assets.davidzwirnerbooks.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 01:e3:83:b7:73:2c:d1:9c:f3:99:69:2a:2a:07:81:91 was issued on by Amazon.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=assets.davidzwirnerbooks.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:e3:83:b7:73:2c:d1:9c:f3:99:69:2a:2a:07:81:91
Serial Number (int): 2510550912729098959137444929519190417
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 5c:a5:ff:bf:b8:c0:5c:39:1c:ed:59:42:46:76:80:d3:4d:68:75:04
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): e5:55:24:0c:65:6a:04:56:07:3b:be:b7:fb:85:9b:46:df:2b:ad:e4
Fingerprint (sha256): 71:ff:a1:42:03:3b:f6:80:45:c5:31:5e:4e:37:0c:45:28:63:c9:47:3d:a3:bb:ff:bb:98:a3:ab:c5:59:59:0a

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate assets.davidzwirnerbooks.com

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for assets.davidzwirnerbooks.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

assets.davidzwirnerbooks.com
ajkwrfsyen.cloudimg.io
assets-qa.davidzwirnerbooks.com
assets-staging.davidzwirner.com
images.davidzwirner.com
assets-qa.davidzwirner.com
images-qa.davidzwirnerbooks.com
images.davidzwirnerbooks.com
assets.davidzwirner.com
images-qa.davidzwirner.com
assets-staging.davidzwirnerbooks.com

Other certificates including the domain name davidzwirnerbooks.com

(limited to 100 certificates)
images.davidzwirnerbooks.com
www.davidzwirnerbooks.com
www.davidzwirnerbooks.com
davidzwirner.com
www.davidzwirnerbooks.com
www.davidzwirnerbooks.com
www.davidzwirnerbooks.com
assets.davidzwirnerbooks.com
www.davidzwirnerbooks.com
www.davidzwirnerbooks.com
assets.davidzwirnerbooks.com
*.davidzwirnerbooks.com
images.davidzwirnerbooks.com
images.davidzwirnerbooks.com
images.davidzwirnerbooks.com
*.davidzwirnerbooks.com

Certificate

The complete raw certificate details for assets.davidzwirnerbooks.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMsySdczpTCjxwtlmOh5
FSatJLppDg4afjLWf5sGJHQvNJUhFa5y8hsJyCBHXjfjs1omsoSIgXJFjkZhKFFE
QC+wmehsldUvrBlY6zvmnh3dQ7gaV3Ovp1VMcLfTygqVsKntsMIb34jfrbNEDRUH
okV9JUcRdh/JsjELPcE+wvcergx6PkHCE2QIqO9x1EOiydMNUO+Z9qwq7FrpiqF+
19AEkB8YyKKFqADKfHR+qporqUQJ4BHBzVr6cWsrdJUY1XJ6dOaaAYlSpdsuKgNm
5eCz3ma/5BNTuY1Ym2eRvLjhmSuoa0KMGzGoJmCN8tu0Uu7WRimzfrYZXlA4Zvax
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2510550912729098959137444929519190417
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'assets.davidzwirnerbooks.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17268609374064042749630534324895425896941957026076033468005276211967068022596099045487058190260739540448641758304060096809441432585668372691374493966476504799896354189649754914223708418446347465334282965485478076908970814094760588707642834296697623658366841173375938081115660576104495239790284745839371748844818487174585569914430933150729712442115385597112344320444901412675717923644515900318317061406168996531979145091405143124741270360791712976690259464463955427955693794172423595664579531600225611672388109228944515412538423888706484657885995938878320961790425004549072795446266196925390032563496334338175798784427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5ca5ffbfb8c05c391ced5942467680d34d687504
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (331 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.davidzwirnerbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajkwrfsyen.cloudimg.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets-qa.davidzwirnerbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets-staging.davidzwirner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.davidzwirner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets-qa.davidzwirner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-qa.davidzwirnerbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.davidzwirnerbooks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.davidzwirner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images-qa.davidzwirner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets-staging.davidzwirnerbooks.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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