hq.customink.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 01:33:a7:7f:c5:e9:67:3f:a3:ca:46:3b:ec:ad:20:8a was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=hq.customink.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:33:a7:7f:c5:e9:67:3f:a3:ca:46:3b:ec:ad:20:8a
Serial Number (int): 1597432421201355450960658294429786250
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: a5:ea:67:a8:4e:65:e6:cb:e1:8f:74:2b:5e:49:67:93:59:4b:ab:2f
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): f1:83:c7:8b:7e:25:06:96:f2:3d:16:53:a6:42:bf:dd:75:66:89:6b
Fingerprint (sha256): 3d:6c:21:18:1b:bb:38:a0:de:8d:61:85:4e:ed:09:6d:06:2c:74:b7:f8:6f:b4:fa:90:bb:98:08:92:8e:e8:81

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate hq.customink.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hq.customink.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hq.customink.com

Other certificates including the domain name customink.com

(limited to 100 certificates)
wiki.customink.com
artblog.customink.com
pretreat-extractor.in.customink.com
mms-cloudfront.customink.com
locations.customink.com
*.out.customink.com
affiliates.customink.com
retail.in.customink.com
samples.customink.com
embed-answers.cority.com.pagescdn.com
mms-search.customink.com
*.out.customink.com
stores.customink.com
liwxfq.customink.com
media6.adlegend.com
promo.customink.com
*.out.customink.com
technology.customink.com
technology.customink.com
retail.in.customink.com
home.customink.com
vpn.out.customink.com
blog.customink.com
blogs.customink.com
gtm.customink.com
fe-img-cloudfront.customink.com
*.out.customink.com
shirtmagic.com
shirtmagic.com
partner.customink.com
*.staging.customink.com
locations.customink.com
wiki.customink.com
nps.customink.com
samples.customink.com
www.customink.com
*.in.customink.com
ssl362571.cloudflaressl.com
wifi.customink.com
reports.customink.com
*.out.customink.com
*.lambda-dev.customink.com
hq.customink.com
*.staging.customink.com
ssl362571.cloudflaressl.com
*.staging.customink.com
blog.customink.com
mms-cloudfront.customink.com
stores.cictitlepawn.com
hq.customink.com
uploads.staging.customink.com
*.us-east-1.k8s.in.customink.com
fulcrum.in.booster.com
answers-embed.techem.de.pagescdn.com
foundry.customink.com
*.out.customink.com
technology.customink.com
mms-cloudfront.customink.com
*.staging.customink.com
staging.customink.com
nagios-vpcprod.customink.com
*.out.customink.com
e.customink.com
dyo.customink.com
inkovate.customink.com
*.in.customink.com
checkout.customink.com
pharmacy.stopandshop.com
www.customink.com
pharmacy.stopandshop.com
stores.customink.com
maintenance.staging.customink.com
hq.customink.com
www.customink.com
*.out.customink.com
blog.customink.com
nagios-vpcprod.customink.com
assisted-design.out.customink.com
www.customink.com
shirtmagic.com
*.out.customink.com
technology.customink.com
blog.customink.com
mms.customink.com
samples.customink.com
dyo.customink.com
home.customink.com
www.customink.com
dyo.customink.com
blog.customink.com
marketinglog.customink.com
*.lambda-staging.customink.com
media6.adlegend.com
embed-answers.cority.com.pagescdn.com
retail.in.customink.com
nagios-vpcprod.customink.com
inkernet.customink.com
hq.customink.com
promo.customink.com
boutique.sfr.fr

Certificate

The complete raw certificate details for hq.customink.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/Yz9YTxbtz6ZAdx9yhM
Em00W8pmlItCfPpU/dZ1mwXagnPtJSfB+ezZrdrfzQUzOFRXzccWqm7OYH23eV2O
okKvXSgXmLsuLN9WHkHgm0zdGE0Y7iIE+pGzrE96JdkYAlKNP3uihRPzx3U1Ui/4
wLpAY5gtDjdmpKLa1uKD435AoKR2+MxJUhdT+Ik9Vh1aAlmRNBlPPSbEnaY4a67H
7ESYCSWMyHVdJhcSJbPW3DDgTinchKR5kXJ3Xl0WQNuZMBKxLbaDhJHW44ulcgRP
2i4XlzWTWZZr1WA4H5Ttr3hOQtn/YzPpIFVAdEy557wE9fu6ql/99EVOPiJl4ECu
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1597432421201355450960658294429786250
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hq.customink.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23223017015776938579521052295268171428350837749715557991299672075273621873174472286828249208984403168306714365170852370486968559200142143474574966630478993980073947230280421047251079508600629868998052296724528624683216360597492376220865459836078205996176824472634150086402882229893905355326575308424608351077272999707402607376468748839985868140316457653164710962185770656704777066331983270269317139757461304725080984404491062857582613364975582655285414213326882527221544266990500600517484341435365643231124930892247086770612125932274944673363568681278209864745213748320970841282454528580826864595257676102797271019147
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a5ea67a84e65e6cbe18f742b5e496793594bab2f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hq.customink.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0078f93b0168014994b311fbd9149ba3a2d8ae523f7fdd0d5364f2956521303dab7e8c03138de8ac00d88669354dd7f872f57c30cf6a9fa4f443b3ce896dfc10a60dc1f18469603529569d522714e9cb99d036cc504d19c2cc651e7c23fea7ce3fe72276cd7dda6473ab3976ee9ff02e7c7a98e24b6c6fbd69a29f69889e40669416d3ce6907602bdcc4c621d5dba5fb82a89a080900185d5a4e08c2077eed177afa0754f79e7f0581368638fa8259e197f36aa93c917fa22bb056555b0340911d6382d8ba9293286dac5f0d613a08f22666ef272cf9969b494057cfc9eb98efd674ba56ec1e69b35f735330d0beceaca73b69b927bb764f14073ad0fc50509acc