ubuy.com.kw

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 04:df:7d:7d:90:8f:58:c0:26:b4:3f:6f:a8:b9:9a:cd was issued on by Amazon.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ubuy.com.kw

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:df:7d:7d:90:8f:58:c0:26:b4:3f:6f:a8:b9:9a:cd
Serial Number (int): 6477339432052837713915581889360009933
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ca:6b:55:82:eb:7c:5f:6c:42:7b:17:44:e1:08:cf:9f:f9:66:5a:83
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 81:00:b8:0c:53:58:8e:89:48:31:fe:f2:15:32:38:2e:37:71:9c:47
Fingerprint (sha256): aa:ea:cf:55:11:db:3c:ed:da:48:96:4e:44:07:c8:de:79:a7:25:85:24:fb:c9:3d:36:35:d7:71:60:b8:77:47

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate ubuy.com.kw

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ubuy.com.kw

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ubuy.com.kw
www.a.ubuy.com.kw
*.ubuy.com
ubuy.com
www.world.ubuy.com
*.ubuy.com.kw
world.ubuy.com
www.ubuy.com
a.ubuy.com.kw

Other certificates including the domain name ubuy.com.kw

(limited to 100 certificates)
ubuy.com.kw
*.ubuy.com
ubuy.vn
ubuylocal.ubuy.com.kw
ubuy.co.jp
*.ubuy.com
ubuy.co.jp
ubuy.com
*.ubuy.com.kw
*.ubuy.com.kw
ubuy.co.jp
ubuy.co.jp
pay.ubuy.com.kw
u-buy.com.au
*.ubuy.com.ph
*.ubuy.om
ubuy.vn
ubuy.co.jp
*.ubuy.om
ubuy.co.jp
images-cdn.a.ubuy.com.kw
www.u-buy.com.au
ubuy.com.kw
ubuy.com.kw
www.ubuy.com.kw
*.ubuy.com.ph
*.ubuy.com.kw
ubuy.com.kw
a.ubuy.com.kw
images-cdn.a.ubuy.com.kw
www.ubuy.com.kw
ubuy.com.kw
*.ubuy.com.kw
*.ubuy.com.kw
images-cdn.a.ubuy.com.kw
ubuy.com.kw
u-buy.com.au
u-buy.com.au
*.ubuy.com.kw
u-buy.com.au
ubuy.vn
images-cdn.a.ubuy.com.kw
ubuy.com.kw
ubuy.ca
www.ubuy.com.kw
ubuy.com.kw
*.ubuy.om
*.ubuy.com
ubuy.vn
ubuy.ca
ubuy.ca
www.ubuy.com.kw
*.ubuy.com.kw
www.ubuy.com

Certificate

The complete raw certificate details for ubuy.com.kw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpszKkRrFfSNlzhGgqrg
iivG4EV9It4JVl11YVT1PmLGsBdb/q4NHW2GdEjfedEZYv/gI3uWMjTXZevwWDOc
oO3hzq+ZIW9JXrBvmgB3EF3NIsJT7uG+yziGLlRRS+UeQ813sBxuNqF5qAEsUlNf
7molJZoSzn59oog7P5AUerLgvRVXEJNEypmoK9L2SGX7mkBT6rMaYikH4vJ67XE9
Al578JS05gRbb/f3iDdc1BFV83wxWj/u69N4X6GKdl9M7J61aEpB5jvFY9x463me
n44lfWR/cv2XTHI5/+XaSBFBK/D8A/Wv0SGmLKqw9/9nxkVvCvq4rw5T5gHU0Bnu
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6477339432052837713915581889360009933
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ubuy.com.kw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24566763068587624733436238762135043425333636919954668486413830367608515910413506834581333666564810068161919124507589279704325324518989976198639800947578256946914428905438115755126948040295463870924751403929290920462017454338279100789615594969222109797199824459186693063011608273988967599683874144158529605848632087858982724462451838761223447610796446206802338302652194956605062700995499736318886790649104674491766366328505217826823519275763173569710210084619504880909579332733094889823947749211801335280616571385109475809333800365569444927407803505235691777631987149351724606050716825699035831706250587890636513996507
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca6b5582eb7c5f6c427b1744e108cf9ff9665a83
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubuy.com.kw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.a.ubuy.com.kw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ubuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.world.ubuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ubuy.com.kw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'world.ubuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ubuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.ubuy.com.kw'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							01680077004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018cc7ac2b7a0000040300483046022100bb5cef5c2333418c135f9d2833f45d268f1f2df9cfc29c3248b20a19edab7560022100b61768a88ea500a5a4508f1df87232fa3363e0800d8af042d3701562e26b75310075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000018cc7ac2bcc000004030046304402206c4e6ffc34faa84699eba9b3d344555b0e73b2a86181391611480ac932dbe9380220761997bdd5a18c96ac6d2143a1200f34d75d728be30317027d9ba0f24f45d4c00076007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018cc7ac2b5500000403004730450220477ea7f8504d80768e66304c2a75aea897bcfa3a7332d2d6758e7fc0badc502f022100824e2d233f1c0d60cf9432718767e8ac69499e2e2757d88ffb2c76036f27bda7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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