accounts-us-prod.jaguarusa.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 08:e8:20:5a:9e:3f:66:49:7c:dd:e5:b0:b9:19:22:9d was issued on by Amazon.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=accounts-us-prod.jaguarusa.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:e8:20:5a:9e:3f:66:49:7c:dd:e5:b0:b9:19:22:9d
Serial Number (int): 11839093054076627045692894120488018589
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d5:68:8b:37:bb:07:37:bf:f3:01:d7:f7:9e:c3:58:90:28:dd:b8:bb
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): b8:f4:a3:84:bc:86:50:ff:27:96:37:b3:ed:07:8e:8d:b7:01:2a:39
Fingerprint (sha256): 24:f5:9f:ee:ea:e7:c7:83:44:bb:28:37:55:0a:09:38:7a:e1:1e:d2:37:aa:60:49:35:8c:8c:0f:f6:62:8d:a5

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate accounts-us-prod.jaguarusa.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for accounts-us-prod.jaguarusa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

accounts-us-prod.jaguarusa.com
accounts-us-prod.landroverusa.com
accounts-us-prod.jaguar.ca
accounts-us-prod.jlr-dev.com
accounts-us-prod.landrover.ca
accounts-us-prod.landrover.com.mx
accounts-us-prod.jaguarmexico.com.mx

Other certificates including the domain name jaguarusa.com

(limited to 100 certificates)
tracking.jaguarusa.com
magazin.peak-muenster.de
catalogues.meister.com
www.jaguar.com
kiosk.greater.sydney
sv.citedisplay.com
magazine.landroverusa.com
www.jaguar.com
www.hochseescheinkurs.online
charging-staging.jaguarusa.com
www.jaguar.com
online-katalog.baude.com
lemagazine.landrover.com
www.jaguar.com
www.jaguar.com
epaper.abakus-magdeburg.de
webkiosks.sm-sport.de
journal.flyskywork.com
www.jaguar.com
publikationen.kreis-goerlitz.de
catalog.sogears.com
www.jaguar.com
sv.citedisplay.com
webkiosk.dein-typ.de
magazin.landrover.com
catalogues.meister.com
online-katalog.baude.com
magazine.landrover.com.cn
kataloge.quester.at
bibliothek.bregenzerfestspiele.com
kiosk.greater.sydney
webkiosk.mvz-atrium.de
kiosk.greater.sydney
www.jaguar.com
www.jaguar.com
berliner-kurier.kiosk.plus
app.langguth.wine
pub.vermoegenszentrum.ch
epapers.gleitz-online.de
www.jaguar.com
epaper.swecon-baumaschinen.de
webkiosk.baeckereibuettner.de
online-katalog.baude.com
www.jaguar.com
blaetterkatalog.rp-media.de
bibliothek.bregenzerfestspiele.com
katalog.ud-shop.de
webkiosk.mvz-atrium.de
kiosk.greater.sydney
pub.vermoegenszentrum.ch
berliner-kurier.kiosk.plus
approved.jp.jaguar.com
kataloge.quester.at
www.jaguar.com
quote.insurance.jaguarusa.com
www.jaguar.com
www.jaguar.com
kataloge.fuerholz.de
kurier.leimbacherdruck.ch
www.jaguar.com
kataloge.quester.at
hetmagazine.landrover.com
kiosk.greater.sydney
accounts-us-prod.jaguarusa.com
sv.citedisplay.com
webkiosk.mvz-atrium.de
berliner-zeitung.kiosk.plus
berliner-zeitung.kiosk.plus
kataloge.fuerholz.de
publikationen.kreis-goerlitz.de
kiosk.greater.sydney
sv.citedisplay.com
bibliothek.bregenzerfestspiele.com
webkiosk.reven.de
www.jaguar.com
kurier.leimbacherdruck.ch
kiosk.greater.sydney
onlinekrant.binnenvaartkrant.nl
pop3.kraemer-praezisionswerkzeuge-kataloge.de
catalogues.meister.com
kataloge.fuerholz.de
online.hansestyle.hamburg
katalog.ud-shop.de
pub.vermoegenszentrum.ch
webkiosk.mvz-atrium.de
kataloge.fuerholz.de
bibliothek.bregenzerfestspiele.com
www.jaguar.com
app.langguth.wine
online-katalog.baude.com
pop3.kraemer-praezisionswerkzeuge-kataloge.de
webkiosk.reven.de
kataloge.quester.at
kataloge.quester.at
catalogues.meister.com
kataloge.larimarhotel.at
kataloge.fuerholz.de
kataloge.quester.at
webkiosk.mvz-atrium.de
online.hansestyle.hamburg

Certificate

The complete raw certificate details for accounts-us-prod.jaguarusa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshbUkn8uMmVDBZevi0f1
lFzo+ZhwvUnyd385rjPzn/e8KHTQxhV3m0l9VMIzLIajWZiUzM1eLKJFPsSPQ2CG
248nsUewsgRptSCOKJCX6kZBVgT0uqPrPCJd9fShsk9Kcsc1C09PVYXDQjmflJ+o
4qYc0bLDS9ONUoKvgfOQMunNMeALHrx/7sphy7BjbV4m2HU3MaP6ZMHUHrdYPftc
yo3pW57FPH8rEBWEXGa5bDe2O/WyLoaRvBo5vKAw3kOfI6spGC5vwSbHix4LZ5vu
epkf01+xVDerEH2+QpfP7N0qPfXGWAkAWMUpew3NZMyX7ZXZ0GhAP2pHoFIXK2yz
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11839093054076627045692894120488018589
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'accounts-us-prod.jaguarusa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22481676354247825272902931691392970155502277738725853104659377116555096525277021572609970352856402422007939908327287505032951908357024534775058416967216434099935713466199871705715111396337961916536837814683286963507717069714402218005620460457201937932862658728332370817795123928784376651074070811392697058051963092011045093602337282193119586953806709234713270333376022078498964920794880842039686573508202652826994840313384145804199338020471662242043388040614119118198744218882003554076289774514957093161874399443942543327344964797227792382969959468536506110137493417276329014786389547679357088137208669254716454908713
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d5688b37bb0737bff301d7f79ec3589028ddb8bb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (232 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts-us-prod.jaguarusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts-us-prod.landroverusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts-us-prod.jaguar.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts-us-prod.jlr-dev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts-us-prod.landrover.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts-us-prod.landrover.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts-us-prod.jaguarmexico.com.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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