imgcdn.oto.com.sg

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 09:ed:2e:13:52:80:86:17:4f:43:62:93:6c:f1:05:f3 was issued on by Amazon.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=imgcdn.oto.com.sg

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:ed:2e:13:52:80:86:17:4f:43:62:93:6c:f1:05:f3
Serial Number (int): 13194560839246999289314210558778607091
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 86:d7:ea:3c:55:39:7e:23:86:32:77:da:4d:40:04:e8:29:2a:d2:f8
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): ca:f8:be:f4:1c:8b:5a:ef:75:92:64:7c:fb:26:cd:4c:5a:7e:33:27
Fingerprint (sha256): b5:97:9c:d5:62:b1:8f:f5:82:7f:87:fc:94:58:91:40:7c:43:74:ec:2b:93:1e:df:5c:5f:be:c6:cc:83:f5:96

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate imgcdn.oto.com.sg

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for imgcdn.oto.com.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

imgcdn.oto.com.sg
*.insurancedekho.com
*.zigwheels.qa
imgcdn.zigwheels.com.bd
imgcdn.zigwheels.co.th
*.zigwheels.ph
*.zigwheels.vn
*.zigwheels.pk
*.zigwheels.us
*.zigwheels.lk
*.gaadicdn.com
*.zigwheels.ae
*.tractorsdekho.com
*.carvaganza.com
imgcdnblog.carmudi.com.ph
imgcdn.zigwheels.com.au
*.carbay.com
*.zigwheels.my

Other certificates including the domain name oto.com.sg

(limited to 100 certificates)
testingmedia.cardekho.com
www.cardekho.com
testingmedia.cardekho.com
imgcdn.zigwheels.com.bd
testingmedia.cardekho.com
testingmedia.cardekho.com
www.cardekho.com
testingmedia.cardekho.com
testingmedia.cardekho.com
www.cardekho.com
testingmedia.cardekho.com
testingmedia.cardekho.com
www.cardekho.com
test1.oto.com.sg
testingmedia.cardekho.com
testingmedia.cardekho.com
oto.com.sg
www.zigwheels.co.th
www.cardekho.com
www.cardekho.com
testingmedia.cardekho.com
test1.oto.com.sg
www.cardekho.com
testingmedia.cardekho.com
www.zigwheels.co.th
testingmedia.cardekho.com
www.zigwheels.co.th
www.cardekho.com
dealer.oto.com.sg
www.cardekho.com
www.cardekho.com
testingmedia.cardekho.com
test1.oto.com.sg
testingmedia.cardekho.com
dealer.oto.com.sg
www.zigwheels.co.th
www.cardekho.com
bacardi.oto.com.sg
testingmedia.cardekho.com
www.zigwheels.co.th
stageapi.carmudi.com.ph
testingmedia.cardekho.com
www.cardekho.com
www.zigwheels.co.th
testingmedia.cardekho.com
testingmedia.cardekho.com
www.cardekho.com
stageapi.carmudi.com.ph
dealer.oto.com.sg
bacardi.oto.com.sg
www.cardekho.com
stageapi.carmudi.com.ph
testingmedia.cardekho.com
www.cardekho.com
www.zigwheels.co.th
www.cardekho.com
testingmedia.cardekho.com
chivas.oto.com.sg
www.zigwheels.co.th
testingmedia.cardekho.com
www.cardekho.com
www.zigwheels.co.th
test1.oto.com.sg
www.zigwheels.co.th
test1.oto.com.sg
stageapi.carmudi.com.ph
test1.oto.com
www.cardekho.com
testingmedia.cardekho.com
testingmedia.cardekho.com
oto.com.sg
dealer.oto.com.sg
www.cardekho.com
www.zigwheels.co.th
testingmedia.cardekho.com
www.cardekho.com
testingmedia.cardekho.com
testingmedia.cardekho.com
stageapi.carmudi.com.ph
testingmedia.cardekho.com
test1.oto.com.sg
testadmin.oto.com
dealer.oto.com.sg
www.cardekho.com
www.cardekho.com
testingmedia.cardekho.com
test1.oto.com.sg
www.cardekho.com
www.cardekho.com
www.zigwheels.co.th
dealer.oto.com.sg
testingmedia.cardekho.com
testingmedia.cardekho.com
testingmedia.cardekho.com
www.zigwheels.co.th
testingmedia.cardekho.com
stageapi.carmudi.com.ph
testingmedia.cardekho.com
www.cardekho.com
test1.oto.com.sg

Certificate

The complete raw certificate details for imgcdn.oto.com.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9gixjED8yuy3FIHaupb
e/CbwBX60fA+z8RhmwmV9TG2+n76gjCSIfgzFqsk1swvb6NLPq6bRJa5j3x50hz5
9yUM85tiJdWCV5rdwuGEmVbPr16PLvH5LccoiP9vIgPkPUgmr/r4oVBvQnz4/EBE
ZnTOIHTb05kMx2iFcpAJNwwzehHVIFIimnhyD/K/q1s5Tt5zuUaINtCda1kPG899
ofJEcnaL1IA+U79y4am3gZyKgzYaxaVOYqCyQIkKDkD1SVn5ssop/W7LiwAqQg5P
U3VeHdR6GJ5KnOOiF33xpTpwBxOhzYFJGOlJ40zYG8E6bIseB/c+Tmr3CAEGlu6q
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13194560839246999289314210558778607091
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'imgcdn.oto.com.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21188377482701337662353034273391126482010972429882006267772736006025690982601420203639980711682546788850668175472804295464426665427256987442097553782799466253489275486183916116386216845627943677745996935342683195485468776160775855824483718080426364979480806675541477132498354925057281339877731899720740089395972020084068435691510903543352338715793336119520560759392807504741034409418574277485191817515217664321131433674753410056195191353981872342306736918635469198745245236538639331819464127167933709679194037538005680902199229083008642482389183431979804905591269090320198248441744713499997324090155908681798091975377
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							86d7ea3c55397e23863277da4d4004e8292ad2f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (343 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imgcdn.oto.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.insurancedekho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zigwheels.qa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imgcdn.zigwheels.com.bd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imgcdn.zigwheels.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zigwheels.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zigwheels.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zigwheels.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zigwheels.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zigwheels.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gaadicdn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zigwheels.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tractorsdekho.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carvaganza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imgcdnblog.carmudi.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imgcdn.zigwheels.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.carbay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.zigwheels.my'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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