*.logitech.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 04:eb:ad:ea:3a:d6:ce:67:52:9e:8d:8f:c4:e0:c5:f3 was issued on by Amazon.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.logitech.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:eb:ad:ea:3a:d6:ce:67:52:9e:8d:8f:c4:e0:c5:f3
Serial Number (int): 6540629159356623469657241416720500211
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 69:30:63:aa:9a:16:aa:33:8c:cf:56:90:3e:20:29:2f:75:37:1d:a8
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): de:46:29:be:a9:8a:1f:ed:22:3b:84:7d:c0:53:64:dd:c1:8b:50:15
Fingerprint (sha256): 90:d3:66:cd:e0:e4:1a:ce:84:91:e2:c7:49:9b:dd:ba:9f:53:9e:56:07:58:59:7a:fa:44:c2:2c:ab:dd:4f:78

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.logitech.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.logitech.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.logitech.com
*.logitechg.com.cn
*.logi.com
*.logicool.co.jp
*.worldsfastestgamer.net
*.logitech.fr
*.logitech.com.cn
*.logitechg.fr
*.logicoolg.com
*.logitechg.com

Other certificates including the domain name logitech.com

(limited to 100 certificates)
statuspage.io
design.logitech.com
partners.logitech.com
cart.logitech.com
*.ops.logitech.com
statuspage.io
exchange.logitech.com
brandassets.logitech.com
dc.jtech.cc
secure02.lithium.com
originaem-gaming.logitech.com
shop.logitech.com
reports.pws.logitech.com
prod.46.slot.cdn.salesforce-communities.com
*.logitech.com
dev3.vc.logitech.com
lat.logitech.com
supplier.logitech.com
logilife.logitech.com
*.it.logitech.com
buy.logitech.com
onlinestatus.bambora.com
design.logitech.com
postrack.logitech.com
brandassets.logitech.com
prod.46.slot.cdn.salesforce-communities.com
developers.logitech.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
logitech.com
statuspage.io
*.logitech.com
logiappstore.logitech.com
webapps.logitech.com
*.logitech.com
requirements.logitech.com
prod.46.slot.cdn.salesforce-communities.com
blog.logitech.com
secure02.lithium.com
*.gerrit.logitech.com
twwarranty.logitech.com
opensearch-logs.logitech.com
plantuml.devops.logitech.io
partnernews.logitech.com
testreports.vc.logitech.com
logilife.logitech.com
segtglobalsummit.logitech.com
forums.logitech.com
statuspage.io
logitech.com
cart.logitech.com
logitech.com
statuspage.io
sourcegraph.logitech.com
spaces-staging.logitech.com
statuspage.io
*.logitech.com
postrack.logitech.com
*.logitech.com
opensource.logitech.com
buy.logitech.com
creative.logitech.com
statuspage.io
help.logitech.com
dev.vc.logitech.com
originaem-gaming.logitech.com
twepp.logitech.com
ci.vctools.logitech.com
*.logitech.com
brandassets.logitech.com
secure02.lithium.com
logilife.logitech.com
vc.logitech.com
buy.logitech.com
secure04.stage.lithium.com
login.logitech.com
dc.jtech.cc
statuspage.io
viewer.logitech.com
partners.logitech.com
dev2.vc.logitech.com
buy-ue.logitech.com
secure02.lithium.com
teamcity.logitech.com
brandcenter.logitech.com
twepp.logitech.com
statuspage.io
statuspage.io
vip.logitech.com
postrack.logitech.com
statuspage.io
partners.logitech.com
iot.eu-west-3.vc.logitech.com
statuspage.io
logiappstore.logitech.com
opensource.logitech.com
dev.vc.logitech.com
logilife.logitech.com

Certificate

The complete raw certificate details for *.logitech.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4DjYfr8+nFHALmR2G+Ho
Jm0vMLZqIzC+nw/cDdJrmwlV0E40NeVer9TJBg+p3oEF8fByUJ+r5JzpFbuSZbPF
Kd4wiwmE/mL3ma1gb6JMWWN1uvbDyomleOpsqutvuutQcKAwlbcDSwDku8FEdfXL
nr5RcSKOBTV3ppGGxFOAPI4eYuOhDU+zHQIwvUSj4bvQqKyv03WNHWa4VQZ+Rj3r
iYlC37YtL+hjKCShfg/lgDmAX5ygwdmJdGmW1+GJv3Q1oYM2fKrkrc+nQ/w/XL2m
6FFHUqUhjBrZOOpru+RX+qEmrPIfWpeDK24K8RDMv07kbhQkOVglzzTRgpYterEM
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6540629159356623469657241416720500211
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.logitech.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28305411963934690251426753226021465004467711261655834004324884089989792844011225520417027528214522439169500854694065807926754459673600412674472793356176860568630193278961208696099095955798347410771720268492471555587329093129612543010319767100423926418887693583997539060282403464757218617669872230837827389949153294404661256591560501242855085791855271534949005670704944093034486007803514165954593800608827651123749442379118401680487049636853430533993282026032501088561190839826534863573666058193363142324436389311185185615219372775038860938129366991793576120431076637491580769435514676705820163387284091374060618976303
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							693063aa9a16aa338ccf56903e20292f75371da8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (179 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logitech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logitechg.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logicool.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worldsfastestgamer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logitech.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logitech.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logitechg.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logicoolg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logitechg.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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