zappos.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 01:52:25:18:27:6c:17:9d:35:61:af:0c:03:b1:db:a6 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=zappos.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:52:25:18:27:6c:17:9d:35:61:af:0c:03:b1:db:a6
Serial Number (int): 1755748701016598078558407280890600358
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 17:0d:7d:26:fb:85:b9:55:84:26:40:39:83:cc:5a:d2:fb:42:fc:ae
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 7d:95:7c:c5:63:30:ce:84:ed:7f:ff:8b:d8:15:28:dd:fe:58:f5:ff
Fingerprint (sha256): 0c:df:11:b0:cf:85:0b:02:f0:ee:1a:7e:86:30:20:ee:51:dd:ec:36:3e:dc:27:67:be:2b:15:49:30:6a:74:58

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate zappos.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zappos.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

zappos.com
*.zappos.com

Other certificates including the domain name zappos.com

(limited to 100 certificates)
*.cloudcatalog.zappos.com
live.diamond.zappos.com
fosgate-live.zappos.com
zappos-ask-na.amazon.com
www.zappos.com
zycada-amzn.zappos.com
fosgate-live.zappos.com
preprod-www.zappos.com
a.zassets.com
rookieusa.zappos.com
qa.bounties.ost.zappos.com
api.akita.zappos.com
image.email.zappos.com
api.beta.cassiopeia.ugc.zappos.com
expertise.zappos.com
zcreator-prod-na.amazon.com
removals-ui.devo-bos.zappos.com
patron.zappos.com
*.cloudcatalog.zappos.com
area51.zappos.com
redirector-zapposset.zmt.zappos.com
app.us-west-2.prod.kratos.zappos.com
view.email.zappos.com
test01.findzen.com
partnercentral.zappos.com
image.email.zappos.com
luxury.zappos.com
live.diamond.zappos.com
whiterabbit.zappos.com
*.olympus.zappos.com
r.amazon.com
tryst.devo-bos.zappos.com
app.us-west-1.gamma.kratos.zappos.com
imageorigin.zappos.com
r.amazon.com
opal.zappos.com
solr.bos.zappos.com
video.zappos.com
track.zappos.com
secure-www.zappos.com
d42.ewoks.zappos.com
sitevideo.zappos.com
www.zappos.com
mailer.zappos.net
api.beta.reactions.ugc.zappos.com
beta.fluid.zappos.com
*.olympus.zappos.com
view.email.zappos.com
test01.findzen.com
jira.zappos.net
zpot-na-prod.zappos.com
partnercentral.zappos.com
*.olympus.zappos.com
skynet.zappos.com
fosgate-beta.zappos.com
live.diamond.zappos.com
live.marty.zappos.com
*.endor.zappos.com
dx1.vpce.zappos.com
vrsnl.com
pehz-rest3.devo-bos.zappos.com
*.apps.zappos.com
*.olympus.zappos.com
zappos.com
paybpeadev.zappos.com
us-west-1.gamma.kratos.zappos.com
video.zappos.com
vertex.corp.zappos.com
api.anything.zappos.com
*.apps.zappos.com
view.email.zappos.com
search.splunk.zappos.com
live.diamond.zappos.com
wms-mojito-sideline.bos.zappos.com
*.olympus.zappos.com
marketing.zappos.com
innovate.marty.zappos.com
zpot-na-prod.amazon.com
*.cloudcatalog.zappos.com
build-bos.zappos.com
expertise.zappos.com
imageorigin-qa.zappos.com
bos-reports.zappos.com
keyserver.zappos.com
*.olympus.zappos.com
auth-zappos-na.amazon.com
opal.zappos.com
api.alpha.reactions.ugc.zappos.com
vrsnl.com
sm71.devo-bos.zappos.com
*.apps.zappos.com
*.olympus.zappos.com
zappos.com
vrsnl.com
zycadaapi.zappos.com
live.diamond.zappos.com
live.diamond.zappos.com
fortinac.zappos.com
*.dev.ss.ost.zappos.com
auth-zapposcouture-na.amazon.com

Certificate

The complete raw certificate details for zappos.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYbTtTbcPZ6zS3sSS8yS
LtEtzlnj7iuW6cFubpTn9CutBPwqwHC5VwolIVbzy0xphRlDQ9LWQ5Zj3dU14x95
93EGgvYebL6r6sgc1PDrRqPfBrTWFsTfPy2srMjULvE39Fi4DuLYn5mWIgjiZmDE
zxbvDo/s6n3+hnulHBBOnCuR5PFH2svHOEOBTpuTUUnLWPrHRj9oFW1TSMltteAf
/pQCwasQ6cSODvniJYoUqoscP3GgMNHK50NjPwYXfSbwAu1HUw1Mk7x9rrBWaRTy
wZEoPnDffWfm/gR/rJ0/gXTvivLcvKRKP8rB0lCPUX6RifYB7zg08566oxUjUmEG
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1755748701016598078558407280890600358
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zappos.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21400759202960263459092707460975028497428697371627317549774310547130626912793392287984641242242786545657274965218174358719464644008480902265101132636045075493635143104878259530952411288392546912877552229126131134508075506985960408000713734243027569486436034166033578819342775397260358178926948283010346436416130776620514724669990456985346441047912484756791171644679592372423523146912979160140631383490827882753564202318095684892562645983483085746851364881341647595400364860514253629540854358958663731739980820760813125768312551793997096959211084592329802606107251132828887977308672029634308416495515263344506119980573
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							170d7d26fb85b9558426403983cc5ad2fb42fcae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zappos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zappos.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018a2d3754920000040300473045022100c963d68c018aa00eced7ad17b3f476ae2dd9d956840a6b8e367c20e1dd593fdb022008af7294ec9f855de0bf15db877037b689457a8c2c7fb947a286b4b2310e711d00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018a2d3752d50000040300463044022043f7b95bba3718d1d96f1a143ba4c007f7144a02530e64f2952b9f4f37521b2f0220332abd1473fdd10433d2e29138f3d8836a88604f7e45ed00e884e62d58cf8497007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018a2d3752a7000004030046304402206937db75a82d0a44ed8cc83a9ea0816dca431f24362250bbd977b56c4062230302205ec4f5d9fc582b02a65eb1dfd47d334985aab4cf6537ce9f1172c38f8fe89405
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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