assets.cdn.nzxt.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0b:24:2b:ca:cb:49:9f:bf:3d:44:4e:47:9d:87:f4:8c was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=assets.cdn.nzxt.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:24:2b:ca:cb:49:9f:bf:3d:44:4e:47:9d:87:f4:8c
Serial Number (int): 14809318851157576262371949995838928012
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: eb:23:af:fa:56:83:b5:00:c5:fa:80:7a:4d:a0:80:94:80:55:c7:c8
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 67:22:92:5b:59:a7:41:cf:2d:a3:48:31:8a:21:0b:a6:4a:ea:e6:63
Fingerprint (sha256): 11:70:d7:00:47:bb:3e:ae:04:a4:6d:58:a9:d9:3e:e1:d1:33:1b:98:a8:1b:89:65:66:4f:a2:69:11:b8:4d:b4

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate assets.cdn.nzxt.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for assets.cdn.nzxt.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assets.cdn.nzxt.com

Other certificates including the domain name nzxt.com

(limited to 100 certificates)
checkout.nzxt.com
store.nzxt.com
nzxt.com
q.ssl.shopify.com
assets.cdn.nzxt.com
assets.cdn.nzxt.com
store.nzxt.com
support.nzxt.com
checkout.nzxt.com
blog.nzxt.com
cam-api-production.nzxt.com
store.nzxt.com
assets.cdn.nzxt.com
blog.nzxt.com
support.nzxt.com
info.nzxt.com
checkout.nzxt.com
q.ssl.shopify.com
*.nzxt.com
ssl.shopify.com
support.nzxt.com
support.nzxt.com
*.nzxt.com
q.ssl.shopify.com
nzxt.com
store.nzxt.com
nzxt-app.nzxt.com
blog.nzxt.com
apindev.nzxt.com
nzxt.com
nzxt-app.nzxt.com
apindev.nzxt.com
info.nzxt.com
*.nzxt.com
q.ssl.shopify.com
store.nzxt.com
nzxt.com
apindev.nzxt.com
checkout.nzxt.com
support.nzxt.com
*.nzxt.com
support.nzxt.com
apistore.nzxt.com
nzxt.com
support.nzxt.com
apindev.nzxt.com
*.nzxt.com
apianr.nzxt.com
nzxt.com
store.nzxt.com
*.nzxt.com
checkout.nzxt.com
blog.nzxt.com
ssl.shopify.com
cam-api-production.nzxt.com
cam-ideas.nzxt.com
checkout.nzxt.com
checkout.nzxt.com
store.nzxt.com
store.nzxt.com
q.ssl.shopify.com
blog.nzxt.com
ssl.shopify.com
*.nzxt.com
*.nzxt.com
checkout.nzxt.com
blog.nzxt.com
*.nzxt.com
q.ssl.shopify.com
nzxt.com
store.nzxt.com
checkout.nzxt.com
support.nzxt.com
checkout.nzxt.com
checkout.nzxt.com
checkout.nzxt.com
support.nzxt.com
apistore.nzxt.com
store.nzxt.com
support.nzxt.com
info.nzxt.com
auth.apistage.nzxt.com
info.nzxt.com
*.nzxt.com
store.nzxt.com
store.nzxt.com
apianr.nzxt.com
support.nzxt.com
checkout.nzxt.com
blog.nzxt.com
store.nzxt.com
q.ssl.shopify.com
cam-auth-service-backup.nzxt.com
store.nzxt.com
apindev.nzxt.com
support.nzxt.com
store.nzxt.com
support.nzxt.com
q.ssl.shopify.com
apindev.nzxt.com

Certificate

The complete raw certificate details for assets.cdn.nzxt.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF0TCCBLmgAwIBAgIQCyQrystJn789RE5HnYf0jDANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAxMB4XDTIzMDgwODAwMDAwMFoXDTI0MDkwMzIzNTk1OVowHjEc
MBoGA1UEAxMTYXNzZXRzLmNkbi5uenh0LmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMZUBFP37AyD8tGVDhe1p9zE7Ub2cwg00b00OsM3eRNFqm8B
2v+7uj2mISxESvGsXaO/2ecWG9qiFtc8phIy8mh0oI/7dmHogBvs8itS3Vs0meDd
kwfOmFMryQKOw2HtTx4huoHMXXQT0C5hBAc7onC+QPC0HfZ3BUc1u2Ksodo+tmpK
0Zr+TocBurwaq4lDeL0rNfretiwMJIQcTbGm6cTSWunuMuqMWy037KgYU3VKNUbd
FrReB5DKP2v5rsF2ASXPBOD2dHiIJfCfpeql0ryQMvifADd4jSZkjxkLaUyOcJuY
F7NmjRM3QBHN+gtWlbwvsBrZtL4Q4rPWaNW8Q6UCAwEAAaOCAuswggLnMB8GA1Ud
IwQYMBaAFIG4DmOKiRIY5fo7O1CVn+blkBOFMB0GA1UdDgQWBBTrI6/6VoO1AMX6
gHpNoICUgFXHyDAeBgNVHREEFzAVghNhc3NldHMuY2RuLm56eHQuY29tMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0f
BDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMS5hbWF6b250cnVzdC5jb20vcjJt
MDEuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggr
BgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDEuYW1hem9udHJ1c3QuY29tMDYGCCsG
AQUFBzAChipodHRwOi8vY3J0LnIybTAxLmFtYXpvbnRydXN0LmNvbS9yMm0wMS5j
ZXIwDAYDVR0TAQH/BAIwADCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHYA7s3Q
ZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGJ09LxfwAABAMARzBFAiEA
r91/i0LWburAV754w8vg+TUa449fop9rrPHrR3HieoECIApJ6YhgpA1CGUO9POvt
wMTwuRMpzfZ/ASx4RmcftpWoAHUASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/
qznYhHMAAAGJ09LxjQAABAMARjBEAiAJL4ofECVF44qFf2W4jlKFV9hUeLy5V01y
vRb/CJRwnAIgFss0nwBbzzpE5teE9Sm1TJTWs95GPpnuH53+IVKQCQwAdgDatr9r
P7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYnT0vEpAAAEAwBHMEUCIQC0
px7byrBNXDmNbzs0w/ODPpqaZlgFzG79iBXeYvRw1gIgIO+kDWPbCVma0L8Wcboe
OvWn4nTHgCOZyofInK2Q03cwDQYJKoZIhvcNAQELBQADggEBACptfksVT123m7xS
2n82GndrUSBNByQOfxl+m25glll89lSTv7o4LO/PidpZicIaFiBmbAnTrzxJanZV
ajVU6QiIkisUGkLpc6LJdLTLULtTG8PWy5GITWvb3rxW766DdYULKBZpcQ6CXf5O
BZwkLArUKsZWbIWQpFN9jJkjetIDtqkJ1Yo7Syeih5o0Ui0iRSZ93QywRxLXyDCW
jWDNCxtXAJe7JyQJbMX4AlY7RiiSgqt0zwhYuijifAAnAApi1iPWvhd+lzoT0L9h
G27ymF/Q7mBLmOh86tRVGII+qwnPc5musyAcBf9Tr9aDUfYywYwzFRP8aMtN5p3P
3hDI2Zg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlQEU/fsDIPy0ZUOF7Wn
3MTtRvZzCDTRvTQ6wzd5E0WqbwHa/7u6PaYhLERK8axdo7/Z5xYb2qIW1zymEjLy
aHSgj/t2YeiAG+zyK1LdWzSZ4N2TB86YUyvJAo7DYe1PHiG6gcxddBPQLmEEBzui
cL5A8LQd9ncFRzW7Yqyh2j62akrRmv5OhwG6vBqriUN4vSs1+t62LAwkhBxNsabp
xNJa6e4y6oxbLTfsqBhTdUo1Rt0WtF4HkMo/a/muwXYBJc8E4PZ0eIgl8J+l6qXS
vJAy+J8AN3iNJmSPGQtpTI5wm5gXs2aNEzdAEc36C1aVvC+wGtm0vhDis9Zo1bxD
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14809318851157576262371949995838928012
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'assets.cdn.nzxt.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25036614663882538980504840923463266347743111624356488605323861493937879760926098288554088819735625747405158494624946191683127816437295274387419009204909344661904909661594054689574129718993038177152783979528154115115402782515259422761277681440351212925762078742358906177053845313056018035388950191989089194170726492847125241535685762513114989558474002499432634472534104151607290443005020412073121016936262645102608690125779752131928288778746486323974571898762507377054589462243109901745923977399611882678407867933977258137291289259720039558711759890182572262612816061336869834948326954301540192210047614112811192173477
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb23affa5683b500c5fa807a4da080948055c7c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.cdn.nzxt.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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