*.zalora.vn

Issued by RapidSSL SHA256 CA - G4

About this certificate

This digital certificate with serial number 62:cb was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=*.zalora.vn

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 62:cb
Serial Number (int): 25291
Serial Number lenght: 15 bits, 2 octets

SubjectKeyId:
AuthorityKeyId: f3:b5:56:0c:c4:09:b0:b4:cf:1f:aa:f9:dd:23:56:f0:77:e8:a1:f9

Fingerprint (sha1): 44:d6:aa:b2:2d:18:9f:5a:42:51:50:8c:b0:8f:e1:cd:7b:80:c3:be
Fingerprint (sha256): 44:33:7c:e3:c3:30:55:62:3b:0c:a8:a0:85:68:6e:d8:19:c5:40:d5:82:3e:b8:57:53:c0:e6:a8:34:44:85:b2

Issuing Certificate URL: http://gz.symcb.com/gz.crt

Revocation information

OCSP Server: http://gz.symcd.com
CRL Distribution Point: http://gz.symcb.com/gz.crl

Check the revocation status for certificate *.zalora.vn

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.zalora.vn

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.zalora.vn
zalora.vn

Other certificates including the domain name zalora.vn

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.zalora.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgICYsswDQYJKoZIhvcNAQELBQAwRzELMAkGA1UEBhMCVVMx
FjAUBgNVBAoTDUdlb1RydXN0IEluYy4xIDAeBgNVBAMTF1JhcGlkU1NMIFNIQTI1
NiBDQSAtIEc0MB4XDTE2MDIwODA4NTk1NloXDTE3MDQxMTAzNDM1NFowFjEUMBIG
A1UEAwwLKi56YWxvcmEudm4wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoIC
AQDaq8zXEokuvJgi509vNqOTapd5EqyufssChdLT0w2o4+9JKK3TZrrp/Pj8SVJJ
Fgx2z7yN9jgg43Mc2MARJDSl+1xxg4Ej1nvJ6HYVTJiR6Wn0X54WpXCkroB8cBlu
5k2t09uMdyQMVBPh93nIkxKQIIQtPXrAgaroxFoUWzFQougxGh8ulhWuIYJdnDzV
pZSuzm4Sr3Paz+yZe7b6/kvUBHdK0RcBddikSpEtMqrwi6JwaXDDmE/QaydS4791
hbRy9Zp0Resc5Q1DxqrID61UxoX87/tIyuomx8UMpGHWeWPtCT9dZ/bszwN5ft2J
FvKF+U2UEfgA6hR/mKtjDte4f5Zg+Qahj4K26DXIH29u9x8388olS27q48LEhadP
KaVmONDTxxFDQdV1I8qA+95taBvPXVU+etfTHyEVV9FpdEB+jBWjSuAUicBfv4wC
3EM72j5UCUQ9lMeupUGKXpopKxkf8tGNfsS1G2L8XBOMYNP3hGMQKgDO4yRS4xSZ
pA7hg9TtRStatcBPBEOkeBCDFvCbsIKCVpCQxrtSM070LVw28NdPY7K9IiBSsAgw
w5kc+Ka2LuBWozs7t6DnOHJe4v74m3+zW/HtURf2LXZRaFELOAM9wIOSdB/BTDb1
ssBO2lEr9yhZwDdTItmzzCTSYI3JK9c5F4HLOT+X2qqfPQIDAQABo4IBTjCCAUow
HwYDVR0jBBgwFoAU87VWDMQJsLTPH6r53SNW8HfoofkwVwYIKwYBBQUHAQEESzBJ
MB8GCCsGAQUFBzABhhNodHRwOi8vZ3ouc3ltY2QuY29tMCYGCCsGAQUFBzAChhpo
dHRwOi8vZ3ouc3ltY2IuY29tL2d6LmNydDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMCEGA1UdEQQaMBiCCyouemFsb3JhLnZu
ggl6YWxvcmEudm4wKwYDVR0fBCQwIjAgoB6gHIYaaHR0cDovL2d6LnN5bWNiLmNv
bS9nei5jcmwwDAYDVR0TAQH/BAIwADBBBgNVHSAEOjA4MDYGBmeBDAECATAsMCoG
CCsGAQUFBwIBFh5odHRwczovL3d3dy5yYXBpZHNzbC5jb20vbGVnYWwwDQYJKoZI
hvcNAQELBQADggEBAF9Lpsh4J/yyp8cNKomtZxCu0ewhZFNJlBMdd6fj9h2H1uAG
LtumlD5LCuViJA+hfwkCylW3BaVgSWwYjXG48BynYGyJ1p6CaevpL7MzcITBMRzT
TfbnKypKF+wS6+fBjyAjDVjGRSdlx0Ni4cledZ/ID4mZPT6QCQLh3fD4WdIlWGQy
92B4zOVL8ghhyYk0tnRK7uEjVx7yhr3RO3/TnHhXfkk4iAHqLwtOw96SuKuvunb9
Ea1vXUlHiAx1EFTzJc6m3Wad1sqpypM+D0f4hG2QjW5TnTxL/eQDjngfZYzqGQaV
mwFFIiTrkcg38AYM9jD1zvcHkLZfhSt8cMFjM9I=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 25291
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-08 08:59:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-11 03:43:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.zalora.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 892100232962557660488271047171017926212976903028478390584004091761198920672401545717253612491472631049118628886171266591571492176313788673171747132150847406967912156537062739150435615441922351462863423206151860348870838330682954838484265695417897723612610984381964118957294444498120357225398778609005697577903653484379207820710515585688692446715971074940122356966777141062019873618021420381644282374282306718946388971351446996944569925624773917674064848801015081475418810722143809602880453199808854615199345295323639051179644634262008178307599495084651964885376696935856948088398692045612332481476295069985651176837326492930781835052017494152832135945057084585371212680878197248476154367122147332267465784491764391548103479773159171801143137927296002935132541477405358305152204343230421228136336406070064003300411434489942927328132847521603661610666684088053020636626192214468378757126162716874204288197128398768141422556981608057984877083568994027550114749578836115454926821926155556889490046283614781273708120981724586017326928806169103543476627571722753575810405152701391628056394143153244510205926485177998168682388638113294658623648985212639490301890529085385014081694697084287521898091265258914101965179234289559972944244547389
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f3b5560cc409b0b4cf1faaf9dd2356f077e8a1f9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gz.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gz.symcb.com/gz.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zalora.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zalora.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gz.symcb.com/gz.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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