www.blog.ubuy.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 02:ec:51:4c:e3:32:a5:c3:a8:64:b0:f5:c4:d5:21:1d was issued on by Amazon.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.blog.ubuy.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:ec:51:4c:e3:32:a5:c3:a8:64:b0:f5:c4:d5:21:1d
Serial Number (int): 3885487017016624255679655880693195037
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 0e:45:7d:06:07:fc:cd:8e:4d:7a:bc:71:47:f0:93:e4:59:b1:c2:4b
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): d4:6e:8a:4a:c3:bc:64:ee:d8:f8:3b:eb:2a:f9:aa:a4:28:91:cb:2d
Fingerprint (sha256): 66:12:13:10:2d:3d:e4:0e:54:6a:9c:03:2a:32:2c:35:a0:df:12:4a:e0:6f:0b:6d:34:32:70:bc:02:b0:eb:e7

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate www.blog.ubuy.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.blog.ubuy.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.blog.ubuy.com
*.ubuy.com
*.blog.ubuy.com
ubuy.com
www.ubuy.com

Other certificates including the domain name ubuy.com

(limited to 100 certificates)
ubuy.com.kw
*.ubuy.com
ubuy.co.jp
track.ubuy.com
ubuy.com
track.ubuy.com
*.ubuy.com
ubuy.gl
ubuyanalytics.ubuy.com
life.ubuy.com
ubuy.com
*.ubuy.com.kw
ubuyanalytics.ubuy.com
*.ubuy.com.kw
Ubuy Technologies Private Limited
uglow.ubuy.com
*.ubuy.com.ph
*.ubuy.om
www.bugreporting.ubuy.com
*.ubuy.om
www.blog.ubuy.com
ubuy.co.jp
uglow.ubuy.com
ubuy.com
*.ubuy.com.ph
*.ubuy.com.kw
ubuy.com
algeria.ubuy.com
blog.ubuy.com
Ubuy Technologies Private Limited
algeria.ubuy.com
*.ubuy.com
ubuyanalytics.ubuy.com
www.blog.ubuy.com
*.ubuy.com.kw
*.ubuy.com.kw
uglow.ubuy.com
www.ubuy.ma
ubuy.com.kw
*.ubuy.com.kw
ubuy.co.at
ubuyanalytics.ubuy.com
ubuy.com
track.ubuy.com
*.ubuy.com
*.ubuy.com
images-cdn.a.ubuy.com.kw
ubuy.com.kw
*.blog.ubuy.com
test-blog2.ubuy.com
ubuy.gl
*.ubuy.om
ubuy.com.jm
*.ubuy.com
www.jordan.ubuy.com
*.ubuy.com
ubuy.com
*.ubuy.com.kw
*.ubuy.com
www.ubuy.com

Certificate

The complete raw certificate details for www.blog.ubuy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUOOZhOynogE5ASRBEiC
XUeS4TXDz2Bko9nm+S99pJITcnU8791ZDycYc/50p9/iEl9x1VTtZ0sM/rEweWry
THG8hLfxSGqdA8hDsy6GcRYp5HNac6+Y4lMoBPlz0fXQsXVE8qxE4KjHvF5KplIV
5R6ANId6ZSFi9NdMmOaDIpxWvyyPCvmdpv62HlIkjr2/M08/q2rsUQKON95kQuCc
G2UIBGXW+Gxihu62/8u4pVVgXdkGsDogmKee+4eIelUM5R0yHXK1QZal54ElaWqF
chpIcttDNdnIteRBTex68yPr1JC7MBOUyAo8kHUtcBCZkckLjA1+c5z55kp0iDzL
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3885487017016624255679655880693195037
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.blog.ubuy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25912165744087248938281158713771295699452830038269832173590861588745864787980969920301805047173390641186494642182299814142274212084253352875827610805628006245567992494129311740829502470319642512656957714125216780759458611715190641169427421841028569617300902539442328692198179121750974962972267565139945365377443707175134715482996516943210704276283375314678485208911560466916662849574812744288121189925253442307299318121678996207258601289600840922832862424125165721519726333406261471709235487925004090589982698602536108695120526273339983322285376080057834098464382282667882845132200531921119564711501755351826033331041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0e457d0607fccd8e4d7abc7147f093e459b1c24b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blog.ubuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ubuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blog.ubuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ubuy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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