mms-cloudfront.customink.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0f:8a:ba:d4:6d:06:84:86:de:80:5c:0e:51:8e:39:bc was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mms-cloudfront.customink.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:8a:ba:d4:6d:06:84:86:de:80:5c:0e:51:8e:39:bc
Serial Number (int): 20658746261550022006749399243998247356
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 2c:c4:07:8e:2d:fd:0d:64:f9:5f:c3:b2:55:24:0e:0c:b0:cf:be:21
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 05:13:7e:69:4f:c2:cf:fe:b0:dc:e4:7f:92:f0:71:dd:25:be:45:74
Fingerprint (sha256): 26:17:e1:0f:c1:4e:d5:cf:77:66:3d:13:ac:93:a2:fb:a6:08:cf:af:9b:74:94:3b:55:85:77:56:6e:35:c5:6b

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate mms-cloudfront.customink.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mms-cloudfront.customink.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mms-cloudfront.customink.com

Other certificates including the domain name customink.com

(limited to 100 certificates)
wiki.customink.com
artblog.customink.com
pretreat-extractor.in.customink.com
mms-cloudfront.customink.com
locations.customink.com
*.out.customink.com
affiliates.customink.com
retail.in.customink.com
samples.customink.com
embed-answers.cority.com.pagescdn.com
mms-search.customink.com
*.out.customink.com
stores.customink.com
liwxfq.customink.com
media6.adlegend.com
promo.customink.com
*.out.customink.com
technology.customink.com
technology.customink.com
retail.in.customink.com
home.customink.com
vpn.out.customink.com
blog.customink.com
blogs.customink.com
gtm.customink.com
fe-img-cloudfront.customink.com
*.out.customink.com
shirtmagic.com
shirtmagic.com
partner.customink.com
*.staging.customink.com
locations.customink.com
wiki.customink.com
nps.customink.com
samples.customink.com
www.customink.com
*.in.customink.com
ssl362571.cloudflaressl.com
wifi.customink.com
reports.customink.com
*.out.customink.com
*.lambda-dev.customink.com
hq.customink.com
*.staging.customink.com
ssl362571.cloudflaressl.com
*.staging.customink.com
blog.customink.com
mms-cloudfront.customink.com
stores.cictitlepawn.com
hq.customink.com
uploads.staging.customink.com
*.us-east-1.k8s.in.customink.com
fulcrum.in.booster.com
answers-embed.techem.de.pagescdn.com
foundry.customink.com
*.out.customink.com
technology.customink.com
mms-cloudfront.customink.com
*.staging.customink.com
staging.customink.com
nagios-vpcprod.customink.com
*.out.customink.com
e.customink.com
dyo.customink.com
inkovate.customink.com
*.in.customink.com
checkout.customink.com
pharmacy.stopandshop.com
www.customink.com
pharmacy.stopandshop.com
stores.customink.com
maintenance.staging.customink.com
hq.customink.com
www.customink.com
*.out.customink.com
blog.customink.com
nagios-vpcprod.customink.com
assisted-design.out.customink.com
www.customink.com
shirtmagic.com
*.out.customink.com
technology.customink.com
blog.customink.com
mms.customink.com
samples.customink.com
dyo.customink.com
home.customink.com
www.customink.com
dyo.customink.com
blog.customink.com
marketinglog.customink.com
*.lambda-staging.customink.com
media6.adlegend.com
embed-answers.cority.com.pagescdn.com
retail.in.customink.com
nagios-vpcprod.customink.com
inkernet.customink.com
hq.customink.com
promo.customink.com
boutique.sfr.fr

Certificate

The complete raw certificate details for mms-cloudfront.customink.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNm5fTvsX8u2auGcU9KV
lzoagEBOy/8Cpu1qkoIyYK6sSFBfg0nn3i29/ZfRtA4JcVPgiFeb5cS+bGUmtaRP
1SX0YARelKkpoeqw42cbrP9NJt4fb/SybECChJ4n5NvB3R4g3wJrsIaDSKwN5xhj
dPAuMWiR9Ok3a+4ziRXg01eRYPxoPoQ0U5XpQ0LOXZQKCBaj0bQT7JG2Q1Ud6Ino
lEdBPeDqzgilPdzGRW9FkfX7XpAhzwJUXVxMWzTRcja+SuCEN5HQtDNEWOWp/68d
UnOxLK2Mc2vHM4m1l+Kiv0LvqaNxZ0AvGuQWhSgKjzRG817n14pLu/DsWqHStjNJ
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20658746261550022006749399243998247356
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mms-cloudfront.customink.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21820352439744320335145067924516431224531173367812861105193145598863139832075998663281406040217399942852786173925409942969826363983360384820190179842521092751507647046285450317525287594840713509331505494123031475689214482666378091361225147994834553075927591922829870283477739316552603237810281745200769771301671181598142147211502591516046272661291432788434205650561410727256101083438119161261990401810971257824211348581243476391163430164548375178761825839799861766574537691728442695186818759152523152123872281363497670289040104672043147029601972151546540636028523627564376823143942593642561974323610447599658123610577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2cc4078e2dfd0d64f95fc3b255240e0cb0cfbe21
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms-cloudfront.customink.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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