*.ndbk8sp.int.aws.zooplus.io

Issued by Amazon

About this certificate

This digital certificate with serial number 04:73:b7:53:5d:c6:82:b1:9b:a4:af:d4:a9:53:e2:ae was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.ndbk8sp.int.aws.zooplus.io

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:73:b7:53:5d:c6:82:b1:9b:a4:af:d4:a9:53:e2:ae
Serial Number (int): 5917744407788216018124382298547937966
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 40:67:70:1f:c4:1b:92:ab:29:03:0b:d1:ff:e3:37:3b:a1:d7:9d:f0
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): b5:53:6c:2d:84:d6:34:16:be:c1:4a:50:ae:10:e0:d1:9d:02:e7:9d
Fingerprint (sha256): 0b:2a:91:f3:ab:06:90:d7:d5:40:ba:99:eb:3e:6f:92:3c:ea:61:01:86:f3:0a:4a:cb:bd:08:c5:cc:e0:60:5a

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate *.ndbk8sp.int.aws.zooplus.io

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ndbk8sp.int.aws.zooplus.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ndbk8sp.int.aws.zooplus.io
*.private.zooplus.net
*.public.zooplus.net

Other certificates including the domain name zooplus.io

(limited to 100 certificates)
b3.shared.global.fastly.net
thelasttest.jiradev.zooplus.io
recommendation-api.rcengp.ext.aws.zooplus.io
self-care-api-gateway.cscp.ext.aws.zooplus.io
*.dlvryk8sp.int.aws.zooplus.io
cdn-feature-shop-9078.discod.ext.aws.zooplus.io
*.tsac.ext.zooplus.io
dii2.shpp.ext.zooplus.io
*.dnak8sp.int.aws.zooplus.io
*.zooplus.io
tf-module-nlb-test.litterbox.ext.aws.zooplus.io
*.jiradev.zooplus.io
*.accntk8sp.int.aws.zooplus.io
cdn-beta.disco.ext.aws.zooplus.io
coupon-provider-service-dev.zappd.ext.aws.zooplus.io
b3.shared.global.fastly.net
*.zooplus.io
hendrix-neo4j-prod.hendrixp.int.aws.zooplus.io
b3.shared.global.fastly.net
*.zooplus.io
*.loytyk8sd.ext.aws.zooplus.io
*.dnak8sd.int.aws.zooplus.io
*.zooplus.io
coupon-provider-service-prod.zappp.int.aws.zooplus.io
*.prcngk8sp.ext.aws.zooplus.io
*.zooplus.io
self-care-api-gateway.cscp.ext.aws.zooplus.io
personalization-tracking-api.letop.ext.aws.zooplus.io
*.zooplus.io
*.zooplus.io
hendrix-api.hendrixd.ext.aws.zooplus.io
*.zooplus.io
b3.shared.global.fastly.net
*.shopk8sp.int.aws.zooplus.io
*.srcngk8sd.ext.aws.zooplus.io
*.sndx.int.zooplus.io
b3.shared.global.fastly.net
*.zooplus.io
cdn-release.discod.ext.aws.zooplus.io
*.dlvryk8sd.ext.aws.zooplus.io
aws-accounts.wallaby-test.zooplus.io
*.catsk8sd.int.aws.zooplus.io
cdn-prod.disco.ext.aws.zooplus.io
*.idpk8sp.ext.aws.zooplus.io
*.zooplus.io
dlv-d.ext.aws.zooplus.io
*.zooplus.io
*.zooplus.io
*.ndbk8sp.int.aws.zooplus.io
dii2.shpp.ext.zooplus.io
*.zooplus.io
*.prcngk8sp.ext.aws.zooplus.io
*.ps-prod.zooplus.io
cdn-feature-shop-9782.discod.ext.aws.zooplus.io
*.srcngk8sp.int.aws.zooplus.io
coupon-provider-service-prod.zappp.ext.aws.zooplus.io
*.mdmk8sd.ext.aws.zooplus.io
b3.shared.global.fastly.net
test-rsoleto.partdev.int.int.aws.zooplus.io
b3.shared.global.fastly.net
shpd.mediazs.com
*.zooplus.io
b3.shared.global.fastly.net
finalup.jiradev.zooplus.io
*.ipsk8sd.ext.aws.zooplus.io
self-care-gateway.cscd.ext.aws.zooplus.io
coupon-provider-service-prod.zappp.ext.aws.zooplus.io
b3.shared.global.fastly.net
*.jiradev.zooplus.io
cdn-feature-shop-9782.discod.ext.aws.zooplus.io
b3.shared.global.fastly.net
*.zooplus.io
*.ndbk8sd.int.aws.zooplus.io
fileportal.mft-dev.ext.aws.zooplus.io
coupon-provider-service-prod.zappp.ext.aws.zooplus.io
b3.shared.global.fastly.net
b3.shared.global.fastly.net
*.zooplus.io
b3.shared.global.fastly.net
*.zooplus.io
*.rcengd.int.aws.zooplus.io
tf-module-nlb-test.litterbox.ext.aws.zooplus.io
*.dmmd.ext.aws.zooplus.io
cdn-feature-shop-9468.shpsrchd.ext.aws.zooplus.io
*.custsk8sd.int.aws.zooplus.io
website.sampleapd.ext.aws.zooplus.io
self-care-api-gateway.cscp.ext.aws.zooplus.io
hendrix-api-prod.hendrixp.int.aws.zooplus.io
development.jiradev.zooplus.io
b3.shared.global.fastly.net
*.dgmktk8sd.int.aws.zooplus.io
*.custsk8sp.ext.aws.zooplus.io
*.zooplus.io
dii2.shpp.ext.zooplus.io
customer-historization.idpc-dev.ext.aws.zooplus.io
b3.shared.global.fastly.net
sonarqube.sonarp.int.aws.zooplus.io
*.zooplus.io
*.edd-d.ext.aws.zooplus.io
*.custsk8sd.int.aws.zooplus.io

Certificate

The complete raw certificate details for *.ndbk8sp.int.aws.zooplus.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX+ko3wW7Rc+rStHoUpR
984i9hi9vQV1xGeKsoPbVCK+DUVGFEX6j91fyv2A5+ygzNjRsFSLfOvM4fXwLb4W
V55x6A1rJT9NBprFFrxGF/co9VdFKtQ6yItHXtBTbb93gFaH2R/oci625zfF9w3v
CmPt0wQusScV1lIZ3Wllm8VKTdDDL1MGNzjdKp+bnmOUnJ3gWwEmCCRNpvL+SowR
d3e8FeypfKoFP6qww/LNkhHMd8h5CESB4KlKuCbLdEqGrPd/zCnZsztosB2C4o4R
lz7ktHXreaoIkYkqFJdfOB7EwfhSDokieFpVU59Lr+QuWfi4TzbUpCiimQFA2aqw
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5917744407788216018124382298547937966
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ndbk8sp.int.aws.zooplus.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22407123147180751866910905867796754816846447109048592925018814659567565302502581351586260669416464114583328335583120881215681600387918491741553619697136461806434750391120765110443784365129181393757251194113065623645077529224190096121462193629512693536925032392838860417914271847900221420171476013703893463464897569222407290874300117776192555491371513952059730604138544160427276947292770080818073894152323874069916171554798126691343779776797333569764365214227721814579160228936247694848630683059064689424100779122690020912263568617675988437813201873950712828726335417412892574088063366178243465017832842326713567981571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4067701fc41b92ab29030bd1ffe3373ba1d79df0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ndbk8sp.int.aws.zooplus.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.private.zooplus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.public.zooplus.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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