survey.nykaa.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 08:78:7d:57:c4:f2:91:91:85:c7:9f:98:9a:dd:b9:aa was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=survey.nykaa.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:78:7d:57:c4:f2:91:91:85:c7:9f:98:9a:dd:b9:aa
Serial Number (int): 11259441844306410899342609608452454826
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 01:1e:61:2f:34:15:30:3d:24:c7:70:08:58:cd:8c:52:44:e1:01:6e
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): e2:3d:da:4d:41:fe:e2:48:e6:fc:d3:bc:a8:75:fd:71:37:f8:84:46
Fingerprint (sha256): 1e:94:3b:b4:58:44:68:7a:0b:ab:ac:8f:f6:5b:69:c4:e0:b2:ba:7a:b7:ed:b9:52:a4:6f:cc:b9:ab:9b:79:f9

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate survey.nykaa.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for survey.nykaa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

survey.nykaa.com

Other certificates including the domain name nykaa.com

(limited to 100 certificates)
d.d8u.com
*.nykaa.com
sni.cloudflaressl.com
*.nykaa.com
*.nykaa.com
infosec.nykaa.com
sni.cloudflaressl.com
sherlock.nykaa.com
explore-feed.nykaa.com
qa-explore-feed.nykaa.com
app1.ftrans01.com
servicedesk.nykaa.com
app.krademylms.com
apps.nykaa.com
pp1.nykaa.com
d.d8u.com
incapsula.com
ithelpdesk.niairport.in
sni.cloudflaressl.com
*.nykaa.com
*.nykaa.com
smetrics.nykaa.com
apps.nykaa.com
infosec.nykaa.com
nonprod-events.nykaa.com
d.d8u.com
d.d8u.com
sni.cloudflaressl.com
qa-explore-event.nykaa.com
preprod-secure.nykaa.com
*.nykaa.com
survey.nykaa.com
*.nykaa.com
*.nykaa.com
*.nykaa.com
sni.cloudflaressl.com
sherlock.nykaa.com
nonprod-events.nykaa.com
sni.cloudflaressl.com
sherlock.nykaa.com
*.nykaa.com
app.krademylms.com
sherlock.nykaa.com
d.d8u.com
app1.ftrans01.com
apps.nykaa.com
sni.cloudflaressl.com
sni.cloudflaressl.com
preprod-ads.nykaa.com
posreports.nykaa.com
watson.nykaa.com
support.nykaa.com
admin-panel.nykaa.com
smetrics.nykaa.com
watson.nykaa.com
d.d8u.com
www.nykaa.com
preprod-fountain9.nykaa.com
sni.cloudflaressl.com
delivery.thehubpeople.com
ads.nykaa.com
www.nykaa.com
static-visual.nykaa.com
preprod-retina-api.nykaa.com
www.nykaa.com
sni.cloudflaressl.com
*.nykaa.com
ithelpdesk.tatanexarc.com
nonprod-events.nykaa.com
tools.nykaa.com
sni.cloudflaressl.com
*.nykaa.com
www.nykaa.com
delivery.acuralabs.ai
www.nykaa.com
*.nykaa.com
app.krademylms.com
survey.nykaa.com
sni.cloudflaressl.com
nykaa.com
delivery.acuralabs.ai
support.nykaa.com
www.nykaa.com
support.nykaa.com
servicedesk.linkintime.co.in
nykaa.com
*.nykaa.com
hrms.nykaa.com
sni.cloudflaressl.com
preprod-adtech-campaign-manager.nykaa.com
*.ingest.sentry-prod.nykaa.com
sni.cloudflaressl.com
*.nykaa.com
sni.cloudflaressl.com
app.krademylms.com
dev-sellerportal.nykaa.com
qa-explore-feed.nykaa.com
smoke-api.nykaa.com
app.krademylms.com
*.ingest.sentry-prod.nykaa.com

Certificate

The complete raw certificate details for survey.nykaa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0iOETnHCRyopOeaV7d8o
H8PI42MidM7ZNrbqqdBqlQQ4LOn9IyVqgI3lczWO+15O0r7g3acZw++EjiIeBaHZ
vCQnJzXvd1xpGnctqVCf5CzlSpWHp4gd5BuKpgG6gjitlVaYKKNceI/u2TjUDu71
sDeno+/QNHmC8HWBhp2By3G0KDxDE/Pkfx4J8S4hpd9G0JRoCvyKBnQxXOR4Am4S
1soYQiyZxNjp/Zd+jxjZa5oMjmzFVojiynSvSpvGaNFZGdbgWGTeozjvCgJcepJ2
tncQwg5N/CV8t0EqBAQlKVaTmFIRVVjn9xLp0YwFX3RNqowPRf6gOvJn1n9ft4DF
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11259441844306410899342609608452454826
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'survey.nykaa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26527558040539429617593370259824527845977016545328277267945190209141718865744653745501957019168481836213530392993233609106598727230338367392127714015603267264787363868269026059811502134852892167895517594599663092599245917511014166288091088189137812555846505009090254879795114147670055629014827488497348050079676329309388636250499417993721703413948491266395826654011016662855498781569957572892015633134773274994628652490023876229103479449073026632078758394995720854217898120001150885183660450055630265608016779737880964042525410668180851096782816451782750519896409243799325496540205310336100823958602001815662068024651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							011e612f3415303d24c7700858cd8c5244e1016e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'survey.nykaa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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