zalora.vn

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 02:ad:ee:fe:98:08:29:19:6b:e9:5d:99:0f:48:98:b9 was issued on by Amazon.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=zalora.vn

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:ad:ee:fe:98:08:29:19:6b:e9:5d:99:0f:48:98:b9
Serial Number (int): 3561570732586891631617654312841812153
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 20:f9:41:b7:45:88:06:f4:8e:72:cc:02:ab:d4:f6:ac:f4:29:3a:2a
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 22:e9:4b:ff:c2:8e:15:c9:78:16:f5:08:b6:21:23:f3:78:58:e8:2b
Fingerprint (sha256): 33:17:a7:36:50:3c:c6:5c:95:3c:08:d9:01:0a:4e:9e:a9:2a:9a:e1:c7:09:3d:64:7b:67:bb:a0:41:1d:42:55

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate zalora.vn

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zalora.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

zalora.vn
zalora.ph
*.zalora.com.vn
zalora.co.th
*.zalora.com
*.zalora.com.sg
zalora.com.vn
*.zalora.id
zalora.com.sg
*.zalora.co.th
*.zalora.ph
*.zalora.vn
*.zalora.hk
*.zalora.tw
zalora.hk
zalora.tw
zalora.com
zalora.id

Other certificates including the domain name zalora.vn

(limited to 100 certificates)
zalora.vn
blog.zalora.vn
www.zalora.com
blog.zalora.vn
blog.zalora.vn
blog.zalora.vn
blog.zalora.vn
zalora.vn
support.zalora.vn
www.zalora.com
ssl4803.cloudflare.com
zalora.vn
zalora.vn
blog.zalora.vn
zalora.vn
*.zalora.vn
enews.zalora.vn
zalora.vn
zalora.vn
*.zalora.vn
*.zalora.vn
blog.zalora.vn
ssl4803.cloudflare.com
ssl4803.cloudflare.com
www.zalora.com
zalora.vn
www.zalora.com
blog.zalora.vn
support.zalora.vn
www.zalora.vn
www.zalora.com
*.zalora.vn
blog.zalora.vn
ssl4803.cloudflare.com
www.zalora.com
enews.zalora.vn
blog.zalora.vn
www.zalora.com
blog.zalora.vn
blog.zalora.vn
zalora.vn
www.zalora.vn
zalora.vn
blog.zalora.vn
*.zalora.vn
www.zalora.com
www.zalora.com
zalora.vn
www.zalora.sg
www.zalora.com
www.zalora.vn
ssl4803.cloudflare.com
www.zalora.com
zcoop.zalora.vn
www.zalora.com
www.zalora.com
zalora.vn
support.zalora.vn

Certificate

The complete raw certificate details for zalora.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1D/PhP2JOcbJ2ybU4M6
9cLAfbJFOBFRK+UlK6VdFLAnlMRPS4G5XI9hWYBsNaS9pLlZzpdXtH6IRk85tQms
73y5J2WL0Y3TVfJ0/OQb0uzlvsj8ppr9yABCSfIU09d+to0DZ50kO6xWgmPqZ38U
OiO7t4VLAgMKs6PDC1uIAY+QoqCEebrGc+gHxeD80fmkeK1XZFndWY1Z19MV4QND
mjTJ/LF+Ruv3UMY/g18kUyCAAldebom/AzFr00lk1h7bKRawanZZfNmoG6BmopI3
aMoGA8ieN5oyx6j5aokES0DYR96A/PtDB13VcdyXndNZ1C6dciySi2ODR+Uujy79
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3561570732586891631617654312841812153
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zalora.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24151457378053046212394807635756023401045599760119822464164909450329850090324823028935403517957287464647953160914860778019250992599982877277289866581009409123770094591961588595886529429956698756993751431226859944113052045017316414824141857443761168206739127182452849998533980229888812803564618145215074492748030155226897418704431784296156035928333156732191454636830761071432390026014458148465871524400204205709067719379817834567520126612575628515898149353755743781567417760611967941062888426588007320457489566323602140092791415832982774464824353928402718542414315773241641334790781731609371647418288662484920147311961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							20f941b7458806f48e72cc02abd4f6acf4293a2a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zalora.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zalora.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zalora.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zalora.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zalora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zalora.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zalora.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zalora.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zalora.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zalora.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zalora.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zalora.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zalora.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zalora.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zalora.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zalora.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zalora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zalora.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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