checkout.zalora.sg

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 09:44:e4:d8:a6:9f:d0:27:4b:44:46:0a:00:9a:88:e5 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=checkout.zalora.sg

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:44:e4:d8:a6:9f:d0:27:4b:44:46:0a:00:9a:88:e5
Serial Number (int): 12320769702685060609564917539700115685
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ab:57:c0:02:50:92:7c:fa:a3:71:1e:d6:59:ed:f3:55:a9:e6:72:52
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 64:55:bf:ae:e6:ba:92:a3:c6:d2:b3:09:8a:97:e6:74:8f:90:b9:2c
Fingerprint (sha256): 0c:d5:a1:83:2e:da:03:ca:6e:56:9b:9a:82:4d:88:dc:0e:f0:c2:7b:19:e0:8e:27:53:2f:ec:e8:bc:85:2d:f7

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate checkout.zalora.sg

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for checkout.zalora.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

checkout.zalora.sg

Other certificates including the domain name zalora.sg

(limited to 100 certificates)
zalora.sg
*.zalora.com
thread.zalora.sg
reflaunt.zalora.sg
support.zalora.sg
*.zalora.sg
zcoop.zalora.com.my
www.zalora.sg
www.smartbotlabs.com
support.zalora.sg
killer.logic-wiz.com
support.zalora.sg
checkout.zalora.sg
www.zalora.com
support.zalora.sg
*.zalora.com
api.zalora.sg
*.zalora.com
zalora.sg
thread.zalora.sg
checkout.zalora.sg
zcoop.zalora.com.my
api-checkout.zalora.sg
*.zalora.com
support.zalora.sg
www.zalora.com
support.zalora.sg
support.zalora.sg
*.zalora.sg
www.zalora.sg
ablink.em.zalora.co.id
www.zalora.com
zalora.sg
static-checkout-sg.zacdn.com
zcoop.zalora.com.my
dfw.zalora.sg
*.zalora.sg
zalora.sg
mytechsite.co.uk
support.zalora.sg
*.zalora.com
www.zalora.co.id
zcoop.zalora.com.my
ablink.em.zalora.co.id
*.zalora.com
thread.zalora.sg
support.zalora.sg
*.zalora.com
www.vectorpsi.com
ablink.em.zalora.co.id
zcoop.zalora.com.my
www.zalora.com
ssl4803.cloudflare.com
zalora.sg
*.zalora.com
www.zalora.com
ablink.em.zalora.co.id
checkout.zalora.sg
zalora.sg
support.zalora.sg
thread.zalora.sg
support.zalora.sg
www.zalora.com
*.zalora.com
*.zalora.com
thread.zalora.sg
checkout.zalora.sg
support.zalora.sg
*.zalora.com
support.zalora.sg
www.zalora.sg
static-checkout-sg.zacdn.com
link.zalora.sg
reflaunt.zalora.sg
www-staging.zalora.sg
www-staging.zalora.sg
zcoop.zalora.com.my
zcoop.zalora.com.my
api-checkout.zalora.sg
prioritize.upslope.app
www.zalora.com
zcoop.zalora.com.my
link.zalora.sg
ssl4803.cloudflare.com
instagram.mega.lol
frimi.cl
zcoop.zalora.com.my
ssl4803.cloudflare.com
www.zalora.com
ablink.em.zalora.co.id
zcoop.zalora.com.my
thread.zalora.sg
www.senakayasu.com
api-checkout.zalora.sg
www.zalora.com
zcoop.zalora.com.my
*.zalora.com
www.runprof.com
support.zalora.sg
support.zalora.sg

Certificate

The complete raw certificate details for checkout.zalora.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXdvoBWjIHwupBB4Qq1B
wih/0UNspq28hv+m+FH9mID6UdiJIfsL6StWsR/QB+QLKWHyyPqZPpOll/9V6/yi
9qBzzElMMMX4noJxYwKnrEPu/N2HgYhuukzWgkSX8xMuoj3bpIyUCfITXxCLrAwP
pgHtJAgwBpq8SxnKSLStgwiljt2hBysmGaoMUS5WujH4SJaB3EWUTSlTTxtDOEx8
JU044eBB4CfKD+jHFVem5CLYR/VtV1pi29pfrUaiV9oH3V8uJAhQBTKfQXEp71JU
eqNI0XAzrfv5CRiowlT0sfVbzEdqe6Jy7Fm3fk15d7EqTPxardBnSkHPxKFZ6EFD
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12320769702685060609564917539700115685
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'checkout.zalora.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21898122863787510448785998606924319842474449734554266737840238506301650287268388147004962488228230027102292355317673086517517590145894703531012318664757054998454614096235696609016029442348813748142518676874384134705995090451540103197095224208763594254368792775181045098838657514692046163332653899957433264701954642879701513363419454446485643796050168066474328163175558254627176774827289651335268970649318189494492511565359895106792265902831110070873319624513578822505144857337710452723845325875804298890950835478520147220146285023097647928158883624008001649769208607877653592363953097370195881645395214049652789822209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ab57c00250927cfaa3711ed659edf355a9e67252
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkout.zalora.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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