privacy-center.majidalfuttaim.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0b:25:82:17:89:2a:89:36:8c:7f:63:74:08:ac:a9:b5 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=privacy-center.majidalfuttaim.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:25:82:17:89:2a:89:36:8c:7f:63:74:08:ac:a9:b5
Serial Number (int): 14816261515346944969836725621150755253
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d8:ce:c9:6b:7f:09:d7:57:43:9b:0d:13:1d:c9:4d:95:30:55:79:88
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): a8:e1:a2:00:4a:2d:2e:1d:cd:60:5c:c3:04:b3:4f:57:6d:9c:f8:14
Fingerprint (sha256): 36:63:52:1b:1d:f8:36:a9:90:fd:bc:e9:6b:ab:49:2f:05:7a:fa:ae:df:8c:07:53:04:79:80:ed:f8:ff:ac:27

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate privacy-center.majidalfuttaim.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for privacy-center.majidalfuttaim.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

privacy-center.majidalfuttaim.com
privacy-center-dev.majidalfuttaim.com
privacy-center-dev-resources.majidalfuttaim.com
privacy-center-resources.majidalfuttaim.com

Other certificates including the domain name majidalfuttaim.com

(limited to 100 certificates)
www.majidalfuttaim.com
that.majidalfuttaim.com
www.majidalfuttaim.com
www.majidalfuttaim.com
that.majidalfuttaim.com
that.majidalfuttaim.com
xid.almouj.com
www.majidalfuttaim.com
xid.almouj.com
www.majidalfuttaim.com
that.majidalfuttaim.com
that.majidalfuttaim.com
xid.alzahia.ae
that.majidalfuttaim.com
that.majidalfuttaim.com
that.majidalfuttaim.com
xid.alzahia.ae
that.majidalfuttaim.com
that.majidalfuttaim.com
mallofoman.net
that.majidalfuttaim.com
www.majidalfuttaim.com
www.majidalfuttaim.com
xid.voxcinemas.com
www.majidalfuttaim.com
that.majidalfuttaim.com
identity.majidalfuttaim.com
www.majidalfuttaim.com
privacy-center.majidalfuttaim.com
api-fintech-prod.majidalfuttaim.com
that.majidalfuttaim.com
ssl714520.cloudflaressl.com
tracking.share.majidalfuttaim.com
xid.alzahia.ae
that.majidalfuttaim.com
www.majidalfuttaim.com
that.majidalfuttaim.com
mafid-sandbox.majidalfuttaim.com
dev-progressive.majidalfuttaim.com
tracking.notify.majidalfuttaim.com
that.majidalfuttaim.com
mafid-sit.majidalfuttaim.com
www.majidalfuttaim.com
www.majidalfuttaim.com
super7.majidalfuttaim.com
that.majidalfuttaim.com
sni.cloudflaressl.com
that.majidalfuttaim.com
ssl714520.cloudflaressl.com
mallofoman.net
tracking.privacy.majidalfuttaim.com
www.majidalfuttaim.com
that.majidalfuttaim.com
that.majidalfuttaim.com
sni.cloudflaressl.com
share-etihad.majidalfuttaim.com
identity.majidalfuttaim.com
that.majidalfuttaim.com
tracking.share.majidalfuttaim.com
ssl714518.cloudflaressl.com
tracking.notify.majidalfuttaim.com
identity.majidalfuttaim.com
that.majidalfuttaim.com
ssl714519.cloudflaressl.com
www.majidalfuttaim.com
www.majidalfuttaim.com
privacy-center.majidalfuttaim.com
majidalfuttaim.com
mafid-sit.majidalfuttaim.com
ssl714518.cloudflaressl.com
that.majidalfuttaim.com
ssl714519.cloudflaressl.com
that.majidalfuttaim.com
www.majidalfuttaim.com
www.majidalfuttaim.com
ssl714520.cloudflaressl.com
identity.majidalfuttaim.com
that.majidalfuttaim.com
tracking.privacy.majidalfuttaim.com
mafid-uat.majidalfuttaim.com
xid.alzahia.ae
careers.majidalfuttaim.com
notify.majidalfuttaim.com
mafid-sandbox.majidalfuttaim.com
majidalfuttaim.com
that.majidalfuttaim.com
www.majidalfuttaim.com
xid.almouj.com
www.majidalfuttaim.com
identity.majidalfuttaim.com
mafid-sandbox.majidalfuttaim.com
notify.majidalfuttaim.com
www.majidalfuttaim.com
mafid-sandbox.majidalfuttaim.com
www.majidalfuttaim.com
mafid-uat.majidalfuttaim.com
www.majidalfuttaim.com
www.majidalfuttaim.com
that.majidalfuttaim.com
that.majidalfuttaim.com

Certificate

The complete raw certificate details for privacy-center.majidalfuttaim.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKajgN+kiBTBv/bS6JjV
8U66kuHkRAQg7cYUfUUa0VRb52z/ua/f8fXX51y1BVQrBpgcF40Psc1Bslayd9K/
6qC9WgWIu5cno/aHe55I1y/H8JNTsORt7oD6UWD7nN88Uewct9pFePtvH9R6f4I8
o3V1dXMYV4exyQNKl/QjUAZa7jK1Qiy08RRqUslY6lJgyXDRBwwsYt5iGfIliQxv
1Qgbau6i65XRMfUAumuh+bLnQ6pEGhC0Usk4gSmDKhudUcaDdg8CW4XheW9YxUbb
U6d8+3uZsp51LHhxOgPVCBB0tom8S0vyLzb82RohEOe2ajdP/iHMJfhJHtJ5ecLh
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14816261515346944969836725621150755253
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'privacy-center.majidalfuttaim.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22805067492179887871363607273645907474870850987900584784348579160283588666949107380671699464572821281594324452776159826886837047782093453339256598921231308494296191298182005094606303964660315664536958358549835165406317243462809906426528979653146822824804104432791738745493347247681643004612331018841263124179109459992109057737350312382511483314095724653368989565513227283629408515009684903869396743447039332476936532964387658237971482380140756352947383325092922152556093797206889343566062694889951708015480473430326217032431092995574185528841437485706536428485884726066876279848900092689438161084051361232230079979921
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d8cec96b7f09d757439b0d131dc94d9530557988
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (171 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privacy-center.majidalfuttaim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privacy-center-dev.majidalfuttaim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privacy-center-dev-resources.majidalfuttaim.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privacy-center-resources.majidalfuttaim.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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