zalora.com.my

Issued by Amazon

About this certificate

This digital certificate with serial number 08:b3:77:f1:ef:ac:cf:e0:07:dd:2d:3d:49:13:ab:21 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=zalora.com.my

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:b3:77:f1:ef:ac:cf:e0:07:dd:2d:3d:49:13:ab:21
Serial Number (int): 11565677878862895865997698132299983649
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 34:d2:f9:7d:1a:c4:96:46:09:f8:a2:5d:8f:fe:39:d2:2f:6b:62:ae
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 53:95:47:8e:df:f6:ba:84:7f:2a:56:0d:9a:5c:10:28:5d:a6:68:d8
Fingerprint (sha256): 13:c6:b2:c4:04:d5:e4:17:2e:44:6a:83:5d:9e:bf:c8:7a:64:c4:d9:f3:12:1e:66:7b:6b:f9:21:ee:9d:cc:d7

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate zalora.com.my

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zalora.com.my

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

zalora.com.my
*.zalora.com.my

Other certificates including the domain name zalora.com.my

(limited to 100 certificates)
support.zalora.com.my
link.zalora.com.my
*.zalora.com
support.zalora.com.my
leveloneacademy.com
zcoop.zalora.com.my
school-payments.childpilot.com
zalora.com.my
thread.zalora.com.my
thread.zalora.com.my
thread.zalora.com.my
www.zalora.com
static-origin.zalora.com.my
zcoop.zalora.com.my
support.zalora.com.my
support.zalora.com.my
*.zalora.com
thread.zalora.com.my
thread.zalora.com.my
*.zalora.com
zalora.com.my
www.zalora.com.my
zalora.com.my
asad.tk
support.zalora.com.my
thread.zalora.com.my
thread.zalora.com.my
support.zalora.com.my
zcoop.zalora.com.my
ratevote.karoldepka.com
api-checkout.zalora.sg
*.zalora.com
thread.zalora.com.my
www.zalora.com
thread.zalora.com.my
ablink.em.zalora.co.id
www.zalora.com
support.zalora.com.my
thread.zalora.com.my
api.zalora.com.my
zcoop.zalora.com.my
thread.zalora.com.my
zcoop.zalora.com.my
zalora.com.my
checkout.zalora.com.my
thread.zalora.com.my
thread.zalora.com.my
thread.zalora.com.my
thread.zalora.com.my
zcoop.zalora.com.my
*.zalora.com
www.zalora.co.id
zcoop.zalora.com.my
ablink.em.zalora.co.id
*.zalora.com
thread.zalora.com.my
*.zalora.com
ablink.em.zalora.co.id
zcoop.zalora.com.my
thread.zalora.com.my
www.zalora.com
www.pissarelliautomoveis.com.br
school-payments.childpilot.com
*.zalora.com.my
*.zalora.com
www.zalora.com
ablink.em.zalora.co.id
thread.zalora.com.my
support.zalora.com.my
thread.zalora.com.my
www.zalora.com
*.zalora.com
*.zalora.com
thread.zalora.com.my
static-origin.zalora.com.my
*.zalora.com
thread.zalora.com.my
checkout.zalora.com.my
thread.zalora.com.my
checkout.zalora.com.my
zcoop.zalora.com.my
zalora.com.my
zcoop.zalora.com.my
zcoop.zalora.com.my
api-checkout.zalora.sg
thread.zalora.com.my
checkout.zalora.com.my
thread.zalora.com.my
thread.zalora.com.my
checkout.zalora.com.my
*.zalora.com.my
www.zalora.com
zcoop.zalora.com.my
support.zalora.com.my
thread.zalora.com.my
support.zalora.com.my
thread.zalora.com.my
zcoop.zalora.com.my
www.zalora.com
ablink.em.zalora.co.id

Certificate

The complete raw certificate details for zalora.com.my in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWfcx2UM9xr4GwAYTPpA
MQDPGbrrjmVvpAr8HPZHV+c70kxYIFSXdOmGWYnqgEGmzJq/aZr57iha1RPKBHRT
l+IqZFPhKkTH+zn4GsDvdOlpQhKtJmkmQ1psTJQks02wQk1S/auCDPfvR6M6nVFb
68NMO5qhJH4/w4LOnYlKS9z+lArkavoH39h76txibtKeEZBnKQBb6IamvWh9MnF8
/8RC1Y3yzwpljaBuNDEt5gR8e2B8oPz95lReFEyXlGvy17fFM9yiiSOCt34t6dzT
uzq2LeMOqbmSEJY4Ubc49bPf7t6V6DVI1y2j7t1aC2ASDHtKoD48O3/CIqhMaVuA
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11565677878862895865997698132299983649
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zalora.com.my'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25930068984986034725248548840426435806503124231970297926540710643356506358348205423855308588910976600084903855201996847560695557204063050846392696122978789483492628616084098150546272966335970573976227628533185830801140166870944824724563272537590060500612402593080099053767865870057517300644551459237850344308538765418718706276051670697547742030797519415750072457540113132965495823175652148956506904099265374609767190750684399223462335551807507048177174833037463715920080017858449247882512706750289343798120316246443212449930179281048809221736421770229430393558808136931090719342100729284676469178703746349151632982239
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							34d2f97d1ac4964609f8a25d8ffe39d22f6b62ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zalora.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zalora.com.my'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							016800750046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017d35b773c0000004030046304402204e428c0281764522164675a5599859c3025c6f8dd6c64a012e3b121a6f02349d022033b6bcd554c245f1eb587d01147aca53bb0eee6000f642aafa5c10dd7111d9e400770051a3b0f5fd01799c566db837788f0ca47acc1b27cbf79e88429a0dfed48b05e50000017d35b774540000040300483046022100f2bcda4ab4d99f77634937021351916e5db1d00ddc0613d9852619e2575556f6022100ff4b6c324429cf4175a2b3e0088f090946ffc9b12b3de9da3084b97d8b4f84de007600dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a730000017d35b773b9000004030047304502202fa4505a57700498bb3717f4b0b8703c54dd36194e7b190183d3b3a65b810ea0022100f8e54d0cd8d7a2c771768c18af39b3b3f8a022980ba7a0164aa7ff730daf9bd8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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