*.loytyk8sd.ext.aws.zooplus.io

Issued by Amazon

About this certificate

This digital certificate with serial number 06:4c:1a:93:27:10:0d:3c:6b:74:cd:5b:4f:06:13:7e was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.loytyk8sd.ext.aws.zooplus.io

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:4c:1a:93:27:10:0d:3c:6b:74:cd:5b:4f:06:13:7e
Serial Number (int): 8370521537237047378938061888627807102
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 7f:70:04:95:4f:5e:9a:d9:31:97:4e:b9:0c:43:6e:07:55:4d:39:c2
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): a2:8f:f1:a4:8b:35:f1:db:70:e5:a5:ea:59:e4:21:bf:b1:14:bf:0a
Fingerprint (sha256): 04:90:d1:bb:a3:47:65:d3:7f:a7:b8:90:98:85:7e:07:00:d2:2e:de:8d:b8:d3:09:3b:c5:26:83:c7:4f:33:d7

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate *.loytyk8sd.ext.aws.zooplus.io

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.loytyk8sd.ext.aws.zooplus.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.loytyk8sd.ext.aws.zooplus.io
*.public.zooplus.net

Other certificates including the domain name zooplus.io

(limited to 100 certificates)
b3.shared.global.fastly.net
thelasttest.jiradev.zooplus.io
recommendation-api.rcengp.ext.aws.zooplus.io
self-care-api-gateway.cscp.ext.aws.zooplus.io
*.dlvryk8sp.int.aws.zooplus.io
cdn-feature-shop-9078.discod.ext.aws.zooplus.io
*.tsac.ext.zooplus.io
dii2.shpp.ext.zooplus.io
*.dnak8sp.int.aws.zooplus.io
*.zooplus.io
tf-module-nlb-test.litterbox.ext.aws.zooplus.io
*.jiradev.zooplus.io
*.accntk8sp.int.aws.zooplus.io
cdn-beta.disco.ext.aws.zooplus.io
coupon-provider-service-dev.zappd.ext.aws.zooplus.io
b3.shared.global.fastly.net
*.zooplus.io
hendrix-neo4j-prod.hendrixp.int.aws.zooplus.io
b3.shared.global.fastly.net
*.zooplus.io
*.loytyk8sd.ext.aws.zooplus.io
*.dnak8sd.int.aws.zooplus.io
*.zooplus.io
coupon-provider-service-prod.zappp.int.aws.zooplus.io
*.prcngk8sp.ext.aws.zooplus.io
*.zooplus.io
self-care-api-gateway.cscp.ext.aws.zooplus.io
personalization-tracking-api.letop.ext.aws.zooplus.io
*.zooplus.io
*.zooplus.io
hendrix-api.hendrixd.ext.aws.zooplus.io
*.zooplus.io
b3.shared.global.fastly.net
*.shopk8sp.int.aws.zooplus.io
*.srcngk8sd.ext.aws.zooplus.io
*.sndx.int.zooplus.io
b3.shared.global.fastly.net
*.zooplus.io
cdn-release.discod.ext.aws.zooplus.io
*.dlvryk8sd.ext.aws.zooplus.io
aws-accounts.wallaby-test.zooplus.io
*.catsk8sd.int.aws.zooplus.io
cdn-prod.disco.ext.aws.zooplus.io
*.idpk8sp.ext.aws.zooplus.io
*.zooplus.io
dlv-d.ext.aws.zooplus.io
*.zooplus.io
*.zooplus.io
*.ndbk8sp.int.aws.zooplus.io
dii2.shpp.ext.zooplus.io
*.zooplus.io
*.prcngk8sp.ext.aws.zooplus.io
*.ps-prod.zooplus.io
cdn-feature-shop-9782.discod.ext.aws.zooplus.io
*.srcngk8sp.int.aws.zooplus.io
coupon-provider-service-prod.zappp.ext.aws.zooplus.io
*.mdmk8sd.ext.aws.zooplus.io
b3.shared.global.fastly.net
test-rsoleto.partdev.int.int.aws.zooplus.io
b3.shared.global.fastly.net
shpd.mediazs.com
*.zooplus.io
b3.shared.global.fastly.net
finalup.jiradev.zooplus.io
*.ipsk8sd.ext.aws.zooplus.io
self-care-gateway.cscd.ext.aws.zooplus.io
coupon-provider-service-prod.zappp.ext.aws.zooplus.io
b3.shared.global.fastly.net
*.jiradev.zooplus.io
cdn-feature-shop-9782.discod.ext.aws.zooplus.io
b3.shared.global.fastly.net
*.zooplus.io
*.ndbk8sd.int.aws.zooplus.io
fileportal.mft-dev.ext.aws.zooplus.io
coupon-provider-service-prod.zappp.ext.aws.zooplus.io
b3.shared.global.fastly.net
b3.shared.global.fastly.net
*.zooplus.io
b3.shared.global.fastly.net
*.zooplus.io
*.rcengd.int.aws.zooplus.io
tf-module-nlb-test.litterbox.ext.aws.zooplus.io
*.dmmd.ext.aws.zooplus.io
cdn-feature-shop-9468.shpsrchd.ext.aws.zooplus.io
*.custsk8sd.int.aws.zooplus.io
website.sampleapd.ext.aws.zooplus.io
self-care-api-gateway.cscp.ext.aws.zooplus.io
hendrix-api-prod.hendrixp.int.aws.zooplus.io
development.jiradev.zooplus.io
b3.shared.global.fastly.net
*.dgmktk8sd.int.aws.zooplus.io
*.custsk8sp.ext.aws.zooplus.io
*.zooplus.io
dii2.shpp.ext.zooplus.io
customer-historization.idpc-dev.ext.aws.zooplus.io
b3.shared.global.fastly.net
sonarqube.sonarp.int.aws.zooplus.io
*.zooplus.io
*.edd-d.ext.aws.zooplus.io
*.custsk8sd.int.aws.zooplus.io

Certificate

The complete raw certificate details for *.loytyk8sd.ext.aws.zooplus.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuMXIS01mgd6jg8ywlkB
Civ4C94qFDzQe54s9BxnEXxEbM31jyP8TyvqdYenyDzY00LZy+1UNsAUR0K4XJs2
PT6aSPyuTePIwqC7Zr6fTaTSKgHZ+uj8U6cVEHKnFgE6UwSnmdfspmz3fgt5eag2
jnzWCfA2TxfBRJfTSQwjJEX+kUov5vURIE24k+s/9FJ60/RpC+j8tjEbhwtg1eRr
PbJGAXFf8/0UFXUKZ6ogPirbNt2jBVeu2uno+bbncN3GDZOHMIT2muq9TiMsXKGl
utuDJcKM+CmC/Q1oyQPJKbMf1sPQR8Qai3Jhqc4wemIJ9KtDmxTfHhOq4oJRHbd6
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8370521537237047378938061888627807102
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.loytyk8sd.ext.aws.zooplus.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22582400709178048448450667141107741836576409316944097459359841101547870075560002318854330751963480935969825611503096907560856578726363698770976454450943664866185895795665737190948322518450733565885661115224009145938546324307731288168130446975538718614510411119162270760972926667152331905998518508114596548231827337598973208330727015959077458821817716319357713251533055362948490456530275080024588083397234273059956504841645571431719836430416543692311809683906833075640765064031954248223159287628121639375997801474322886870453513582612422570057461316609987149954540938739958125053843652398629669594293512298857363897011
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7f7004954f5e9ad931974eb90c436e07554d39c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loytyk8sd.ext.aws.zooplus.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.public.zooplus.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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