vaiskitchen.co.uk

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0f:e6:ae:5b:07:59:d1:6b:05:4a:97:b7:90:6e:ca:9e was issued on by Amazon.

With 34 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=vaiskitchen.co.uk

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:e6:ae:5b:07:59:d1:6b:05:4a:97:b7:90:6e:ca:9e
Serial Number (int): 21136184565545551052300544947667258014
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: dd:ce:8b:51:03:a4:96:6c:c1:ab:24:22:3e:6e:57:da:3c:7b:25:69
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 50:19:3a:dc:b0:58:f2:fb:ee:0a:1f:f5:85:b8:78:95:25:ec:12:6c
Fingerprint (sha256): b1:72:f3:6f:a9:8c:0c:65:fa:d2:8b:1d:6c:4c:6c:53:8d:88:80:b1:e7:33:31:31:17:9c:15:08:a4:0e:a2:e5

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate vaiskitchen.co.uk

34

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vaiskitchen.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vaiskitchen.co.uk
www.dutchfishmen.co.uk
velreading.co.uk
gringossalisbury.co.uk
www.vaiskitchen.co.uk
www.ramenlondon.co.uk
goaindiantakeaway.co.uk
www.sushisalsaonline.co.uk
easternbaltionline.co.uk
dutchfishmen.co.uk
chennaidosanewmalden.co.uk
www.easternbaltionline.co.uk
seakingfishbar.uk
www.velbrighton.co.uk
www.tasteofparadisebiddulph.com
tasteofparadisebiddulph.com
www.codalmighty.uk
www.seakingfishbar.uk
chinesecottage.co.uk
sushisalsaonline.co.uk
madrasaccent.uk
roseindianlondon.uk
www.chinesecottage.co.uk
www.chennaidosanewmalden.co.uk
codalmighty.uk
www.gringossalisbury.co.uk
dutchfishmen2.co.uk
www.madrasaccent.uk
www.velreading.co.uk
ramenlondon.co.uk
www.dutchfishmen2.co.uk
www.goaindiantakeaway.co.uk
velbrighton.co.uk
www.roseindianlondon.uk

Other certificates including the domain name vaiskitchen.co.uk

(limited to 100 certificates)
vaigaifoodsjersey.co.uk
vaiskitchen.co.uk
vaiskitchen.co.uk

Certificate

The complete raw certificate details for vaiskitchen.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXjmazE1j4LNn9WE+2rD
/JWVgSpJ2UO9lY8Qilv8rD/PRzHUjxo6EwyUkdjQIOan2G7ouYlhufCTOXa7EYL2
rITcJwbLj73o5jnNpFxNFaz32u7qpL3MFW2fVdGYkigaArtRlk6vNHkEcrv/5Mrv
j4PkdQGqCl5jd5RE/iGrDl0fU2Hb+rkF8FrN2ItZOwSa0DHPVat/uiJLy6yGjJp6
Wca+Kq+JixrfwXHJDGYMrQ6JB1W9nFv41JvM2E42Ko9O60Ii3p9S5EeKvQsmJF8H
NIObzvU4agR1ZxUJZjd48QqIWwmne8kBDMAHodGAuTvmNVVZK2IPlFldFnntTlWd
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21136184565545551052300544947667258014
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vaiskitchen.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25938470566094309336840144510327278265288317987967060827339865613165188335491848952176434642939522147638776673615282690890013102774985762504273642535942746879483366937311381472249195023433521064382466648521059857875844134091015189490514261001917045113673301825577262885447030944339801002877021741416754935737454240228763923219235146210416795827177125076688597165658519976661827534824614139238446181680012080805914390633383111777300485046474847305318513740749357708547841646325320742151537831452872336013458490329056373676310989695248518383922467298256163046215467071647865530039442316496559948033478988889411842055477
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ddce8b5103a4966cc1ab24223e6e57da3c7b2569
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (806 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vaiskitchen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dutchfishmen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velreading.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gringossalisbury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vaiskitchen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ramenlondon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goaindiantakeaway.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sushisalsaonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easternbaltionline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dutchfishmen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chennaidosanewmalden.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easternbaltionline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seakingfishbar.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.velbrighton.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasteofparadisebiddulph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasteofparadisebiddulph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.codalmighty.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seakingfishbar.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chinesecottage.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sushisalsaonline.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madrasaccent.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roseindianlondon.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chinesecottage.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chennaidosanewmalden.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codalmighty.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gringossalisbury.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dutchfishmen2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madrasaccent.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.velreading.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ramenlondon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dutchfishmen2.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goaindiantakeaway.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'velbrighton.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roseindianlondon.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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