDqNw8TpkiLaKqZkAV92iUSMVtWedVJ5nR6DHkvsZKJPY+3LcM
+Vr7zWVmpWjHyU+NSIjOgQGDZ5T35uM/gMODBUI58xWuVPipqgqGtX1RUrQ7DoRt
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12455939624388868344760934877964790540
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alltrails.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21116975060641359642999399585067778799450902400737574129393128291153924550582958927327366750053323512473697343957159711986303558960331273859492712533271440896116268993720653918105952591580407403054818430314339365006245408554831938531890809824482725296913143681089166740375718143707748633139358952873108460756313460168805633250590831391801524519447414438468725385637726225645843892381811340736817040014686788421637127591657893712606639207591757821834362953305733572404066100307020615721699168835281372937973585543285146293513082016039772467760246602970796397536427447191288158734810794905334634651787633562835002617271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ab7a4d3d3713585ef3d5a8b46ad354901d3eef7f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alltrails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alltrails.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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