cdn1.digitalgrub.com
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 01:3f:b5:bb:42:10:99:d4:e5:51:c8:f1:53:19:d0:a0 was issued on by Amazon.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=cdn1.digitalgrub.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 01:3f:b5:bb:42:10:99:d4:e5:51:c8:f1:53:19:d0:a0Serial Number (int): 1660028650123341043907533505602113696
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: 23:3d:a7:2a:aa:7e:56:69:48:c3:81:e7:a9:1d:28:dd:ee:68:71:8e
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): f6:62:04:df:94:d0:42:cd:b2:5a:e9:fd:47:92:c9:8b:73:78:ad:80
Fingerprint (sha256): 7a:36:86:14:56:3c:1f:c0:03:2c:a3:74:2e:8f:0d:d1:1a:11:7f:fb:e0:f8:78:f6:46:2f:e7:a0:3d:70:75:9f
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate cdn1.digitalgrub.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cdn1.digitalgrub.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cdn1.digitalgrub.com
Other certificates including the domain name digitalgrub.com
(limited to 100 certificates)
beta.paths.io
rewardwebform.com
www.digitalgrub.com
guinchodepaula.app
joinqatch.com
www.digitalgrub.com
digitalgrub.com
patnseumen.digitalgrub.com
ai.eat-sleep-code.com
console.digitalgrub.com
patnseumen.digitalgrub.com
grilledheat.digitalgrub.com
*.digitalgrub.com
joinqatch.com
store.digitalgrub.com
digitalgrub.com
totterdownapothecary.com
console.abitswift.digitalgrub.com
www.humanheritageband.com
myhoroscopesign.laves.me
*.digitalgrub.com
backoffice.local-elves.com
memomandpop.digitalgrub.com
app.chroniclebot.com
console.digitalgrub.com
cdn1.digitalgrub.com
bryansk.fit-n-beauty.com
mycall.mymoons.mx
mailboxout.digitalgrub.com
console.digitalgrub.com
lc-equipments.phuket.psu.ac.th
digitalgrub.com
blog.digitalgrub.com
www.digitalgrub.com
straxlunch.se
www.digitalgrub.com
digitalgrub.com
aptorney.com
memomandpop.digitalgrub.com
patnseumen.digitalgrub.com
sialamaluca.turnosweb.app
patnseumen.digitalgrub.com
digitalgrub.com
console.abitswift.digitalgrub.com
link.intrior.com
www.digitalgrub.com
guinchodepaula.app
my.movingmindz.io
donetalking.digitalgrub.com
memomandpop.digitalgrub.com
digitalgrub.com
grilledheat.digitalgrub.com
my.movingmindz.io
rewardwebform.com
www.digitalgrub.com
guinchodepaula.app
joinqatch.com
www.digitalgrub.com
digitalgrub.com
patnseumen.digitalgrub.com
ai.eat-sleep-code.com
console.digitalgrub.com
patnseumen.digitalgrub.com
grilledheat.digitalgrub.com
*.digitalgrub.com
joinqatch.com
store.digitalgrub.com
digitalgrub.com
totterdownapothecary.com
console.abitswift.digitalgrub.com
www.humanheritageband.com
myhoroscopesign.laves.me
*.digitalgrub.com
backoffice.local-elves.com
memomandpop.digitalgrub.com
app.chroniclebot.com
console.digitalgrub.com
cdn1.digitalgrub.com
bryansk.fit-n-beauty.com
mycall.mymoons.mx
mailboxout.digitalgrub.com
console.digitalgrub.com
lc-equipments.phuket.psu.ac.th
digitalgrub.com
blog.digitalgrub.com
www.digitalgrub.com
straxlunch.se
www.digitalgrub.com
digitalgrub.com
aptorney.com
memomandpop.digitalgrub.com
patnseumen.digitalgrub.com
sialamaluca.turnosweb.app
patnseumen.digitalgrub.com
digitalgrub.com
console.abitswift.digitalgrub.com
link.intrior.com
www.digitalgrub.com
guinchodepaula.app
my.movingmindz.io
donetalking.digitalgrub.com
memomandpop.digitalgrub.com
digitalgrub.com
grilledheat.digitalgrub.com
my.movingmindz.io
Certificate
The complete raw certificate details for cdn1.digitalgrub.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEZzCCA0+gAwIBAgIQAT+1u0IQmdTlUcjxUxnQoDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTIzMTIxNjAwMDAwMFoXDTI1MDExMjIzNTk1OVowHzEd MBsGA1UEAxMUY2RuMS5kaWdpdGFsZ3J1Yi5jb20wggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC9G2EQ4SbXpn54yvmcGa3ccXiW1hem6hs2mYpOjXuCGf0y IQv10+SZlzVLxTt8Bb4oqZ/nV3zLmKqGccKbvuJXbeByHZlJQJ9tjCSaaLJhkw4T HuDfC7UT3zTEMpihlrdsls6e5yVEV4AWNDRSm164IPSiWdVc+QLZUQF0UqcYDIl+ cp302pi22wvMGSzZS3hFjo5iX1SB1a5Md6AoULMpd0nAYT4vT09oFVdDjQhEDgPZ vDeGNvykv34huV13C8A0xeVXTSNzmeGB/nhWyOBOEUrCL08zUdbB54B2rEqHo+W+ DpqQmORrP3vX6jH49mvytRK4wDO8lNTpZr8FPbPlAgMBAAGjggGAMIIBfDAfBgNV HSMEGDAWgBRV2Rhf0hzMAeFYtL6r2VVCAdcuAjAdBgNVHQ4EFgQUIz2nKqp+VmlI w4HnqR0o3e5ocY4wHwYDVR0RBBgwFoIUY2RuMS5kaWdpdGFsZ3J1Yi5jb20wEwYD VR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG AQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIy bTAzLmFtYXpvbnRydXN0LmNvbS9yMm0wMy5jcmwwdQYIKwYBBQUHAQEEaTBnMC0G CCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMy5hbWF6b250cnVzdC5jb20wNgYI KwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDMuYW1hem9udHJ1c3QuY29tL3IybTAz LmNlcjAMBgNVHRMBAf8EAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3 DQEBCwUAA4IBAQCKqsXfz6WKaBBtIkuH2KykfNk8FC59GwbtFWYEQ29Mz9nhlQt4 IRimKX7Or894vUwaw/giSLwFya6C60yRRMr3/KTGkfpKf+oCJWSPJqnKX7GSx9vi nR1nMgTkeZz7LocMZT2+utdkfuNNEPZ1gVlnr6EdkDPhuTR2uLlzKs4Ao6SE+hQ+ 4wbgKmiUe6Ko0fEvCnZN4+D42NR7n9I5jAGRCH4ef3vQnoIDS36GZCkb9/kyI4SM Mb6zUjLfTtypSuRKAPpDHIBbJUPSPVwj7HA+ctrieB1wTSdo7ROhnKpE+BeElv9p 3lmgkU0fFtWde0RWH4CFTN1XXgenetFQbxNr -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRthEOEm16Z+eMr5nBmt 3HF4ltYXpuobNpmKTo17ghn9MiEL9dPkmZc1S8U7fAW+KKmf51d8y5iqhnHCm77i V23gch2ZSUCfbYwkmmiyYZMOEx7g3wu1E980xDKYoZa3bJbOnuclRFeAFjQ0Upte uCD0olnVXPkC2VEBdFKnGAyJfnKd9NqYttsLzBks2Ut4RY6OYl9UgdWuTHegKFCz KXdJwGE+L09PaBVXQ40IRA4D2bw3hjb8pL9+IblddwvANMXlV00jc5nhgf54Vsjg ThFKwi9PM1HWweeAdqxKh6Plvg6akJjkaz971+ox+PZr8rUSuMAzvJTU6Wa/BT2z 5QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1660028650123341043907533505602113696 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-12 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdn1.digitalgrub.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23872540807455597424550552706784768018794177136506883436474955918341659405270125849409900326366250119998080102883273499314176928590573935995204355496771747790544658206726919205402604436783420413090690794916296095049707391550556480533059133059423336113716016425784056477482692829133412008432174042517374521350662148943280868389880455522170292097919837118608187417608146192631913834251790906379977612455282770416019406886906741612915224269661172109941954047650433636144008542687293472693625340468976270562920387630743495959720661232131969055017169542381032976981226195148248626675268332531050620855189220142843388867557 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 233da72aaa7e566948c381e7a91d28ddee68718e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn1.digitalgrub.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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