alltrails.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0f:e9:cd:02:b1:ee:b8:d8:48:91:27:a5:9d:32:10:b6 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=alltrails.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:e9:cd:02:b1:ee:b8:d8:48:91:27:a5:9d:32:10:b6
Serial Number (int): 21152383212304870540575227000978018486
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7e:a3:fd:61:72:8e:3a:65:cd:98:cf:04:35:f8:4c:1e:15:e2:e1:2f
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 34:db:1b:3a:fa:a6:8d:cf:18:af:81:22:d1:09:12:72:ab:b6:58:56
Fingerprint (sha256): 45:8e:c7:0e:99:c8:92:9e:94:75:21:51:4f:92:97:88:5a:52:2f:1b:16:fa:bf:bd:c4:38:41:3a:62:e5:33:48

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate alltrails.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for alltrails.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

alltrails.com
*.alltrails.com

Other certificates including the domain name alltrails.com

(limited to 100 certificates)
adminsupport.maxwellhealth.com
fluxx.totemapp.net
alltrails.com
orders.alltrails.com
orders.alltrails.com
support.alltrails.com
orders.alltrails.com
orders.alltrails.com
easymarkit.totemapp.net
www.distilnetworks.com
adminsupport.maxwellhealth.com
adminsupport.maxwellhealth.com
orders.alltrails.com
adamlyonsw.totemapp.net
adminsupport.maxwellhealth.com
*.alltrails.com
orders.alltrails.com
dojo-madness.totemapp.net
*.alltrails.com
*.alltrails.com
about.ksting.com
about.ksting.com
orders.alltrails.com
*.alltrails.com
support.alltrails.com
orders.alltrails.com
*.dev.alltrails.com
atlantis.dev.alltrails.com
lp.alltrails.com
about.ksting.com
*.alltrails.com
www.distilnetworks.com
adminsupport.maxwellhealth.com
adminsupport.maxwellhealth.com
about.ksting.com
fr.cdn-assets.alltrails.com
www.distilnetworks.com
adminsupport.maxwellhealth.com
orders.alltrails.com
adminsupport.maxwellhealth.com
press.getsundaily.com
console.alltrails.com
adminsupport.maxwellhealth.com
*.alltrails.com
alltrails.com
alltrails.com
about.ksting.com
*.alltrails.com
alltrails.com
www.distilnetworks.com
shop.alltrails.com
support.alltrails.com
dodo.totemapp.net
adminsupport.maxwellhealth.com
totem.alltrails.com
fluxx.totemapp.net
www.distilnetworks.com
press.swipecast.com
support.swimlane.com
geppetto-api.production.alltrails.com
adminsupport.maxwellhealth.com
picachocoffee.totemapp.net
bonusly.totemapp.net
intothewhoknows.totemapp.net
adminsupport.maxwellhealth.com
archmission.totemapp.net
about.ksting.com
support.swimlane.com
about.ksting.com
*.alltrails.com
press.getsundaily.com
archmission.totemapp.net
*.alltrails.com
about.ksting.com
orders.alltrails.com
britttest.totemapp.net
support.alltrails.com
www.distilnetworks.com
alltrails.com
adminsupport.maxwellhealth.com
fourpointsbar.totemapp.net
totem.alltrails.com
www.distilnetworks.com
*.webdev.alltrails.com
adminsupport.maxwellhealth.com
www.distilnetworks.com
about.ksting.com
*.alltrails.com
insitome.totemapp.net
orders.alltrails.com
beardedbastard.totemapp.net
journal.alltrails.com
shop.alltrails.com
cdn-assets-2.alltrails.com
shop.alltrails.com
orders.alltrails.com
fr.cdn-assets.alltrails.com
*.alltrails.com
*.dev.alltrails.com
orders.alltrails.com

Certificate

The complete raw certificate details for alltrails.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtef11SvEVUD2A8hDR5mr
SrCGXTe8uZ0MjjZ5rbcFqUCczD4NP816YLkF4oNLbrXOq46N0ReGNUfxvFlDLCTC
BkG/En7IogrFp0+jLF7BqYnycYa99Du/tPQy5JdUj6kDKfus7T3K7mk5vR+cWBgz
yxLFGBQ21Pc9RQ6h5VEO+I+xBAjzZ8rdxxr12Woq5jM2ujocZl72YC4qavcEIzCU
lEbLmsW2SEvFma18tHMFmakOJKf2oHkHW7g3+ahA5a/DOs/t/1yKhtG05SJc2TDd
+LswRqEq3BA9hUcJFUUzghkOSNNjg0sJL5kfBKzeaeRP5qZW3zQ8EZzCNG1jvi3a
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21152383212304870540575227000978018486
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'alltrails.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22963517078033093321362665226853607011715851658658882865325618269426772595333297391109188124134772887038003665055482165072925539463912358784709767368297451835954133729809382029306209505945004468555962699870952539000435959151624483611639277286430511094802122069148676512972457310076317562838508700996924568167255078717802771651839790228409354165972359749780560965346955120459727319076476723160156660007616323155396951782244741877955328771580799890616219902268050850437899577507348249816733900208955726006891692687419590841444608181855362050406838308201020708760874981849585949645603578270129843460107256272775090658019
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7ea3fd61728e3a65cd98cf0435f84c1e15e2e12f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alltrails.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alltrails.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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