static-tw.zacdn.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0a:c2:a1:20:04:a2:b9:1f:55:db:5e:9e:83:dc:5a:3f was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=static-tw.zacdn.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:c2:a1:20:04:a2:b9:1f:55:db:5e:9e:83:dc:5a:3f
Serial Number (int): 14302853553086963902268035310131370559
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c3:22:89:93:ed:7d:62:3d:08:ba:27:2b:3a:6a:d6:6d:86:f8:d1:17
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 65:fc:34:a2:99:c5:57:5c:06:55:c6:e0:d5:7e:f5:bd:e8:a2:5d:ff
Fingerprint (sha256): 91:c7:65:9c:ba:e8:75:1e:02:91:cb:cc:a7:5d:67:80:9e:f3:11:2c:c9:98:fc:a5:ba:c9:ba:11:8f:1a:a7:4d

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate static-tw.zacdn.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for static-tw.zacdn.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

static-tw.zacdn.com

Other certificates including the domain name zacdn.com

(limited to 100 certificates)
*.zacdn.com
static-ph.zacdn.com
static-checkout-sg.zacdn.com
*.zacdn.com
dynamic.zacdn.com
static-my.zacdn.com
static-checkout-sg.zacdn.com
static-id.zacdn.com
static-ph.zacdn.com
*.zacdn.com
static-checkout-ph.zacdn.com
rum.zacdn.com
static-checkout-hk.zacdn.com
static-hk.zacdn.com
static-id.zacdn.com
dynamic.zacdn.com
dynamic.zacdn.com
static-hk.zacdn.com
dynamic.zacdn.com
static-sg.zacdn.com
static-checkout-tw.zacdn.com
*.zacdn.com
*.zacdn.com
static-tw.zacdn.com
static-checkout-hk.zacdn.com
static-checkout-id.zacdn.com
dynamic.zacdn.com
static-checkout-id.zacdn.com
static-my.zacdn.com
dynamic.zacdn.com
static-checkout-id.zacdn.com
*.zacdn.com
static-checkout-my.zacdn.com
*.zacdn.com
rum.zacdn.com
*.zacdn.com
static-checkout-my.zacdn.com
static-hk.zacdn.com
static-checkout-ph.zacdn.com
static-checkout-tw.zacdn.com
*.zacdn.com
static-id.zacdn.com

Certificate

The complete raw certificate details for static-tw.zacdn.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiejbFj5r4EpJiXXX1yYR
ZGv8hAJkRJS9cABQeBza1IS7L193Jhh6HjeqW8rJ6qwo+AorDIsT2xwXeSWehsJi
Exw+0mRH1REGxBmJ30gPd9PkGt726CkVT1IaalEBdr2fJ6VXgf5OTbxwgUbzKHd+
200fLak66JcLydJ2vLAtoI481HB8/W5JFF5W4oCcdqsl2yxIr+IHpYhz4YwfyoYu
C26/i6OsF0klzu6+UKVx3eYpY2UoZdrYCE68+feyw6cynASvGfsDpfsFSbloWmJ0
hLx51NHk12rYXHt26zFlDCrqNyq/QdBskqHLQ8ryZ7J/TgnP9p//sQJUoyGGQFFk
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14302853553086963902268035310131370559
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'static-tw.zacdn.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17409473258959877181856664794406829372440908110349369512138443793946474205357480605883137995594221352348526525581301314780594743730802741141853948014582560176361635342587677298403370244046331217717409117050394315722803330989628317098476197940278954500587977036901971569982484043733274754472231996729592860595080247310655341194099143639899793760361392769045614438687050295870471885280346559285865988064884752250802458568573372909746842160324010540296472656658080737215955924993887216812816251464318518185673300398877338831103906716915843054111327014191528161685396614007829698690596034003066786963412789546593337566417
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c3228993ed7d623d08ba272b3a6ad66d86f8d117
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-tw.zacdn.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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