cdn.spafinder.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 04:2c:30:f3:e2:14:da:f3:f0:ef:37:53:8d:7e:a7:7a was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cdn.spafinder.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:2c:30:f3:e2:14:da:f3:f0:ef:37:53:8d:7e:a7:7a
Serial Number (int): 5546365922988486865514464308753246074
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 98:50:d7:a9:b5:c0:c5:5d:3b:27:5e:33:80:55:43:3f:ec:40:5e:78
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 93:f9:d6:55:45:7e:18:e8:69:15:01:e0:6e:10:90:29:6e:dc:f1:22
Fingerprint (sha256): 1e:db:0a:d1:99:fe:49:02:b8:c9:0a:03:12:6b:b5:b6:08:98:21:d0:e4:9f:06:bc:8d:36:18:9d:c3:8e:25:fb

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate cdn.spafinder.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cdn.spafinder.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdn.spafinder.com

Other certificates including the domain name spafinder.com

(limited to 100 certificates)
cdn.spafinder.com
f164.zooz.cf
blockcommunicator.com
filipwolanski.com
www.coreputters.com
vpln.spafinder.com
singlepointsol.com
midas.spafinder.com
midas.spafinder.com
www.lamconcrete.com
scamardi.info
svs.spafinder.com
test.app.kameo.co
dev.sbsb.kr
geoip.spafinder.com
studentsa.ru
www.fastclub.app
img.spafinder.com
shop.spafinder.com
penyadap.com
link.zeugnis.codes
track.spafinder.com
pull-dev.spafinder.com
labs.spafinder.com
raven.amp.prod.spafinder.com
modzter.com
img.spafinder.com
painelpadreosvaldo.g2canal.com.br
getelly.app
www.trim.social
icoach.pulso-preventielab.be
www.desafio21d.com
cdn.spafinder.com
bekbakes.com.au
vpln.spafinder.com
www.ogden.co
www.devicedb.app
www.stanplus.com
coronaviruslive.io
spafinder.com
services-lakeshore.smartbuildings.app
stage.eclypsium.com
link.investo2o.com
instantglance.com
elleven.minhacentralonline.com.br
enews.spafinder.com
shop.spafinder.com
desenfila.com.br
listings.spafinder.com
brian-poole.com
webnamieru.net
beta.extraordinarygrace.com
www.gloryth.com
midas.spafinder.com
linkedin-auth.karoldepka.com
www.diofantino.com
enews.spafinder.com
links.cavalry.scenegroup.co
klondikesolitaire-online.com
lxandrx.com
midas.spafinder.com
www.giovannihomeimprovementinc.com
tsubasa2540.ml
tarjem.sam-techs.com
shop.spafinder.com
img.spafinder.com
link.chalk.com
spafinder.com
vpln.spafinder.com
rameshkry.2rk.in
rockersesports.com
rtff.mjbdevs.co.uk
goldentranscript.column.us
g4rdens.xyz
labs.spafinder.com
mrgreensplumbing.com
lm.spafinder.com
enews.spafinder.com
www.lingosong.com
labs.spafinder.com
cdn.spafinder.com
spafinder.com
groomerbox.com.br
inscist.com
www.camilopenalver.com
www.jismunboys.com
geoip.labs.spafinder.com
rtff.mjbdevs.co.uk
www.solal-experience.com
dev.niclas.xyz
tnmop.in
dcotagroup.com
aeons.me
find.spafinder.com
www.vulturedatalabs.com
benchmarkassociate.com
grammarabic.org
aaliyahlouns.com
radio-dev.gera.fan
spafinder.com

Certificate

The complete raw certificate details for cdn.spafinder.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFzzCCBLegAwIBAgIQBCww8+IU2vPw7zdTjX6nejANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIzMTIxMTAwMDAwMFoXDTI1MDEwODIzNTk1OVowHDEa
MBgGA1UEAxMRY2RuLnNwYWZpbmRlci5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDte0ujCUpaHqixAGERCQg9a1l/BPfEqf/AgmTWvjfwaHzTVwlw
1OxHHHScY436Me49y+iHE1/us66YrwVA/pHkkeFUbldu5kwHcLvu+ff1ycNgHe5u
4E7i11xWnnUTb6sE1ptGn+YKgVWbo3GVfkpYZsj+WiOwd4TGejxutFQNoxH3n69Z
9W5KwTQ4YHy5VrFpe6PCv1vc+8ovcsdosu5/j+k64+s6ZQtw2EFk4ty/PzJgZ9TQ
6rToCGi/GbjFtHwyfIjir3fzmj50k9tP+O3gIANiYE4zIP3YxNIGW9WE/uvGdmLG
9W2U2ZTJZEzxvDK7tXqk7weiWrMoPKzfzGgLAgMBAAGjggLrMIIC5zAfBgNVHSME
GDAWgBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQUmFDXqbXAxV07J14z
gFVDP+xAXngwHAYDVR0RBBUwE4IRY2RuLnNwYWZpbmRlci5jb20wEwYDVR0gBAww
CjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB
BggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAyLmFt
YXpvbnRydXN0LmNvbS9yMm0wMi5jcmwwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUF
BzABhiFodHRwOi8vb2NzcC5yMm0wMi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUH
MAKGKmh0dHA6Ly9jcnQucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNlcjAM
BgNVHRMBAf8EAjAAMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdgBOdaMnXJoQ
wzhbbNTfP1LrHfDgjhuNacCx+mSxYpo53wAAAYxXya21AAAEAwBHMEUCIENZ6Xzd
j1GMCop3cDp9gcA9lJ1S3MeLaayFskeygFjGAiEAi3HNnYAsbOve48QF5SUao1LM
7cbdz3WL0vPqLuIJGT8AdgA/F0tP1yJHWJQdZRyEvg0S7ZA3fx+FauvBvyiF7Phk
bgAAAYxXya4JAAAEAwBHMEUCIFsvBFUhrAZNfHKnLw7qAP/XeW5E5SfQlKvYNPiU
55IhAiEA1mxYSL3dVJ6DpGn9IGdykRsJmz7VmnMgjrxNWmhb8GwAdwB9WR4S4Xgq
exxhZ3xe/fjQh1wUoE6VnrkDL9kOjC55uAAAAYxXya3rAAAEAwBIMEYCIQDgol1n
EutWb5cJsyJBa2gM9GMk2M3LQbhqH8Rde/Yv8QIhAKL1b1r1G1cK68LelvY4CAnK
sBbnOAUjYwZHvzWAKMTJMA0GCSqGSIb3DQEBCwUAA4IBAQAwQQdSzhanD5+uAjet
N9r/sj9LOaH8NZ9YwefAPbcSWO+QfU8iioDAcIvz9JsTTqTpG1WpwiRKgCzHPOSk
rU2qLou/7WnLnmdGhQez5QZDAoyXbGUd2l7Rp1IN2ku5pWnnWoey/7WrVEj/Zhf3
q0nNWg5EpVGp408qUT0G0n0WwLRY35wK5zxGx8Bm5aeBa/VyhtjdxmetEa0hnwt6
SwiaRcT1qplMhyMkKME4pjfdSwWP4yIFhv5aDx8ZBYZ3gctuaf5rk5qJHeVXgbtJ
c439NwUFnxWrAuSXdMOPCLrqRJri5ohAc57dIcVHn9duTpxx5K+4YBcmB3OKuq4q
Mp/s
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7XtLowlKWh6osQBhEQkI
PWtZfwT3xKn/wIJk1r438Gh801cJcNTsRxx0nGON+jHuPcvohxNf7rOumK8FQP6R
5JHhVG5XbuZMB3C77vn39cnDYB3ubuBO4tdcVp51E2+rBNabRp/mCoFVm6NxlX5K
WGbI/lojsHeExno8brRUDaMR95+vWfVuSsE0OGB8uVaxaXujwr9b3PvKL3LHaLLu
f4/pOuPrOmULcNhBZOLcvz8yYGfU0Oq06Ahovxm4xbR8MnyI4q9385o+dJPbT/jt
4CADYmBOMyD92MTSBlvVhP7rxnZixvVtlNmUyWRM8bwyu7V6pO8HolqzKDys38xo
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5546365922988486865514464308753246074
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdn.spafinder.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29979277532568611602450835981996567786183372973422466206232293862794619904414431395216465003627705968750258835231498612956805452676668455116125052519871944257308889481153246491424551741902637209476199923600149937267140611732511564971989604216481736670641915576553563147033282240746416621597258811402697721798058844549997332260072818141836191930790302276299744306707111851558545231650445633116360170892055626447498161030110131877764591239451934458255959234450749573929431998647665164852035206927814435334214755362291932649341990453266949321959505380474058946019990970369544960395553467949233661381340288234675914958859
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9850d7a9b5c0c55d3b275e338055433fec405e78
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.spafinder.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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