dy.www.bulgari.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 02:0c:c7:51:0f:b6:4c:62:e3:11:9a:60:75:50:43:d1 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dy.www.bulgari.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:0c:c7:51:0f:b6:4c:62:e3:11:9a:60:75:50:43:d1
Serial Number (int): 2724806175727200385661375174107218897
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 5a:15:d4:bf:3b:7b:7d:cb:c4:57:0c:a6:64:0a:8d:e5:31:42:0d:6f
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 20:94:89:7a:b5:dc:bb:5c:1f:4c:77:b9:7d:41:3f:52:69:ba:e5:3b
Fingerprint (sha256): 31:83:4e:0e:ed:ae:c3:d3:ee:2d:01:1c:cb:2e:ad:1e:14:3c:77:1e:f9:1a:5d:1f:7f:da:b9:b8:4b:16:be:a8

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate dy.www.bulgari.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dy.www.bulgari.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dy.www.bulgari.com
dywwwbulgaricom-1632914162553.dynamicyield-serving.net

Other certificates including the domain name bulgari.com

(limited to 100 certificates)
my-serpenti-dev.bulgari.com
s2-san.cloudinary.com
cloudinary2.map.fastly.net
serpentiform.bulgari.com
testbasel.bulgari.com
cloudinary2.map.fastly.net
m.bulgari.com
s2-san.cloudinary.com
s2-cloudinary-pin.map.fastly.net
s2-san.cloudinary.com
s2-san.cloudinary.com
*.bulgari.com
cloudinary2.map.fastly.net
s2-san.cloudinary.com
cloudinary2.map.fastly.net
s2-san.cloudinary.com
s4-san.cloudinary.com
bulgari.forma360.it
cloudinary2.map.fastly.net
emi.starclinch.com
testbulgarinetwork.bulgari.com
cloudinary2.map.fastly.net
s4-san.cloudinary.com
s2-san.cloudinary.com
testsotirios.bulgari.com
s2-cloudinary-pin.map.fastly.net
s2-san.cloudinary.com
bwelcome-dev.bulgari.com
illumina.bulgari.com
serpentiform.bulgari.com
s2-san.cloudinary.com
society.bulgari.com
s4-san.cloudinary.com
illumina.bulgari.com
www.serpentiform.bulgari.com
s2-san.cloudinary.com
s2-san.cloudinary.com
learninglab.bulgari.com
s2-san.cloudinary.com
cloudinary2.map.fastly.net
cloudinary2.map.fastly.net
s2-san.cloudinary.com
bulgari-presslounge.com
catalogs.bulgari.com
shop.bulgari.com
s4-san.cloudinary.com
cloudinary2.map.fastly.net
bulgari-presslounge.com
s2-san.cloudinary.com
s2-san.cloudinary.com
illumina.bulgari.com
secure.bulgari.com
s4-san.cloudinary.com
society.bulgari.com
*.bulgari.com
test-learninglab.bulgari.com
cloudinary2.map.fastly.net
mycampus.bulgari.com
cloudinary2.map.fastly.net
IdCycle-qta.bulgari.com
tributetofemininity.bulgari.com
bx1.bulgari.com
bwelcome-ppd.bulgari.com
cloudinary2.map.fastly.net
cloudinary2.map.fastly.net
after-sales-service.bulgari.com
s2-cloudinary-pin.map.fastly.net
gourmet.bulgari.com
BTraceExtRPT.bulgari.com
org-presslounge.bulgari.com
au-we-test.bulgari.com
tp.bulgari.com
sip.bulgari.com
photoboothtouch.bulgari.com
s4-san.cloudinary.com
s2-san.cloudinary.com
touch.bulgari.com
s2-cloudinary-pin.map.fastly.net
s2-san.cloudinary.com
webmail.bulgari.com
photoboothtouch.bulgari.com
cloudinary2.map.fastly.net
tp-qta.bulgari.com
s4-san.cloudinary.com
org-presslounge.bulgari.com
lydir01wsext.bulgari.com
myoffice.bulgari.com
omnia-pink-sapphire.bulgari.com
s2-san.cloudinary.com
s4-san.cloudinary.com
gourmet.bulgari.com
dy.www.bulgari.com
mail.bulgari.com
s2-cloudinary-pin.map.fastly.net
fe.bulgari.com
*.bulgari.com
s2-san.cloudinary.com
asset.bloomnation.com
s4-san.cloudinary.com
s4-san.cloudinary.com

Certificate

The complete raw certificate details for dy.www.bulgari.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5O2Ni5Jeo+IoBS2pPi/M
5HmECiRtl25LKWq0wZZxwzSvAhYXegmW1G4CSoC9c8Tiok6c0B1kipRNFJ/Gk1vQ
1gtgB1NWRNPsI7DD4ku0SIxdsAdQW1m5zYivRq0HAG7ccf0cDBnZWK66PHfqCX3h
DKqIT6LYp9EigAdEZCrpHq8zoIK6KfqYWuk/Lnz6+yae8CQZe9RJ9NbXP9mzBTzH
qJT/xgej/jkXEeU6OIAQzReMITt8W4u1pS3sI6vbwygZ5M+mbfj8v2sFGZlUhIJI
lb+4Dc9CWZyQJiifmLkE3MzxDijIGDJKHCLs6CHsiU5JoPx6G54GWbwie+A9nDkY
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2724806175727200385661375174107218897
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dy.www.bulgari.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28899475238580019096986536163207056582027098925131005756625731976152391227354320097800174972713593594460515838629340799829661091162252916672081269491593042055246703273169092428370717637271314271767310440681125320383490217417178057761964678055217690825133267097250496083005153330474442886942421500208625905895301461328798072125961610764815156279252734887353888239615151774201783926127773225829220545343496207728662854732004790169888232398742575273188681912259823398423201335669654455284115883683364947792321179553030043982548461491368534279668338526038458809299963018200358684187728306088297791599514122557252536178803
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5a15d4bf3b7b7dcbc4570ca6640a8de531420d6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dy.www.bulgari.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dywwwbulgaricom-1632914162553.dynamicyield-serving.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000189aa733f580000040300463044022036ddd460dc3ac92479a07f34ac2f356a1a9607914cadf34359d4f5d3708e9cd702202e7a17c0972946db79b5092bb69bb648f96af26c2c8372497962883950306fee00770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000189aa733f600000040300483046022100a50d9a61e1a20e5546b0f18a9b257e5d3674bb77226ad4a404630082cc5020630221009d3032e12d676e15f5b899730161951240a92744b177267fcfc544166476bf45007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000189aa733f730000040300473045022100d610eb1235be91fca568ec84971c0460a47281d296a2fcd2145b92976a9c9e450220421e3ed24c7ce58e1076938cea03a9572683f3f52e3a071cf72fab857f5540af
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0017696e66e48cb071f6a24bd733654740089901e508a9b02dfea7667f3f1f0f69b94a6c3cbc25f714b09e1c76fe2d325194abf9945bb269c51ac5a8a38f14828cdd2b802862103e58e00ec7a0a837cb5d9840fec0f0248065e0e36e7cdbc8629999e9f5e958a3c2a0a080ac9017686776b7a21f42da1813f2cc5ef16eed8b745b5cf366eb01baf7562cdcacf67ea174f2c590e649621a6fc3961a1f074fa956c3e8cb970a6225064c148c50c9c3ec3131225414a4622c28624367638978487d024aadb2376c5ede6ef9ea3859306bd0435027f6d944a053e24687dfd80e53fee2e57d1826398a1e89a0f00157a2b40f3fb978e0d66acec1bbeb9214a063993144