stores.footlocker.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 07:04:c5:48:b5:8e:5e:b7:e6:f9:44:ff:77:3d:1f:58 was issued on by Amazon.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=stores.footlocker.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:04:c5:48:b5:8e:5e:b7:e6:f9:44:ff:77:3d:1f:58
Serial Number (int): 9329366553237072365842295530370965336
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 29:61:5e:d4:41:8b:76:4d:61:b4:65:1b:d5:6e:60:24:57:08:81:26
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): ff:ad:cc:05:51:9d:cc:ae:dc:a4:5f:73:a5:17:49:a8:9a:24:fe:6b
Fingerprint (sha256): 30:84:1c:24:a3:19:93:f4:1b:b7:7a:e8:2d:b4:8a:38:dd:07:23:c3:7e:7f:1e:fc:56:bd:7b:8f:33:1b:e4:e6

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate stores.footlocker.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stores.footlocker.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stores.footlocker.com
stores.kidsfootlocker.com
stores.champssports.com
stores.champssports.ca
assets.stores.footlocker.com
api.stores.footlocker.com
maps.stores.footlocker.com
stores.footlocker.ca
rstatic.stores.footlocker.com

Other certificates including the domain name footlocker.com

(limited to 100 certificates)
trig.e.footlocker.com
devconfluence.footlocker.com
staging.footlocker.com
answers-texaneyecare.pagescdn.com
footlocker.com
www.footlocker.com
ebm.cheetahmail.com
wpm03.eccmp.com
www.footlocker.com
mlwsra.footlocker.com
HomeViewEU.footlocker.com
www.footlocker.com
footlocker.com
*.footlocker.com
ftp.footlocker.com
openam-footlocker-use4-staging.id.forgerock.io
www.footlocker.com
e.footlocker.com
footlocker.com
e.footlocker.com
stores.footlocker.com
coex.footlocker.com
homevieweuuat.footlocker.com
wpm03.eccmp.com
mi.footlocker.com
www.cexwelrmgstage.origin.footlocker.com
footlocker.com
www.footlocker.com
mi.footlocker.com
securerouting.footlocker.com
trk.bc.footlocker.ca
ftlsite01.footlocker.com
www.footlocker.com
footlocker.com
esps.footlocker.com
f02.chtah.com
wpm03.eccmp.com
staging.footlocker.com
stores.footlocker.com
jira.footlocker.com
www.cexnalrmgprd.origin.footlocker.com
stores.footlocker.com
dev.eu.apigee.footlocker.com
www.footlocker.com
wpm03.eccmp.com
prod.us.apigee.footlocker.com
dev.globalapi.footlocker.com
homeviewEU.footlocker.com
sanl.footlocker.com
reporting.vendor.footlocker.com
securerouting.footlocker.com
ess.footlocker.com
vmtne.footlocker.com
wpm03.eccmp.com
uat.confluence.footlocker.com
ebm.cheetahmail.com
ftlsite02.footlocker.com
xauthsvc.footlocker.com
geospatial.footlocker.com
f02.chtah.com
flvpn.footlocker.com
careers.footlocker.com
sanl.footlocker.com
www.footlocker.com
answers-texaneyecare.pagescdn.com
horizonview.footlocker.com
staging.footlocker.com
careers.footlocker.com
sourcing.footlocker.com
mlwasa01.footlocker.com
www.footlocker.com
flgpvendor.footlocker.com
xauthsvc.footlocker.com
help.footlocker.com
chwsra.footlocker.com
footlocker.com
test.footlocker.com
staging.footlocker.com
e.footlocker.com
dev.apg.globalapi.footlocker.com
*.footlocker.com
f02.chtah.com
securerouting.footlocker.com
chwda.footlocker.com
ttp.footlocker.com
esps2.footlocker.com
waumdmprdapp04.footlocker.com
mlwsra.footlocker.com
keyfactor.footlocker.com
apigtw.globalapi.footlocker.com
esps.footlocker.com
f02.chtah.com
stores.footlocker.com
hrmstest.footlocker.com
homeview.footlocker.com
www.footlocker.com
f02.chtah.com
e.footlocker.com
answers.zahnarzt-obernberg.at.pagescdn.com
apg.globalapi.footlocker.com

Certificate

The complete raw certificate details for stores.footlocker.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/whW7DeZbtr8p+9RDhZ
LN9nnnDLff7SZnyo63lXmivXIEgf55NtrlRo4lNWLKE8B+4ZxCBNP3JDCV61Xgs3
DURYp2oLJqiQ17Djh0zkPd7OmGGInnlGlKAvdpo5carEYuR4bDGyzQgmyDNw0ErZ
pvYWZMgZ+f/XAk8Zb9DbZcTWprA1md0HlZAcEWKD6YOk7p2bBXkP+3fRipb3mvm9
ljaN+v78wYwyp2szdmUY6lkiE7skv4bm1b8TgRJCiBOv0Fi+L0UbL7iHs4WUwRWW
ss8lz9JqI19boONEsoHCPvlE2HjsnFCIv/wh3mnQkqVFQ6Gy2dShGapkilW8MSOw
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9329366553237072365842295530370965336
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stores.footlocker.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20196220577013279011663710565055346011519700869427096635571920002342455056195917472177111664799973373503857277135648778545732418997429699842019558812012283708704273872820268441141312492187996898196753924745459666549756487721630982782000558784954357597655889375726677979203863310635623166069322642402687236440701458903496556154706214496924346832971405314678406212835612386584024373531134648698000213242936020849366827233659675166931952788083071065264789137393914680725637519150140579546659846010653155990836917824409916454846304382136362270893070784495813478254615091919641665928122570828165616830817514993943104958523
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							29615ed4418b764d61b4651bd56e602457088126
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.footlocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.kidsfootlocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.champssports.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.champssports.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.stores.footlocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.stores.footlocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maps.stores.footlocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.footlocker.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rstatic.stores.footlocker.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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