zooplus-de.public.zooplus.net

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 07:37:87:94:14:5c:5c:65:63:8c:bd:7c:dd:d8:1b:05 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=zooplus-de.public.zooplus.net

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:37:87:94:14:5c:5c:65:63:8c:bd:7c:dd:d8:1b:05
Serial Number (int): 9592922155079729416367362804580621061
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 01:cc:ed:42:4c:59:05:a6:59:de:03:63:f8:27:95:6a:49:ea:ba:8b
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 74:e0:53:5b:ea:95:db:ad:54:a7:be:1a:02:d5:56:61:8f:bc:fd:3b
Fingerprint (sha256): 09:d5:12:54:68:41:38:9f:87:dd:ab:23:ff:6e:92:47:d6:59:62:b2:3e:3e:6e:c0:55:19:7a:c3:4e:40:d9:dd

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate zooplus-de.public.zooplus.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zooplus-de.public.zooplus.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

zooplus-de.public.zooplus.net
login-dev.zooplus.de

Other certificates including the domain name zooplus.net

(limited to 100 certificates)
zooplus-dev.public.zooplus.net
zooplus-ro.public.zooplus.net
recommendation-api.rcengp.ext.aws.zooplus.io
*.dlvryk8sp.int.aws.zooplus.io
*.prod-pf.zooplus.net
*.dnak8sp.int.aws.zooplus.io
zooplus-dk.public.zooplus.net
zooplus-es.public.zooplus.net
*.zooplus.io
*.accntk8sp.int.aws.zooplus.io
cdn-dev.public.zooplus.net
*.build.zooplus.net
zooplus-it.public.zooplus.net
*.zooplus.io
hendrix-neo4j-prod.hendrixp.int.aws.zooplus.io
zooplus-fi.public.zooplus.net
zooplus-sk.public.zooplus.net
*.zooplus.io
zooplus-it.public.zooplus.net
zooplus-cz.public.zooplus.net
*.loytyk8sd.ext.aws.zooplus.io
zooplus-si.public.zooplus.net
*.dnak8sd.int.aws.zooplus.io
*.zooplus.io
zooplus-at.public.zooplus.net
*.prcngk8sp.ext.aws.zooplus.io
*.prod.zooplus.net
bitiba-pl.public.zooplus.net
*.zooplus.io
zooplus-fi.public.zooplus.net
*.zooplus.io
zooplus-dk.public.zooplus.net
*.zooplus.io
zooplus-pt.public.zooplus.net
*.prod.zooplus.net
hendrix-api.hendrixd.ext.aws.zooplus.io
*.zooplus.io
*.shopk8sp.int.aws.zooplus.io
zooplus-no.public.zooplus.net
*.srcngk8sd.ext.aws.zooplus.io
zooplus-fr.public.zooplus.net
*.zooplus.io
*.dlvryk8sd.ext.aws.zooplus.io
*.prod.zooplus.net
zooplus-ro.public.zooplus.net
*.catsk8sd.int.aws.zooplus.io
*.build.zooplus.net
zooplus-de.public.zooplus.net
macmon.corp.zooplus.net
zooplus-dev.public.zooplus.net
*.idpk8sp.ext.aws.zooplus.io
*.zooplus.io
zooplus-hu.public.zooplus.net
*.zooplus.io
fullvpn.zooplus.net
*.zooplus.io
*.ndbk8sp.int.aws.zooplus.io
zooplus-dev.public.zooplus.net
zooplus-no.public.zooplus.net
*.zooplus.io
*.prcngk8sp.ext.aws.zooplus.io
zooplus-co-uk.public.zooplus.net
zooplus-dev.public.zooplus.net
zooplus-dev.public.zooplus.net
*.srcngk8sp.int.aws.zooplus.io
coupon-provider-service-prod.zappp.ext.aws.zooplus.io
zooplus-cz.public.zooplus.net
*.mdmk8sd.ext.aws.zooplus.io
zooplus-hr.public.zooplus.net
*.local.zooplus.net
bitiba-cz.public.zooplus.net
bitiba-fr.public.zooplus.net
*.zooplus.io
*.test.zooplus.net
zooplus-cz.public.zooplus.net
zooplus-cz.public.zooplus.net
*.prod.zooplus.net
*.ipsk8sd.ext.aws.zooplus.io
self-care-gateway.cscd.ext.aws.zooplus.io
coupon-provider-service-prod.zappp.ext.aws.zooplus.io
zooplus-dev.public.zooplus.net
zooplus-dev.public.zooplus.net
*.zooplus.io
*.ndbk8sd.int.aws.zooplus.io
zooplus-ch.public.zooplus.net
zooplus-de.public.zooplus.net
bitiba-de.public.zooplus.net
zooplus-de.public.zooplus.net
coupon-provider-service-prod.zappp.ext.aws.zooplus.io
zooplus-ch.public.zooplus.net
zooplus-dk.public.zooplus.net
zooplus-com.public.zooplus.net
*.zooplus.io
zooplus-dev.public.zooplus.net
*.custsk8sd.int.aws.zooplus.io
bitiba-be.public.zooplus.net
zooplus-nl.public.zooplus.net
hendrix-api-prod.hendrixp.int.aws.zooplus.io
zooplus-si.public.zooplus.net
zooplus-dk.public.zooplus.net

Certificate

The complete raw certificate details for zooplus-de.public.zooplus.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAntuFJSvpdlujytzX40LD
BVM6rI2xgTmaCn02ApWPOySxpTCLBFAGLiE+m01O5ZsyCbBKiZUqHsVP0Svfk48b
XsngRsMSwHQJMVlsd99beMPw1yHQl6GiY4Pidk6++EZvOj5ly5hXksN4l2ok3BxI
FwrDjlCelMRO2llfSx1LtQIvHcA0pLMWxd8lUhCcVeD8ClYnAPsmQIFFx1RnF8tQ
KCRYX98v+N0CThEApGix1Ll2a47iHcrWLC0Amoko/rmYxxBLzpp1wkMMKT9twagI
ewhPTIgyksIPkQnPBUUjMhBSkF5xBoH4Tb0IVMRc0tG1Jq23gWj0QkMajalnHzET
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9592922155079729416367362804580621061
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zooplus-de.public.zooplus.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20053901579689489341926662831448353141260538432535613837002674335990299963585851408082658007574376931472114559065619733402639717106020601113794257568994635350504952993654895845181354282672539587323877162271922459163102412463168400362184492951868199231217564076896352195785212712196470854533662718013474234378037735327906475255320758673214951993907736796875573525933015988588737328521637375025342613290996704137667516886073949047347608585684449377412444440014961832244097633025711675541148575646237070032703426033845777770598917991951006203028164791325989028379422120235054340770584822799531260392755992240168415335247
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							01cced424c5905a659de0363f827956a49eaba8b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zooplus-de.public.zooplus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-dev.zooplus.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bc8034da40000040300473045022036a8448b0f98818da75aef3242a16c7ec93137a7d3b1b0e4455a91f87d143717022100c865784df5627f1cc73ea02595804fbc7afd08501a17afae6c3edbcdf3abf87600750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bc8034da7000004030046304402205a46b97eb7f1c2bb1d967daf31fe0b699c40607101adbc236b92b9635c31de7c0220729ac9f4324210922eff728213897457506dab543fb8fc9227df1d6a0a86d9480076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018bc8034dec0000040300473045022100b745eae2b4fcb3dfeb09a0431b6e568007834df5be8858fd48c36b6460da9a0602201db08ecb5f29733a5b97cce2c5916b54385e5fe79d31b36e4f861b2b0e8ad1df
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008ae895fecc1cecbf325a7e1b294ca406ec79490d7c334ff6d993f8e3423d9b7e74f94e3135f61552927be95a374ad24d725501334dd6898e615bc931bb60761c64611e2b08f2a8940cdae21a5f9e205a8c0b30cc8f7c557cea06da7ffda3442c2adb242f8c6125f18ebdb32ad51df1e897a12a197bb87a869166f7813693bda42e867abb1c414d4076865348ff121a08ddcc20e40cfe8d4da5ded6e4fa708a0f9f17de90f9f70dc8df2a6ce5da1b11fcdb671836fb68e232e1a3b196e81df4d7f43ab2ed7d215c32f33d837380e70c2019dcbc4e2f55be48c32a50175dae0eb5e178964846478b747d4f71832fc33184a2872064a124ae9a7a22e21d851d974d