stores.footlocker.de

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0e:1b:a2:56:ec:28:02:3e:32:2b:ed:fb:16:43:f8:d6 was issued on by Amazon.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=stores.footlocker.de

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:1b:a2:56:ec:28:02:3e:32:2b:ed:fb:16:43:f8:d6
Serial Number (int): 18752676593233860306633699228182116566
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a9:18:b5:03:72:57:29:1c:f9:cb:04:12:a8:89:6e:58:78:44:cf:c7
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): f4:d7:bb:3c:c4:e3:78:ac:02:e9:9d:2d:35:bc:8b:e6:90:8e:ca:24
Fingerprint (sha256): 7f:13:9f:ef:f4:f2:2e:0a:b8:61:a4:58:8c:2f:21:09:28:b3:a9:80:22:07:7c:86:fa:3c:6d:a3:4b:1a:e1:4e

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate stores.footlocker.de

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stores.footlocker.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stores.footlocker.de
stores.footlocker.lu
stores.footlocker.it
stores.footlocker.dk
stores.footlocker.no
stores.footlocker.be
stores.footlocker.se
stores.footlocker.fr
stores.footlocker.nl
stores.footlocker.es

Other certificates including the domain name footlocker.de

(limited to 100 certificates)
staging.footlocker.com
www.footlocker.eu
ja-stores.iqos.com.yext-cdn.com
www.footlocker.com
www.footlocker.eu
www.footlocker.com
answers-autozone.pagescdn.com
www.footlocker.com
sanl.footlocker.de
www.footlocker.eu
trk.bc.footlocker.ca
staging.footlocker.com
footlocker.de
footlocker.de
www.footlocker.com
stores.footlocker.de
stores.footlocker.de
footlocker.de
*.footlocker.de
answers-autozone.pagescdn.com
footlocker.de
www.footlocker.com
staging.footlocker.com
www.footlocker.com
www.footlocker.eu
staging.footlocker.com
footlocker.de
www.footlocker.eu
www.footlocker.com
locations.yext.com
www.footlocker.eu
www.footlocker.com
staging.footlocker.com
footlocker.de
stores.footlocker.de
storefinder.carpetright.co.uk.yext-cdn.com
staging.footlocker.com
www.footlocker.eu
target.footlocker.nl
locations.keyrealtyservices.com
target.footlocker.nl
footlocker.de
www.footlocker.eu
www.footlocker.eu
staging.footlocker.com
staging.footlocker.com
staging.footlocker.com
location.eastdevoncrematorium.co.uk
www.footlocker.eu
stores.footlocker.de
www.footlocker.com
www.footlocker.eu
www.footlocker.com
footlocker.de
location.eastdevoncrematorium.co.uk
www.footlocker.com
www.footlocker.eu
local.pharmacy.luckylowprices.com
www.stage.api.footlocker.com
staging.footlocker.com
footlocker.de
footlocker.de
www.footlocker.com
www.footlocker.eu
www.footlocker.eu
www.footlocker.com
www.footlocker.com
*.footlocker.de
stores.footlocker.de
stores.footlocker.de
*.footlocker.de
target.footlocker.nl
www.footlocker.com
events.claytonsupercenter.com
www.footlocker.eu
staging.footlocker.com
www.footlocker.com
trk.bc.footlocker.ca
www.footlocker.eu
events.claytonsupercenter.com
staging.footlocker.com
retailers.jaguar.co
www.footlocker.com
ja-stores.iqos.com.yext-cdn.com
www.footlocker.eu
www.footlocker.com
retailers.jaguar.co
www.footlocker.eu
www.footlocker.eu
www.footlocker.com
stores.footlocker.de
local.pharmacy.luckylowprices.com
trk.bc.footlocker.ca
locationsqa.adsinterlock.com.yext-cdn.com
storefinder.carpetright.co.uk.yext-cdn.com
www.footlocker.eu
footlocker.de
www.footlocker.com
www.footlocker.com
locations.keyrealtyservices.com

Certificate

The complete raw certificate details for stores.footlocker.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOS35vZ0EXjahPQYtb3w
E+hxJTFeWhnp6Yitf4uFOyRQa+q6vIPb/icvmWfLqKmWjYwLkc7/BDq4Pxl1IdHb
CU+kcZ+AnesFLWvMmEtUm/1FAwzHhNkDsr0wWVVMlGMRtnLoZIOJjg9mnzJltIAy
wnMqOyYfIYZdXFU15guGuJRj5F+br7KJt13fUaNhLeM64+2pZj7TQhHMLjqxg65x
Gtq9PHl+rhK7IM58nI0mmhhzOumefxd4/V/S0sXDuvhB9zwXkwzDIChVn1WSa1MR
yxx221ZTIGj0IcbhtV9/X2ZB+b6cnUnbC3pcXmsld7WTrJum0IzPqojBUAuKLbcL
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18752676593233860306633699228182116566
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stores.footlocker.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19301007585645721698420212749642420973960206031417572456241355486595132521834523018593004077400557975546916528541640792574279220440808018052106593853485586254827928470901827691753025404856511110414616953940101706535234310389778151492199996833064173006156291802042594678184705585077705950307853204926805771483050516641276651274062945232185416072343031648456394309110133277226379169669220084167679030882753115936888185176016074287002858983292120866217765650000849795684209886926360719557135797829463152937561848399066686544473446686951116011486596134788615108656160111379719407131596013465388536051379133221832639318817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a918b5037257291cf9cb0412a8896e587844cfc7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (223 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.footlocker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.footlocker.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.footlocker.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.footlocker.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.footlocker.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.footlocker.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.footlocker.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.footlocker.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.footlocker.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stores.footlocker.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004bb2c0814f38ffad8e4e272c449fb07159cf79e31e677e7393cb2db21804f84244e0752fea36d0530dd292067542debd7f5c39c5d74c76bfc65ddebdc4ca2537620cf55472b02ff9693a49f91feb21a1fc1fc52858a36cd57ff51078456e4bb2fc84d169737a65a0588443881ee2f9d5d659cf24d8509002eaa92b6cc7a99cc86138e763563c055995cfd200a423b5e05d39eb9456eac285dbbb87c6d7256eaaef6dd9fa521e878fa012073a9470d00da7a9e9b6e11da6cb0dc981cb58adb1ec435639a8b07ecf34dbb10b0fcb2b685b42fbfd4c354ada83b948d9e3f64eec24706ad5ba3e88c35772505d2bd111c8d966daf0d8ab23760d0bb57c3051a2478f