c.imallcdn.net

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0f:4d:94:35:ba:5d:7e:ff:6e:40:6e:81:a2:a0:20:19 was issued on by Amazon.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=c.imallcdn.net

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:4d:94:35:ba:5d:7e:ff:6e:40:6e:81:a2:a0:20:19
Serial Number (int): 20341232848272115182221985685604147225
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: bf:38:b6:59:e6:f9:dc:5f:9a:38:73:2b:c5:4d:72:85:cc:a1:a8:3b
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 7f:cf:50:57:7e:7c:7d:37:03:f3:57:a5:c1:b5:14:6a:6d:b0:38:42
Fingerprint (sha256): 27:02:27:9a:fd:45:dc:81:e7:63:42:b9:f1:41:ab:45:72:33:cc:a5:1c:26:82:50:30:93:4b:74:68:3c:2e:50

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate c.imallcdn.net

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for c.imallcdn.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

c.imallcdn.net
*.motorhomerepublic.com
campers.goseetravel.com
www.airportrentals.com.au
book.motorhomerepublic.cn
airportrentals.com
cdn.goseetravel.com
www.motorhomerepublic.com
motorhomerepublic.com
www.airportrentals.com
airportrentals.com.au
cars.goseetravel.com
*.airportrentals.com
gosee.imallcdn.net

Other certificates including the domain name imallcdn.net

(limited to 100 certificates)
dns-vetting2.map.fastly.net
*.d.ssl.fastly.net
*.d.ssl.fastly.net
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
www.airportrentals.com
dns-vetting2.map.fastly.net
*.d.ssl.fastly.net
www.airportrentals.com
*.d.ssl.fastly.net
www.airportrentals.com
*.d.ssl.fastly.net
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
*.d.ssl.fastly.net
c.imallcdn.net
www.airportrentals.com
*.d.ssl.fastly.net
*.d.ssl.fastly.net
www.airportrentals.com
www.airportrentals.com
*.d.ssl.fastly.net
www.airportrentals.com
www.airportrentals.com
*.d.ssl.fastly.net
www.airportrentals.com
*.d.ssl.fastly.net
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
www.airportrentals.com
dns-vetting2.map.fastly.net
*.d.ssl.fastly.net
*.d.ssl.fastly.net
*.d.ssl.fastly.net
www.airportrentals.com
dns-vetting2.map.fastly.net
www.airportrentals.com
dns-vetting2.map.fastly.net
www.airportrentals.com
dns-vetting2.map.fastly.net
c.imallcdn.net
dns-vetting2.map.fastly.net
*.d.ssl.fastly.net
*.d.ssl.fastly.net
*.d.ssl.fastly.net
dns-vetting2.map.fastly.net
*.d.ssl.fastly.net
dns-vetting2.map.fastly.net
*.d.ssl.fastly.net
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
www.airportrentals.com
www.airportrentals.com
www.airportrentals.com
*.d.ssl.fastly.net
dns-vetting2.map.fastly.net
*.d.ssl.fastly.net
*.d.ssl.fastly.net
*.d.ssl.fastly.net
www.airportrentals.com
*.d.ssl.fastly.net
*.d.ssl.fastly.net
dns-vetting2.map.fastly.net
www.airportrentals.com
dns-vetting2.map.fastly.net
*.d.ssl.fastly.net
www.airportrentals.com
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
*.d.ssl.fastly.net
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
www.airportrentals.com
dns-vetting2.map.fastly.net
*.d.ssl.fastly.net
*.d.ssl.fastly.net
*.d.ssl.fastly.net
dns-vetting2.map.fastly.net
www.airportrentals.com
*.d.ssl.fastly.net
www.airportrentals.com
dns-vetting2.map.fastly.net
*.d.ssl.fastly.net
www.airportrentals.com
dns-vetting2.map.fastly.net
*.d.ssl.fastly.net
*.d.ssl.fastly.net
*.d.ssl.fastly.net
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
*.d.ssl.fastly.net
www.airportrentals.com
*.d.ssl.fastly.net
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net

Certificate

The complete raw certificate details for c.imallcdn.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoKw7CgFvTG8NsP9mLVV
coraS2vbpMd7Cuh8gWF1TPoszfsoeje3C4C/hGFeapPjwwNZgl9YCAtS2eXgFUKL
GIOCrAwwHoCUJbnSMIZKb3Ot/XKHmg7j5a4hfenW5DRE4nFR078glAUkxd1xmQjw
sZQSpy3vqECPQQ5w2npsSBvHMRqPFKv+I1LtyAlW1iiVciUpG7SzgRRvLfrIt9pZ
9AlUtsyW9dX7QAIdkvJt5uU3ReH70TfxBoK3UyC7spKZeBajqTJHybFmiAyMLLpe
7zSsLXlN8V1HNS/Wz2ft4sv+Gf4zZmIpUdCVXgN9saS6awmZ/L4QZ2IYPW86KOMr
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20341232848272115182221985685604147225
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'c.imallcdn.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25564583788202050580479257703176565497300692815041258603456790918564320579947006335052861808278799480571264316494940297537152865496031044820264997127506286289142111389565734428993589893547187193756946285975923479813531430837536890277330190768371984887340973976637463929639318876172861024542022585598338444427020340362996736234084160246606622695152819511449427888422034308676690332628610223347736270662147658392286932173969719796688912344906370483037184358519439270029848949826318892504312326610514272022961898438447758402692042718722646791528360270526303382453540900159472914970231545760879780080519856411655962569557
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bf38b659e6f9dc5f9a38732bc54d7285cca1a83b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (326 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.imallcdn.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.motorhomerepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campers.goseetravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airportrentals.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.motorhomerepublic.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airportrentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.goseetravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.motorhomerepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motorhomerepublic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airportrentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airportrentals.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cars.goseetravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airportrentals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gosee.imallcdn.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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