*.zalora.com

Issued by Amazon

About this certificate

This digital certificate with serial number 05:1b:65:db:f3:f3:8b:22:82:64:fb:7c:af:02:78:25 was issued on by Amazon.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.zalora.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:1b:65:db:f3:f3:8b:22:82:64:fb:7c:af:02:78:25
Serial Number (int): 6788397943941862559371645572712921125
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 3a:b8:bc:b9:9a:e0:12:58:33:d4:07:a4:30:9d:5e:67:c8:44:55:95
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 7d:4e:1b:b7:01:ab:db:67:fd:fe:91:58:a8:96:8b:be:93:be:be:a4
Fingerprint (sha256): 3b:3c:b8:0a:5f:82:3f:46:77:83:e3:25:7e:46:f1:85:99:97:ce:13:7f:a0:d0:47:a9:2d:40:25:3a:18:67:9e

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.zalora.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.zalora.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.zalora.com
*.zalora.com.ph
*.qadistribution.sellercenter.net
*.zalora.sg
*.zalora.co.id
*.zalora.com.hk
*.zalora.com.tw
*.zalora.com.my

Other certificates including the domain name zalora.com

(limited to 100 certificates)
*.zalora.com
*.zalora.com
*.zalora.com
trender-tableau.zalora.com
images.partner.zalora.com
goto.zalora.com
affiliate.zalora.com
images.partner.zalora.com
ads.zalora.com
images.partner.zalora.com
ads.zalora.com
*.zalora.com
zalora.vn
*.zalora.com
images.partner.zalora.com
*.zalora.com
images.partner.zalora.com
www.zalora.com
*.zalora.com
images.partner.zalora.com
trender.zalora.com
ads.zalora.com
worldwide.zalora.com
*.zalora.com
images.partner.zalora.com
images.partner.zalora.com
goto.zalora.com
ads.zalora.com
*.zalora.com
ads.zalora.com
www.zalora.com
images.partner.zalora.com
ads.zalora.com
zops.zalora.com
trender.zalora.com
email.zalora.com
*.zalora.com
styleguide.zalora.com
images.partner.zalora.com
www.zalora.com
*.zalora.com
engineering.zalora.com
ads.zalora.com
goto.zalora.com
ads.zalora.com
trender-superset.zalora.com
ads.zalora.com
*.zalora.com
zalora.com
zops.zalora.com
zops-staging.zalora.com
ads.zalora.com
ads.zalora.com
goto.zalora.com
*.zalora.com
ads.zalora.com
*.zalora.com
zheadcount-staging.zalora.com
*.zalora.com
*.zalora.com
trender.zalora.com
zalora.vn
ads.zalora.com
www.zalora.com
worldwide.zalora.com
ads.zalora.com
*.zalora.com
www.zalora.com
sellercenter.zalora.com
*.zalora.com
zalora.vn
zalora.com
ads.zalora.com
images.partner.zalora.com
*.zalora.com
zalora.vn
affiliate.zalora.com
ads.zalora.com
*.zalora.com
goto.zalora.com
sellercenter.zalora.com
corporate.zalora.com
www.zalora.com
z-pas.zalora.com
ads.zalora.com
*.zalora.com
ads.zalora.com
*.zalora.com
corporate.zalora.com
ads.zalora.com
ads.zalora.com
z-pas.zalora.com
*.zalora.com
zalora.com
trender-tableau.zalora.com
engineering.zalora.com
*.zalora.com
zalora.com
ads.zalora.com
zalora.com

Certificate

The complete raw certificate details for *.zalora.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtZ8IY1wqm88N5Ylvm33i
zOa6ESZ7TvybbcF/FcNnQ4AdO82EuXja6ptdwNyxw9u4LKxVIcY0DaFjiR57AYBI
ftNjjhhknIKf4Fq5bG/+VCmxaeFmahpUvh4Sp3EYLA/yNle55TDjpFkNF0/B2w3Z
+erPkTknlU3C+mLwmtBOse+2rXyNUysHF7OCdTEoa2settwMAsVjrEV23PiSZ8NE
nqyrrBz9UhH3dg8IDHxlcIgM+7pVEyUhEx3FaAzFdMcNhaUkpwtdUTjsvauDgfU8
EAhEEV2v3nYqyprHlvOIv747CgbbXbf6upGfhT/NqAU/7W24NJm3zSuuqg7w4xHz
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6788397943941862559371645572712921125
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.zalora.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22927555178654472851368001669277025302655772161355539118998246323370643502982698710163893153281128135757768543825240693369939023752973641658509266767713765547408880455172092921731120133184929628340551081122507078470864479438246839409212632489429951466792798454052090736335080981188145825126516290879725110137082835520806837719337030360212512154421892923080906269651641599380968486643416846896316778393157603475429655891889351010709623791514215081002785941698270362056618369947589546746429295699304653979182444711580213330017670545755300111253225330068214481617099688940430001944681492311006510618034046527180121437037
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3ab8bcb99ae0125833d407a4309d5e67c8445595
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zalora.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zalora.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.qadistribution.sellercenter.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zalora.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zalora.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zalora.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zalora.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zalora.com.my'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017543695ae000000403004730450220762121a411e1550a244f7ea0b06994b0449603e2bf687842e777c0b58af2f3f6022100a85fb5bbd4b491b8b14a4a2755a2ee5f06b2b0ccdfe9abf63d99c3de08ad8a630077005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca0000017543695b290000040300483046022100da3ebc76588728003c77328f50f315a8aa2212755d749e3a6866f780f2ce3e8e022100dc1ef71960b560f43ec90ef3befcac88c26fd72a20c9b6ffb9060dbe3c09a823
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003bc9eac98cae31451c71f5cf194643b8e622aeca68d34b9c2a4f0853872ad98ad47060dcf9eb6367d54d12c6646d3a31c07181ed296bb8273f76687bf8ccda7c4f4a8cfcce9a93b9d198de2d730a4a51b342dd6a8821b0c272e970877dfa7a4ebf893add4abbdc44ce836d079066a80c07ee129ffd5bf9683735585c8a081e87fadbf6d8ba928c5507c98eeb57ce5806687fc7befdf80444ff027752621b3c70a017fb5cfe728b7102e03da480349a20c954857314c6e863a702632c829bb87b2f3bcb52784e2e3fc4cd638b48049c77b30fd81b9be551c515b2505a6f06fff28f5073e4911e04bb7cf9dcf6c838b12ae8c8d7c0dc4f7b397248dbac8636b211