www.zalora.co.id

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0f:6c:8e:28:a3:67:3b:11:ea:d0:ae:db:c7:f6:cd:c3 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.zalora.co.id

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:6c:8e:28:a3:67:3b:11:ea:d0:ae:db:c7:f6:cd:c3
Serial Number (int): 20502071319356573495649011387472465347
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 34:0c:d2:cd:0b:07:b6:b5:de:d5:1b:27:83:e8:56:c2:ba:23:fd:c2
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): ab:85:2e:0d:aa:6c:5b:f8:c0:8f:d0:9e:2e:c7:a9:02:e6:02:06:14
Fingerprint (sha256): 54:46:d4:51:09:7a:9b:b4:54:74:24:15:da:db:2c:3d:3c:e6:41:04:cb:c1:53:1b:63:a6:82:f7:b6:e9:bc:40

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate www.zalora.co.id

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.zalora.co.id

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.zalora.co.id
zalora.co.id

Other certificates including the domain name zalora.co.id

(limited to 100 certificates)
support.zalora.co.id
*.zalora.com
support.zalora.co.id
*.zalora.co.id
zalora.co.id
zcoop.zalora.com.my
centrident.com.mx
*.zalora.co.id
support.zalora.co.id
support.zalora.co.id
checkout.zalora.co.id
www.zalora.com
*.zalora.com
tapee.io
*.zalora.com
www.zalora.co.id
asad.tk
zcoop.zalora.com.my
support.zalora.co.id
zalora.co.id
api-checkout.zalora.sg
*.zalora.com
www.zalora.com
*.zalora.co.id
zalora.co.id
support.zalora.co.id
ablink.em.zalora.co.id
www.zalora.com
zalora.co.id
support.zalora.co.id
zalora.co.id
support.zalora.co.id
zcoop.zalora.com.my
*.zalora.co.id
static-origin.zalora.co.id
valvepro.app
checkout.zalora.co.id
www.zalora.co.id
*.zalora.com
www.zalora.co.id
zcoop.zalora.com.my
ablink.em.zalora.co.id
*.zalora.com
kodebase.link
*.zalora.com
ablink.em.zalora.co.id
zcoop.zalora.com.my
thread.zalora.co.id
checkout.zalora.co.id
www.zalora.com
ssl4803.cloudflare.com
*.zalora.com
www.zalora.com
ablink.em.zalora.co.id
lpdevelopers.co.in
www.zalora.co.id
www.zalora.com
*.zalora.com
*.zalora.com
zalora.co.id
*.zalora.co.id
thread.zalora.co.id
*.zalora.com
checkout.zalora.co.id
*.zalora.co.id
static-id.zacdn.com
zcoop.zalora.com.my
zcoop.zalora.com.my
checkout.zalora.co.id
api-checkout.zalora.sg
support.zalora.co.id
thread.zalora.co.id
support.zalora.co.id
support.zalora.co.id
connect.precena-ls.com
support.zalora.co.id
checkout.zalora.co.id
www.zalora.com
zalora.co.id
docs.ft-crm.com
zcoop.zalora.com.my
support.zalora.co.id
checkout.zalora.co.id
support.zalora.co.id
zcoop.zalora.com.my
thread.zalora.co.id
ssl4803.cloudflare.com
www.zalora.com
ablink.em.zalora.co.id
support.zalora.co.id
support.zalora.co.id
zcoop.zalora.com.my
www.zalora.co.id
link.zalora.co.id
www.bilgisayar-servisi.net
v2016.iammatthias.com
api-checkout.zalora.sg
zalora.co.id
www.zalora.com
zcoop.zalora.com.my

Certificate

The complete raw certificate details for www.zalora.co.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYbZXQVhGDPRCmBCbzPm
Z+Oj1rxY7aoDYbVcBmiOTT73bnq7VKdG0Qjuketd/6Jsb6kpomRBv/Pk3fwjACnU
z2CeJMxdHv9SrJOmEnBnkCiTVGODZ6SRVT6tEZ2y/U7P9HBcMKCTMZpZ+heAvAl0
y/mqnvdM3fU39R3jHsRi97RwErmXue3dZLpjHkXj/opH0Hw886UwRgD/vHUDZ76Z
yLWxxiB2OOLPCRP5rO6o0OxEr+bAs3VL8oGZEz/FGwto0QEE15hOxFe/3GVbbW3e
YBufo2Pb9nnZshFVGArRGX0i6KqA9RT2KPklDfxZQfz4veXPy9Y5PBMw64hMNox6
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20502071319356573495649011387472465347
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.zalora.co.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24430489416007058407968978993243598885080306271700751120817958135620561864831611634488492780582074766915998497307310580361511989879511412264912999593961270735135283422690899340743376807708281000135177366929087220263114986293121400983914609626444831165466293598752794557790003432759530933801713156172346557194313198342968823510008066604910928468679321669935074172934353492886866603445805468276026333423165008471663518329598006055523063420828795176328524091651308134337114774442074037070177229997988843467575918287042014486008206029812637467972920580503250348744016572940442289723380658818255103756369697091776999619099
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							340cd2cd0b07b6b5ded51b2783e856c2ba23fdc2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zalora.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zalora.co.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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