zalora.com.hk

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:5e:c0:8f:74:93:95:6b:02:62:b6:c8:90:c6:de:4e was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=zalora.com.hk

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:5e:c0:8f:74:93:95:6b:02:62:b6:c8:90:c6:de:4e
Serial Number (int): 19101173434040915519595681881050766926
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 73:e0:21:d0:c1:df:6d:38:69:c8:df:63:ad:ef:ac:95:9d:20:14:5c
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): dd:46:dd:b8:8f:47:d3:1d:08:8e:04:c6:2d:cd:a7:d4:15:00:05:df
Fingerprint (sha256): 3d:c6:c5:3e:b2:7c:56:2e:84:1c:74:68:36:03:7c:10:ca:0c:8d:1b:bb:75:20:b0:35:4c:4d:d9:d5:f3:ce:69

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate zalora.com.hk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for zalora.com.hk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

zalora.com.hk
*.zalora.com.hk

Other certificates including the domain name zalora.com.hk

(limited to 100 certificates)
support.zalora.com.hk
*.zalora.com
support.zalora.com.hk
checkout.zalora.com.hk
checkout.zalora.com.hk
zcoop.zalora.com.my
link.zalora.com.hk
tisanz.com
www.zalora.com
*.zalora.com
*.zalora.com
asad.tk
support.zalora.com.hk
zcoop.zalora.com.my
api-checkout.zalora.sg
*.zalora.com
www.zalora.com
*.zalora.com.hk
ablink.em.zalora.co.id
www.zalora.com
support.zalora.com.hk
checkout.zalora.com.hk
zcoop.zalora.com.my
support.zalora.com.hk
support.zalora.com.hk
gael-lefort.fr
support.zalora.com.hk
oms.zalora.com.hk
zalora.com.hk
*.zalora.com
www.zalora.co.id
zalora.com.hk
zcoop.zalora.com.my
ablink.em.zalora.co.id
*.zalora.com
thread.zalora.com.hk
*.zalora.com
support.zalora.com.hk
support.zalora.com.hk
ablink.em.zalora.co.id
zcoop.zalora.com.my
*.zalora.com.hk
www.zalora.com
*.zalora.com
www.zalora.com
checkout.zalora.com.hk
ablink.em.zalora.co.id
support.zalora.com.hk
slack.jeffreylee.dev
www.zalora.com
*.zalora.com
*.zalora.com
*.zalora.com.hk
*.zalora.com
www.zalora.com.hk
link.zalora.com.hk
checkout.zalora.com.hk
zalora.com.hk
thread.zalora.com.hk
zcoop.zalora.com.my
thecollectivepool.org
zcoop.zalora.com.my
api-checkout.zalora.sg
www.zalora.com.hk
www.zalora.com.hk
wegloo.it
zalora.com.hk
support.zalora.com.hk
support.zalora.com.hk
api.zalora.com.hk
www.zalora.com
zcoop.zalora.com.my
support.zalora.com.hk
zalora.com.hk
checkout.zalora.com.hk
thread.zalora.com.hk
ssl4803.cloudflare.com
support.zalora.com.hk
zcoop.zalora.com.my
support.zalora.com.hk
checkout.zalora.com.hk
ssl4803.cloudflare.com
www.zalora.com
ablink.em.zalora.co.id
zcoop.zalora.com.my
thread.zalora.com.hk
thread.zalora.com.hk
api-checkout.zalora.sg
www.zalora.com
support.zalora.com.hk
zcoop.zalora.com.my
www.jkfbet.com
*.zalora.com
oms.zalora.com.hk
www.voltagecontrolrecords.com
support.zalora.com.hk
ablink.em.zalora.co.id
static-origin.zalora.com.hk
zcoop.zalora.com.my
support.zalora.com.hk

Certificate

The complete raw certificate details for zalora.com.hk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvaPaX+SjqmxoeHSl6A3
F4CmxFxqM4iYCOqVya4t04+OovyqdX47htZ31E0eBteFIFY5BduRnGlP/19xbuns
Ts0sx26DsnUS373NWt2Oxe2g0K4qJjESmEm5ZLd4gT1hweiuNgtmvKgYTTBoQG9G
xSIIvA2/kNMp6JH31UqrdZE6ZqGJ4pwQSoLqgWrE3VSHCNaBZdD8LSK7oHvpaK5V
qN9QAkf9A1MVwmxDxxLFxnAkfCNTVpZry9n7V4XS9Lf1Z+9uWD9KH+nkscjj0hem
tboBdKoXKEtpy9euvNkGqXvsaBpdUf1+7lH4hAig+mZqpKd4IcJiS4OrGk6aEIfJ
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19101173434040915519595681881050766926
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zalora.com.hk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19057329112742016685337896777721168494871087551176521558635728965718154171532282920490266660760653615352886776416497067198328306732508490057488698216871742209169902077480189635030674274718800064070128802589846945568392185807245412827228730640941372729080052731696016274490704088150366820558386132537426459147254517727153348061260522139056868646147476709555691021359018175813780205058593859395049045341326799643611083535210698489126348402369571432721726930948995567906024670098526092988454188815809563496280357009382779248940740000333399543342009622710121387562934824162393525899800305200991857704390319832619974904293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							73e021d0c1df6d3869c8df63adefac959d20145c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zalora.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zalora.com.hk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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