c4pub-api-uat.apac.kerrylogistics.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 04:cd:fb:fb:32:9b:21:ef:f2:8c:54:85:d8:eb:bf:15 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=c4pub-api-uat.apac.kerrylogistics.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:cd:fb:fb:32:9b:21:ef:f2:8c:54:85:d8:eb:bf:15
Serial Number (int): 6386443625880405062539853189173985045
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 22:2a:7b:a7:28:d3:54:0d:62:ef:28:82:56:b5:58:48:8d:53:80:e1
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 0b:7c:1f:3e:38:cc:1a:c9:90:6f:f0:86:85:98:c2:08:5b:e8:38:b4
Fingerprint (sha256): 06:21:99:59:76:f1:f2:d3:fe:7e:fd:92:30:54:2f:f0:c8:6c:5d:37:bc:2a:60:be:35:13:b6:88:12:45:82:ea

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate c4pub-api-uat.apac.kerrylogistics.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for c4pub-api-uat.apac.kerrylogistics.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

c4pub-api-uat.apac.kerrylogistics.com

Other certificates including the domain name kerrylogistics.com

(limited to 100 certificates)
*.gmr.kerrylogistics.com
oms.kerrylogistics.com
survey.abundantpower.com
customer.zohosurvey.com
allinteractive.tv
kvc-api.apac.kerrylogistics.com
allinteractive.tv
servicedesk.kerrylogistics.com
bms2.hk.kerrylogistics.com
servicedesk.kerrylogistics.com
*.th.kerrylogistics.com
customer.zohosurvey.com
ceapp-uat.kerrylogistics.com
*.vpn.kerrylogistics.com
c4pub-api-dev.apac.kerrylogistics.com
c4pub.apac.kerrylogistics.com
sctcms.kerrylogistics.com
project.kerrylogistics.com
kerrierbook-api.kerrylogistics.com
ecom2.kerrylogistics.com
klclub.kerrylogistics.com
kerrierbook-uat.kerrylogistics.com
servicedesk.kerrylogistics.com
c4pub-api-uat.apac.kerrylogistics.com
kerrierbookb2bapi.kerrylogistics.com
*.vpn.kerrylogistics.com
mycrm-login.kerrylogistics.com
awstest.hk.kerrylogistics.com
customer.zohosurvey.com
survey.themarketinfluencers.com
kerrierbook-b2b-uat.kerrylogistics.com
tdc.hk.kerrylogistics.com
customer.zohosurvey.com
kvc-uat.apac.kerrylogistics.com
*.cn.kerrylogistics.com
tdc.kerrylogistics.com
ecom2.kerrylogistics.com
ceapp.kerrylogistics.com
project.kerrylogistics.com
servicedesk.kerrylogistics.com
survey.abundantpower.com
www.kerrylogistics.com
*.hk.kerrylogistics.com
mydesktop.kerrylogistics.com
hfm.kerrylogistics.com
expe01.eu.kerrylogistics.com
customer.zohosurvey.com
survey.abundantpower.com
customer.zohosurvey.com
survey.multiplyinggood.org
customer.zohosurvey.com
servicedesk.kerrylogistics.com
sharepoint.kerrylogistics.com
qv.kerrylogistics.com
customer.zohosurvey.com
servicedesk.kerrylogistics.com
uat.arbitration.kerrylogistics.com
allinteractive.tv
*.kerrylogistics.com
klclub.kerrylogistics.com
webscan-fnb.hk.kerrylogistics.com
ap.kerrylogistics.com
kerrierbookapi-uat.kerrylogistics.com
servicedesk.kerrylogistics.com
c4pub-api-dev.apac.kerrylogistics.com
c4-uat.apac.kerrylogistics.com
fsus-12.freshservice.com
kbos-uat.hk.kerrylogistics.com
servicedesk.kerrylogistics.com
customer.zohosurvey.com
survey.themarketinfluencers.com
fsus-12.freshservice.com
c4-uat-api.apac.kerrylogistics.com
klclub.kerrylogistics.com
customer.zohosurvey.com
survey.abundantpower.com
survey.abundantpower.com
kv-iff-api-uat.apac.kerrylogistics.com
allinteractive.tv
iffedi-uat.kerrylogistics.com
servicedesk.kerrylogistics.com
fsus-12.freshservice.com
www.kerrylogistics.com
kerrierbook-api-uat.kerrylogistics.com
hfm-dev.kerrylogistics.com
survey.abundantpower.com
servicedesk.kerrylogistics.com
survey.seaworldentertainment.com
survey.leakdtech.com
servicedesk.kerrylogistics.com
ksmart-uat.cn.kerrylogistics.com
survey.abundantpower.com
apptest.hk.kerrylogistics.com
kwms3.apac.kerrylogistics.com
expe01.eu.kerrylogistics.com
customer.zohosurvey.com
*.vpn.kerrylogistics.com
kbos-uat.hk.kerrylogistics.com
customer.zohosurvey.com
mycrm.kerrylogistics.com

Certificate

The complete raw certificate details for c4pub-api-uat.apac.kerrylogistics.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArd6gLxMIVx44BkZGHZ2U
Lmiphzzw1TESV+pTby/iMfqZyKc8uUuHGyF57lAcmFtuSkHqvb4Ikx6b7BhmpK6h
y1mmxA9EopLkvqT0BBju9IYH4yO7V+KBRcAuHkWBnWGPz6sZm6SiSFRwO9YXTAww
k91WkUVCedPOn/xc+EHftoN/4T44xVItVJacZcwwDchrU3D/u+fq95Bx/iml+T3P
RgZq3mJNW4rhoqVigH7G+2HADgEjUOt9x6CeiFxbBoeISqKWWzF7NZtXiBTLi9Qt
7vXXph77j/47m33nmBZgif/YvNdbxLIQbrhH1b8OPuzAoXU4bJXFHDv8dFYUoYBR
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6386443625880405062539853189173985045
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'c4pub-api-uat.apac.kerrylogistics.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21949007592408335755494914202074778598449838883530203292448055732650102151859215964899673915277057274787700090405521062204109785360748501164966239908600805705707170098448749487467656082897368671181161503501723310307979041347876698093794928682106789298284898272048697654359288876046064800597859394655638641772583613996254448226191678755122799249007914171523328602569217610158604322657882174420891575210037444438229009863690140911461780247888516785754289846408291880168591464096942805382732863213457254446775102589887305165526721201940073943220665508355523273893253065067563165253014481489292026902882801918593514623387
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							222a7ba728d3540d62ef288256b558488d5380e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c4pub-api-uat.apac.kerrylogistics.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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