worldwide.zalora.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0a:e9:51:6e:f1:bd:8e:d3:2d:e6:7e:1c:16:1a:54:26 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=worldwide.zalora.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:e9:51:6e:f1:bd:8e:d3:2d:e6:7e:1c:16:1a:54:26
Serial Number (int): 14503736790978594739329514419173086246
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3a:6a:97:54:59:96:0e:1b:31:e8:a0:c2:63:54:90:47:40:eb:3f:b4
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 50:b4:c8:1d:fb:5d:5d:cb:cf:b9:a6:72:67:f5:3c:83:08:36:c0:04
Fingerprint (sha256): 2d:82:3c:0b:8c:4b:7d:37:a7:2f:ef:73:6d:00:70:18:20:ab:57:8d:94:bf:ba:15:1d:58:41:1d:fd:d1:75:36

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate worldwide.zalora.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for worldwide.zalora.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

worldwide.zalora.com

Other certificates including the domain name zalora.com

(limited to 100 certificates)
*.zalora.com
*.zalora.com
*.zalora.com
trender-tableau.zalora.com
images.partner.zalora.com
goto.zalora.com
affiliate.zalora.com
images.partner.zalora.com
ads.zalora.com
images.partner.zalora.com
ads.zalora.com
*.zalora.com
zalora.vn
*.zalora.com
images.partner.zalora.com
*.zalora.com
images.partner.zalora.com
www.zalora.com
*.zalora.com
images.partner.zalora.com
trender.zalora.com
ads.zalora.com
worldwide.zalora.com
*.zalora.com
images.partner.zalora.com
images.partner.zalora.com
goto.zalora.com
ads.zalora.com
*.zalora.com
ads.zalora.com
www.zalora.com
images.partner.zalora.com
ads.zalora.com
zops.zalora.com
trender.zalora.com
email.zalora.com
*.zalora.com
styleguide.zalora.com
images.partner.zalora.com
www.zalora.com
*.zalora.com
engineering.zalora.com
ads.zalora.com
goto.zalora.com
ads.zalora.com
trender-superset.zalora.com
ads.zalora.com
*.zalora.com
zalora.com
zops.zalora.com
zops-staging.zalora.com
ads.zalora.com
ads.zalora.com
goto.zalora.com
*.zalora.com
ads.zalora.com
*.zalora.com
zheadcount-staging.zalora.com
*.zalora.com
*.zalora.com
trender.zalora.com
zalora.vn
ads.zalora.com
www.zalora.com
worldwide.zalora.com
ads.zalora.com
*.zalora.com
www.zalora.com
sellercenter.zalora.com
*.zalora.com
zalora.vn
zalora.com
ads.zalora.com
images.partner.zalora.com
*.zalora.com
zalora.vn
affiliate.zalora.com
ads.zalora.com
*.zalora.com
goto.zalora.com
sellercenter.zalora.com
corporate.zalora.com
www.zalora.com
z-pas.zalora.com
ads.zalora.com
*.zalora.com
ads.zalora.com
*.zalora.com
corporate.zalora.com
ads.zalora.com
ads.zalora.com
z-pas.zalora.com
*.zalora.com
zalora.com
trender-tableau.zalora.com
engineering.zalora.com
*.zalora.com
zalora.com
ads.zalora.com
zalora.com

Certificate

The complete raw certificate details for worldwide.zalora.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eM9CHq3g8MBMrk9K9Nm
uNALEmPE2Goexwuv/D5nHKU1x+Kw6bm5fIAnt3+0uCmnW9KUcjnCbdFAz7f0oQP4
/ag1MnnQHUctPLu6TnmI8lt6uDeapBewafudjHbh2mBBqsir9FjcWq+hh9Z27+2J
KjKUDvpHnyIgan1ohgP042gkWck3FumFG8bD5Ya7+fniDi+6OfvTI5yrC5T8xpJ6
OXfU4FMV/yWrcHbng+3DTuoMADTIlb4T2Mq3PGNUidmrSS2oIDRsKFA7Byu44wpH
sOpnE6YrjzQKMam5dUeeuqqWjMgW2xgjoxnv9vRydbeaWoqmZVLMk7G/IVFEDY6F
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14503736790978594739329514419173086246
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'worldwide.zalora.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27000814394417827269086257075715041915276146183591298486257555296270095934604557650294441716273230312934819221060011681053133538326711537686830630095994004325639382147394779934854273993727594920879511393361459897168557018054030980328781307717919691364360233619834240355646296702808681317277948181230671087924214191530232588804824614027340943928873746133747020691009940764269785953919894850931710404396099720333055096195524951496067888560298249703366522037201418793014266529757413955136137244714484974056186705288571469236732227965675417831279724652105734472044715400800911565968221528127698436337507082835629613942201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a6a975459960e1b31e8a0c26354904740eb3fb4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldwide.zalora.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000017f6e4fb6670000040300483046022100d68d2a2b9bb6aaf3475400fc821e0f53d8218c1b49b949912357720c020670dd022100942e7c60b447323bc8b7c6cb821955e10f11308725419e5e88ac9a4003663f2300750035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c0000017f6e4fb689000004030046304402200a22a42d2b39863d96c7977b53f0108b58dac6b2615a50731309bd0d79160fd402206fe9e22000b4068938458be9b5e9ad2144efcf24daae21d1f26887e70db56ecb007700b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000017f6e4fb6ba00000403004830460221009aa473c1a3c707bf89d2399cae2cf7bd551a58ff769cf18bb4e25135446d67c70221008a4bb0b67ab912c3d85e02ee231ecd20a6604d614df2c33b4edfaba591c7ea50
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0098047ab0d0e0c2fa6282cb54d9f2e8fa8d71f397554340ffaea6300403b7d7d1b20bd36a98c5a7d04c89179257303b442366fc98b0dfd6330e553b51785acc89e37aa9be07618933e3ec55decfa1473618d8e6c6b68b8325ea5bf5b22e82c1c7a036deb3f6c05b1fe6a3f0aebe2ca7a07a04a9352ff517b2027ddba2bdabc91f10a855982d8ae1ac05f4554e42b95af8af8c73ce85c5ed0d9fd947897891456d16e78d03c8150744b7fb6b8419543687e5d2e01d10441b9683bc1708b427d049c9a6017e13196b9c108164046e456fc0ce3ee34ae1b59e47345e5f31ca9e77f9d93b99b48c3c0af8b530e53fdff2f9193946d845350eff27af8a08af55521aff