hq.customink.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 05:79:fb:62:fc:11:3a:70:4e:89:e6:1e:4a:ce:b9:f3 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=hq.customink.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:79:fb:62:fc:11:3a:70:4e:89:e6:1e:4a:ce:b9:f3
Serial Number (int): 7279506625988786657615776418670492147
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 77:0a:2f:a4:97:ca:9f:03:70:75:99:ad:89:66:dd:6f:15:5f:91:10
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): e4:6a:4d:98:8e:9a:7c:dd:ac:48:33:23:57:6d:b6:52:ca:1e:97:6c
Fingerprint (sha256): 4c:d3:95:09:a0:38:03:6f:a2:85:1f:12:24:06:8a:8b:c4:95:13:63:63:8b:15:be:c5:07:be:fd:36:1a:e7:e2

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate hq.customink.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for hq.customink.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

hq.customink.com

Other certificates including the domain name customink.com

(limited to 100 certificates)
wiki.customink.com
artblog.customink.com
pretreat-extractor.in.customink.com
mms-cloudfront.customink.com
locations.customink.com
*.out.customink.com
affiliates.customink.com
retail.in.customink.com
samples.customink.com
embed-answers.cority.com.pagescdn.com
mms-search.customink.com
*.out.customink.com
stores.customink.com
liwxfq.customink.com
media6.adlegend.com
promo.customink.com
*.out.customink.com
technology.customink.com
technology.customink.com
retail.in.customink.com
home.customink.com
vpn.out.customink.com
blog.customink.com
blogs.customink.com
gtm.customink.com
fe-img-cloudfront.customink.com
*.out.customink.com
shirtmagic.com
shirtmagic.com
partner.customink.com
*.staging.customink.com
locations.customink.com
wiki.customink.com
nps.customink.com
samples.customink.com
www.customink.com
*.in.customink.com
ssl362571.cloudflaressl.com
wifi.customink.com
reports.customink.com
*.out.customink.com
*.lambda-dev.customink.com
hq.customink.com
*.staging.customink.com
ssl362571.cloudflaressl.com
*.staging.customink.com
blog.customink.com
mms-cloudfront.customink.com
stores.cictitlepawn.com
hq.customink.com
uploads.staging.customink.com
*.us-east-1.k8s.in.customink.com
fulcrum.in.booster.com
answers-embed.techem.de.pagescdn.com
foundry.customink.com
*.out.customink.com
technology.customink.com
mms-cloudfront.customink.com
*.staging.customink.com
staging.customink.com
nagios-vpcprod.customink.com
*.out.customink.com
e.customink.com
dyo.customink.com
inkovate.customink.com
*.in.customink.com
checkout.customink.com
pharmacy.stopandshop.com
www.customink.com
pharmacy.stopandshop.com
stores.customink.com
maintenance.staging.customink.com
hq.customink.com
www.customink.com
*.out.customink.com
blog.customink.com
nagios-vpcprod.customink.com
assisted-design.out.customink.com
www.customink.com
shirtmagic.com
*.out.customink.com
technology.customink.com
blog.customink.com
mms.customink.com
samples.customink.com
dyo.customink.com
home.customink.com
www.customink.com
dyo.customink.com
blog.customink.com
marketinglog.customink.com
*.lambda-staging.customink.com
media6.adlegend.com
embed-answers.cority.com.pagescdn.com
retail.in.customink.com
nagios-vpcprod.customink.com
inkernet.customink.com
hq.customink.com
promo.customink.com
boutique.sfr.fr

Certificate

The complete raw certificate details for hq.customink.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6y9Rb96qYNI9+C6iT54
QmZks6pr8m0RqwjFDF6zDcDFGfDENRsgv7tnNTSjI4NvMC2Q7vH8QfsoBcc5JDzP
7NBz13UnpiaH4xyP5pommUb5Y4pvKhcKCqcCR2j6o+JbOJ1znmrdWwY/0KOjC1ek
ktgVs2y//7EJUdmp6Ptq/n2zzrjsXx+vcYCdgUr19ZT0wqiKGLiiv4NekWr/3Nhv
gLNz2JR3LQuap//yPCLcX0EUZGlejjbITJgpqUcT6lPJFXp1VBUJ+2m9G40UIER3
2XB48GHL9YN1oPBnL7GcaR/nwat/nEH5udizG0uoIVo42D/BSss5fUH9uYqq05I/
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7279506625988786657615776418670492147
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'hq.customink.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17127352116430910099604243400369832968524473290774253571901133056121446192418285521631331208445904579865658217574033957702868516850245205502284027824445460937481729776467764585619219348248190227337042667585650663387361119152161302381071681295714941922425968832591902937100697858185103844148025126225681140562803160856760844558259352519546919745078189671358003224001743364443728476452147542199747568459169828919118095389108893977159794613928573406930121116688570256249099671406079061252992802540153390740929313114056289716725627330970211267539806104341551158387290226394903968847147357797668049451993675312220171550673
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							770a2fa497ca9f03707599ad8966dd6f155f9110
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hq.customink.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00564d81c0ff75dd3a725e0c2cc3e77b2847bd9871987bd6f85c5a2a357d3bc355d13d80a6bc901b9e8ccb81b8c0a0f33371bf9f2284b944469ab62c132edaf57d157cfac91d737b9eddcd27caf5aa633973eba0d1db05836664bdac71ab6855ca2e24b288fb871fd65eb65a5638b559376d580e39bfdb785ab0702f0b7a757f23d20aca4fe9653ff05ea28c68f8e9c143a2e54d97d694ac306c1d49de993186f7d142b695287947ded66ea3551c87f52b7de0677981e68eb254d4f451a96a2dc70336cb06105b4d7c1489d893277a60b7daeb8a34db49a656f1a96e742d966ae16d2ebe6c15c3a50b4e13a301bb8375cd8959a3645fa8b8cccabb3f96f9930d6e