logitravel.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 04:ff:5d:f3:f0:55:08:24:3b:44:fd:d0:56:4a:c2:ed was issued on by Amazon.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=logitravel.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:ff:5d:f3:f0:55:08:24:3b:44:fd:d0:56:4a:c2:ed
Serial Number (int): 6642853272981874607549494133021917933
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: f5:14:cf:10:dc:ee:fc:b4:3a:67:31:19:52:e2:0f:7a:13:0f:d3:a9
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): f9:bb:8e:dc:7e:0b:96:4a:e5:55:5d:2d:5d:98:08:80:e0:7f:ec:d4
Fingerprint (sha256): 19:07:48:0d:9e:d7:a4:b6:cc:32:05:16:b4:64:78:bf:8f:b0:f9:90:30:af:81:50:b8:a9:06:64:de:37:81:0f

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate logitravel.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for logitravel.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

logitravel.com
logitravel.fi
logitravel.co.uk
logitravel.pt
logitravel.de
logitravel.com.mx
logitravel.it
logitravel.ie
logitravel.fr
logitravel.com.br

Other certificates including the domain name logitravel.com

(limited to 100 certificates)
grupoeci.viajeselcorteingles.es
blog.logitravel.com
*.affiliate.logitravel.com
*.logitravel.com
mailer.logitravel.com
*.logitravel.com
logitravel.com
*.logitravel.com
*.logitravel.com
logitravel.com
*.logitravel.com
grupoeci.viajeselcorteingles.es
providers.ssl.logitravel.com
www.logitravel.com
www.logitravel.com
www.logitravel.com
mailer.logitravel.com
*.logitravel.com
*.logitravel.com
blog.logitravel.com
providers.ssl.logitravel.com
mailer.logitravel.com
*.logitravel.com
p0az-cs-ha.onlinemarketing-support.com
communications.logitravel.com
TravelConcept SL
www.logitravel.com
p0az-cs-ha.onlinemarketing-support.com
*.logitravel.com
p0az-cs-ha.onlinemarketing-support.com
p0az-cs-ha.onlinemarketing-support.com
ssl.logitravel.com
*.logitravel.com
mailer.logitravel.com
blog.logitravel.com
www.logitravel.com
ssl.affiliate.logitravel.com
*.affiliate.logitravel.com
back.logitravel.com
TravelConcept SL
providers.ssl.logitravel.com
TravelConcept SL
*.affiliate.logitravel.com
*.logitravel.com
logitravel.com
ssl.logitravel.com
*.logitravel.com
logitravel.com
ssl.logitravel.com
communications.logitravel.com
grupoeci.viajeselcorteingles.es
communications.logitravel.com
p0az-cs-ha.onlinemarketing-support.com
p0az-cs-ha.onlinemarketing-support.com
communications.logitravel.com
*.logitravel.com
*.logitravel.com
*.logitravel.com
blog.logitravel.com
*.affiliate.logitravel.com
TravelConcept SL
*.logitravel.com
mailer.logitravel.com
TravelConcept SL
p0az-cs-ha.onlinemarketing-support.com
back.logitravel.com
mailer.logitravel.com
*.logitravel.com
*.affiliate.logitravel.com
www.logitravel.com
www.logitravel.com
mailer.logitravel.com
providers.ssl.logitravel.com
*.logitravel.com
ssl.logitravel.com
blog.logitravel.com
grupoeci.viajeselcorteingles.es
grupoeci.viajeselcorteingles.es
*.logitravel.com
*.affiliate.logitravel.com
*.logitravel.com
ssl.logitravel.com
blog.logitravel.com
TravelConcept SL
logitravel.com
*.logitravel.com
*.logitravel.com
www.logitravel.com
*.affiliate.logitravel.com
mailer.logitravel.com
communications.logitravel.com
blog.logitravel.com
communications.logitravel.com
*.logitravel.com
back.logitravel.com
grupoeci.viajeselcorteingles.es
*.logitravel.com
*.logitravel.com
*.logitravel.com
*.affiliate.logitravel.com

Certificate

The complete raw certificate details for logitravel.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPycar2LY1j8pT0a638i
pQ+XvsKdN7x/5xHk1+hKoB57WsKtCUcKeUQF3aYCrWi9cCzuXPgqtkjB86GdJ20b
4hp4+enmOZiorXzRUwaJMkRiyzHImL3F3WYHGMBICobsUSASdYOl1KzNroxcfCaR
fdnTOLZz6MBrmdqU+jcisA4gX7JqSV48FT7/liX+niTxqpxDaQH7PDevIaprOgYy
ZXU63fQDio8EhV88k8t7n6XPcQPiNmqCUpX9P5fdKV9LzOhGNhEf5WSs8KDVYhwO
3pgMc+Z7Ukr/KB4wTh5FMf+PUiZ1X2lnk2cQM78MjhCmnGXY0FVjGTsMClgf1U6V
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6642853272981874607549494133021917933
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'logitravel.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23352415242374203187878067053916726406037778545780854720347635680902324051576600201825297121622628028163686164424112970348829235347085615542943104843562391224519143630243856363605203932132807756681113615067309122691346561656741215986160332223249566920260858622545521424023666444131628811661484587964847208180595902463977824273078224910577423795932637383590923332174574018801872031675726793809034813442922776756592152453876205389022416250796828612639084997632724075430507130785062418986402461927375590947257442934262941621142247591025381244577541795515979048890578524892198945890216771037063755026102108387839178610003
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f514cf10dceefcb43a67311952e20f7a130fd3a9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (165 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logitravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logitravel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logitravel.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logitravel.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logitravel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logitravel.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logitravel.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logitravel.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logitravel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logitravel.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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