test-blog2.ubuy.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 04:53:e7:a4:e2:70:91:a9:79:0c:a3:92:0a:fb:e8:b2 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=test-blog2.ubuy.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:53:e7:a4:e2:70:91:a9:79:0c:a3:92:0a:fb:e8:b2
Serial Number (int): 5752570922514849840785671573494032562
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 5f:00:a0:e5:78:1d:5d:d5:11:39:88:fd:e2:64:c3:98:a5:6e:d7:46
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 98:f6:9a:93:5e:ad:03:6b:7d:83:06:56:29:aa:44:c5:38:3c:8d:5d
Fingerprint (sha256): db:49:46:b2:7f:93:1f:70:ff:f9:ec:5e:fa:34:8c:d7:f7:46:23:6b:e0:31:49:63:d7:44:16:53:86:62:e9:37

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate test-blog2.ubuy.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test-blog2.ubuy.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

test-blog2.ubuy.com
*.ubuy.com
ubuy.com
www.test-blog2.ubuy.com

Other certificates including the domain name ubuy.com

(limited to 100 certificates)
ubuy.com.kw
*.ubuy.com
ubuy.co.jp
track.ubuy.com
ubuy.com
track.ubuy.com
*.ubuy.com
ubuy.gl
ubuyanalytics.ubuy.com
life.ubuy.com
ubuy.com
*.ubuy.com.kw
ubuyanalytics.ubuy.com
*.ubuy.com.kw
Ubuy Technologies Private Limited
uglow.ubuy.com
*.ubuy.com.ph
*.ubuy.om
www.bugreporting.ubuy.com
*.ubuy.om
www.blog.ubuy.com
ubuy.co.jp
uglow.ubuy.com
ubuy.com
*.ubuy.com.ph
*.ubuy.com.kw
ubuy.com
algeria.ubuy.com
blog.ubuy.com
Ubuy Technologies Private Limited
algeria.ubuy.com
*.ubuy.com
ubuyanalytics.ubuy.com
www.blog.ubuy.com
*.ubuy.com.kw
*.ubuy.com.kw
uglow.ubuy.com
www.ubuy.ma
ubuy.com.kw
*.ubuy.com.kw
ubuy.co.at
ubuyanalytics.ubuy.com
ubuy.com
track.ubuy.com
*.ubuy.com
*.ubuy.com
images-cdn.a.ubuy.com.kw
ubuy.com.kw
*.blog.ubuy.com
test-blog2.ubuy.com
ubuy.gl
*.ubuy.om
ubuy.com.jm
*.ubuy.com
www.jordan.ubuy.com
*.ubuy.com
ubuy.com
*.ubuy.com.kw
*.ubuy.com
www.ubuy.com

Certificate

The complete raw certificate details for test-blog2.ubuy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXLugFq8O4jShCnSYBso
NQw93exIX4reAJbV9fzOwVyBK+3wonKsrI8VP57P2T06gdQ7l4IfL1yw3x4/2L5t
11wnpKqYMgGgUpOvvpAz7jbMhQRA/BDU3Zos63PHt+lKAovPtuset02aW2J/qRLw
iKQkXil2UZPJaEX8MDLXaTUidGn+ttr+a/1OXbUFzDEEFUDlekhr6Ii/Ajkt5zfI
S5RST4xhUpo5O0LG6KySXi/5n/Yt1h6W+cq02jqLWKQD1H2KslqJ/1L7kB+k77k1
POaFGjLHQJp5CSCikdcmejSDI7igtI7Pp9yuO9NRdpyNB8gY+/VyiCYcxHsThNSN
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5752570922514849840785671573494032562
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'test-blog2.ubuy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23915714545546781953852954781435744703993295700451198462688026696983634401705439551921943231881032096246828236178093267427259064096565938653232041229387602003582477886618590521580620910692548775745674998557128136445544125953502004421433315157705396995598469727898900998634507932707233821045611541761890765011645647746849288968682561259172608895193114609204198742871272542669381052111572733283838804080357722455014508308066515426532228355087489302032705990465719659869157513778632783226384088552267099968159737053571731176257269669008819368430182499600468731542320745983097067991605637807752947745724233545698994589037
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5f00a0e5781d5dd5113988fde264c398a56ed746
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-blog2.ubuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ubuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubuy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test-blog2.ubuy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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