zooplus-hr.public.zooplus.net

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0c:03:e6:f1:c0:a2:a4:c3:d3:29:dd:b6:0f:96:2b:13 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=zooplus-hr.public.zooplus.net

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:03:e6:f1:c0:a2:a4:c3:d3:29:dd:b6:0f:96:2b:13
Serial Number (int): 15970996947808346728544188830940801811
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 9a:50:da:06:ab:a8:74:29:ae:4a:22:7e:5f:09:a3:02:ae:fc:b2:23
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): b5:9f:3b:65:1d:a0:2e:2d:5c:5f:b7:20:4d:c4:81:b3:3d:d7:b7:f4
Fingerprint (sha256): 0d:f5:e2:14:02:4a:eb:5e:e8:e7:f5:cf:08:5d:e6:50:a2:31:90:2f:4e:a4:95:7f:8d:35:34:42:7a:97:8a:66

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate zooplus-hr.public.zooplus.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zooplus-hr.public.zooplus.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

zooplus-hr.public.zooplus.net
login-dev.zooplus.hr

Other certificates including the domain name zooplus.net

(limited to 100 certificates)
zooplus-dev.public.zooplus.net
zooplus-ro.public.zooplus.net
recommendation-api.rcengp.ext.aws.zooplus.io
*.dlvryk8sp.int.aws.zooplus.io
*.prod-pf.zooplus.net
*.dnak8sp.int.aws.zooplus.io
zooplus-dk.public.zooplus.net
zooplus-es.public.zooplus.net
*.zooplus.io
*.accntk8sp.int.aws.zooplus.io
cdn-dev.public.zooplus.net
*.build.zooplus.net
zooplus-it.public.zooplus.net
*.zooplus.io
hendrix-neo4j-prod.hendrixp.int.aws.zooplus.io
zooplus-fi.public.zooplus.net
zooplus-sk.public.zooplus.net
*.zooplus.io
zooplus-it.public.zooplus.net
zooplus-cz.public.zooplus.net
*.loytyk8sd.ext.aws.zooplus.io
zooplus-si.public.zooplus.net
*.dnak8sd.int.aws.zooplus.io
*.zooplus.io
zooplus-at.public.zooplus.net
*.prcngk8sp.ext.aws.zooplus.io
*.prod.zooplus.net
bitiba-pl.public.zooplus.net
*.zooplus.io
zooplus-fi.public.zooplus.net
*.zooplus.io
zooplus-dk.public.zooplus.net
*.zooplus.io
zooplus-pt.public.zooplus.net
zooplus-es.public.zooplus.net
*.prod.zooplus.net
hendrix-api.hendrixd.ext.aws.zooplus.io
*.zooplus.io
*.shopk8sp.int.aws.zooplus.io
zooplus-no.public.zooplus.net
*.srcngk8sd.ext.aws.zooplus.io
zooplus-fr.public.zooplus.net
*.zooplus.io
*.dlvryk8sd.ext.aws.zooplus.io
*.prod.zooplus.net
zooplus-ro.public.zooplus.net
*.catsk8sd.int.aws.zooplus.io
*.build.zooplus.net
zooplus-de.public.zooplus.net
macmon.corp.zooplus.net
zooplus-dev.public.zooplus.net
*.idpk8sp.ext.aws.zooplus.io
*.zooplus.io
zooplus-hu.public.zooplus.net
*.zooplus.io
fullvpn.zooplus.net
*.zooplus.io
*.ndbk8sp.int.aws.zooplus.io
zooplus-dev.public.zooplus.net
zooplus-no.public.zooplus.net
*.zooplus.io
*.prcngk8sp.ext.aws.zooplus.io
zooplus-co-uk.public.zooplus.net
zooplus-dev.public.zooplus.net
zooplus-dev.public.zooplus.net
*.srcngk8sp.int.aws.zooplus.io
coupon-provider-service-prod.zappp.ext.aws.zooplus.io
zooplus-cz.public.zooplus.net
*.mdmk8sd.ext.aws.zooplus.io
zooplus-hr.public.zooplus.net
*.local.zooplus.net
bitiba-cz.public.zooplus.net
bitiba-fr.public.zooplus.net
*.zooplus.io
*.test.zooplus.net
zooplus-cz.public.zooplus.net
zooplus-cz.public.zooplus.net
*.prod.zooplus.net
*.ipsk8sd.ext.aws.zooplus.io
self-care-gateway.cscd.ext.aws.zooplus.io
coupon-provider-service-prod.zappp.ext.aws.zooplus.io
zooplus-dev.public.zooplus.net
zooplus-dev.public.zooplus.net
*.zooplus.io
*.ndbk8sd.int.aws.zooplus.io
zooplus-ch.public.zooplus.net
zooplus-de.public.zooplus.net
bitiba-de.public.zooplus.net
zooplus-de.public.zooplus.net
coupon-provider-service-prod.zappp.ext.aws.zooplus.io
zooplus-ch.public.zooplus.net
zooplus-dk.public.zooplus.net
zooplus-com.public.zooplus.net
*.zooplus.io
zooplus-dev.public.zooplus.net
*.custsk8sd.int.aws.zooplus.io
bitiba-be.public.zooplus.net
zooplus-nl.public.zooplus.net
hendrix-api-prod.hendrixp.int.aws.zooplus.io
zooplus-si.public.zooplus.net

Certificate

The complete raw certificate details for zooplus-hr.public.zooplus.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu584hsiXOtV8g087cqXp
FhP+Rij+Dn2RoelAZ9bkGGueoLkCxZSi18TlYDv9R0slIXQrP7C4nOyfOfrjD6gu
TgehOm+t419j/0vkO5irLaVqKY31IapIUMqM3eS/95my91REQ0Xcf2ikzsf048ML
4A/kgI4MgIiqRpHqJcjxQ0rPQQL9gOVFiw2EzOAN7rikv3qkJj9HAY7ycWnOFJb4
WDUFyY0s1a5CCwRYSn4CJv9XTzWjFusVe/OH/ew0ERwt3HAPMIhl+QfqNbQNNZhY
z//E8WFwpQVDLT+P4juvhAgFahcBn/HDU5zP/QP4nYBx/VoFM9Jof42g9Yq4tMSG
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15970996947808346728544188830940801811
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zooplus-hr.public.zooplus.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23685077734687293885424957930389747322536220010816055679441174285167561542974958036652207298288470061697501302747726325188068277440016098737571461574594446014071468011489612908251347495907498587811771358483990534404757340012084701035561739776979550259151797808284525370832754655861031459000080821599420600761321059735802830183713795720616836950692083952693680364308412382663562941491988105234957149513233820752356848928105571131695416157889639071643970060682660072479399024316106082402654535095759478578469457363272169735815929723185268218405809250269244098209269033598078704499761956860551773140671902526052522821169
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a50da06aba87429ae4a227e5f09a302aefcb223
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zooplus-hr.public.zooplus.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-dev.zooplus.hr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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