imgcdn.zigwheels.com.bd

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 02:53:e2:a4:9e:69:9d:02:85:2a:bc:07:ee:03:81:e0 was issued on by Amazon.

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=imgcdn.zigwheels.com.bd

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:53:e2:a4:9e:69:9d:02:85:2a:bc:07:ee:03:81:e0
Serial Number (int): 3094013497843610276701867037771923936
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 45:88:aa:9c:59:0f:da:09:36:88:37:56:82:c2:91:33:92:f8:0e:b4
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): e5:d8:0c:c3:d4:1e:12:e9:d1:d8:52:11:11:dc:5a:25:ac:57:dc:99
Fingerprint (sha256): 9d:9b:94:e8:7b:8a:bd:e9:4c:67:41:23:d7:f6:8c:01:27:0c:f4:c0:77:3f:fd:73:6b:ba:e9:ff:19:31:eb:95

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate imgcdn.zigwheels.com.bd

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imgcdn.zigwheels.com.bd

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

imgcdn.zigwheels.com.bd
imgcdn.oto.com.sg
*.zigwheels.qa
*.insurancedekho.com
imgcdn.zigwheels.co.th
*.zigwheels.ph
*.zigwheels.vn
*.zigwheels.pk
*.zigwheels.us
*.zigwheels.lk
*.gaadicdn.com
*.zigwheels.ae
*.carvaganza.com
imgcdnblog.carmudi.com.ph
imgcdn.zigwheels.com.au
*.carbay.com
*.zigwheels.my

Other certificates including the domain name zigwheels.com.bd

(limited to 100 certificates)
testingmedia.cardekho.com
zigwheels.pk
imgcdn.zigwheels.com.bd
staging.zigwheels.com.bd
staging.zigwheels.com.bd
testingmedia.cardekho.com
testingmedia.cardekho.com
testingmedia.cardekho.com
zigwheels.pk
*.zigwheels.com.bd
testingmedia.cardekho.com
staging.zigwheels.com.bd
www.zigwheels.co.th
zigwheels.com.bd
zigwheels.pk
www.zigwheels.co.th
testingmedia.cardekho.com
staging.zigwheels.com.bd
zigwheels.com.bd
zigwheels.pk
zigwheels.pk
testingmedia.cardekho.com
testingmedia.cardekho.com
testingmedia.cardekho.com
testingmedia.cardekho.com
zigwheels.pk
testingmedia.cardekho.com
zigwheels.pk
zigwheels.pk
zigwheels.pk
testingmedia.cardekho.com
testingmedia.cardekho.com
zigwheels.pk
testingmedia.cardekho.com
zigwheels.com.bd
zigwheels.pk
imgcdn.zigwheels.com.bd
testingmedia.cardekho.com
www.zigwheels.co.th
testingmedia.cardekho.com
imgcdn.oto.com.sg
zigwheels.pk
zigwheels.pk
zigwheels.pk
testingmedia.cardekho.com
testingmedia.cardekho.com
staging.zigwheels.com.bd
testingmedia.cardekho.com
testingmedia.cardekho.com
testingmedia.cardekho.com
testingmedia.cardekho.com
staging.zigwheels.com.bd
zigwheels.com.bd

Certificate

The complete raw certificate details for imgcdn.zigwheels.com.bd in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyXNmV1Mm5pQcOjPgGfG1
eNDCa9L6q4ka7mb+7fCqIDjWbE9FLNyIYa3owNY6XQ3bQNVQesR7nygWvBdUwJfr
N5eGEW6AJbhb7woja+MRYcWiV2XphacWdJe8E85oPKb/lqnmPyVyJYI4D9vNyebm
B3ipLddRPaNoBR+jWydgOV2bjdhpc/OC8uqmHYqET8O+csUmvf1rD12q/WrvUadq
BzccmnYRYfodVVd7YhpIrnp/TTjAbuUZLgT6cRBWby7VZ9U7iwbP2BOBLNOiOhOG
2r4BX+bS5Uvoc6egdO8Uem/ZkvELOnAkweoWw/W4Txo39Evh1MXH8Jel9lZHW5He
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3094013497843610276701867037771923936
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'imgcdn.zigwheels.com.bd'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25430805045656683001014838633592950173253489027480268735079476770231080149565476108956257706236138496091942181713450638865512430239454334578535514653389419259564681557515568457154790049229598969692190144151395589939720455031805419430149102339687190129360874059618393938146372848423781853011780700180751867542701612991186884747364041422594707828745686381255669915213694816723066142222023652030517340309542143231681424369884432404963874421760116809336994551398131996828216438428059320335701649804429521644587944934296944560921482513988219708404006042476569205183221718195667176583406146634586486062794090351152782761543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4588aa9c590fda093688375682c2913392f80eb4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (322 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imgcdn.zigwheels.com.bd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imgcdn.oto.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zigwheels.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insurancedekho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imgcdn.zigwheels.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zigwheels.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zigwheels.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zigwheels.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zigwheels.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zigwheels.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaadicdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zigwheels.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carvaganza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imgcdnblog.carmudi.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imgcdn.zigwheels.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carbay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zigwheels.my'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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