static-hk.zacdn.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 03:ab:2e:b3:f1:11:56:48:80:7f:f6:4a:b7:6b:70:cd was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=static-hk.zacdn.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:ab:2e:b3:f1:11:56:48:80:7f:f6:4a:b7:6b:70:cdSerial Number (int): 4876513997453907740166167385944584397
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: b2:d2:74:b0:01:24:4c:ae:c2:35:da:97:5e:4c:03:f6:99:3e:b3:4c
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): c3:f9:21:9b:48:5c:8b:2f:7b:8e:b8:f2:0d:5b:1a:54:d3:9b:5e:20
Fingerprint (sha256): e4:72:c8:27:d4:43:f5:59:7c:b1:b6:7a:9d:d3:cd:da:c4:9e:18:11:ae:1b:16:4d:62:de:d9:98:3c:59:50:3b
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate static-hk.zacdn.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for static-hk.zacdn.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
static-hk.zacdn.com
static-origin.zalora.com.hk
static-origin.zalora.com.hk
Other certificates including the domain name zacdn.com
(limited to 100 certificates)
*.zacdn.com
static-ph.zacdn.com
static-checkout-sg.zacdn.com
*.zacdn.com
dynamic.zacdn.com
static-my.zacdn.com
static-checkout-sg.zacdn.com
static-id.zacdn.com
static-ph.zacdn.com
*.zacdn.com
static-checkout-ph.zacdn.com
rum.zacdn.com
static-checkout-hk.zacdn.com
static-hk.zacdn.com
static-id.zacdn.com
dynamic.zacdn.com
dynamic.zacdn.com
static-hk.zacdn.com
dynamic.zacdn.com
static-sg.zacdn.com
static-checkout-tw.zacdn.com
*.zacdn.com
*.zacdn.com
static-tw.zacdn.com
static-checkout-hk.zacdn.com
static-checkout-id.zacdn.com
dynamic.zacdn.com
static-checkout-id.zacdn.com
static-my.zacdn.com
dynamic.zacdn.com
static-checkout-id.zacdn.com
*.zacdn.com
static-checkout-my.zacdn.com
*.zacdn.com
rum.zacdn.com
*.zacdn.com
static-checkout-my.zacdn.com
static-hk.zacdn.com
static-checkout-ph.zacdn.com
static-checkout-tw.zacdn.com
*.zacdn.com
static-id.zacdn.com
static-ph.zacdn.com
static-checkout-sg.zacdn.com
*.zacdn.com
dynamic.zacdn.com
static-my.zacdn.com
static-checkout-sg.zacdn.com
static-id.zacdn.com
static-ph.zacdn.com
*.zacdn.com
static-checkout-ph.zacdn.com
rum.zacdn.com
static-checkout-hk.zacdn.com
static-hk.zacdn.com
static-id.zacdn.com
dynamic.zacdn.com
dynamic.zacdn.com
static-hk.zacdn.com
dynamic.zacdn.com
static-sg.zacdn.com
static-checkout-tw.zacdn.com
*.zacdn.com
*.zacdn.com
static-tw.zacdn.com
static-checkout-hk.zacdn.com
static-checkout-id.zacdn.com
dynamic.zacdn.com
static-checkout-id.zacdn.com
static-my.zacdn.com
dynamic.zacdn.com
static-checkout-id.zacdn.com
*.zacdn.com
static-checkout-my.zacdn.com
*.zacdn.com
rum.zacdn.com
*.zacdn.com
static-checkout-my.zacdn.com
static-hk.zacdn.com
static-checkout-ph.zacdn.com
static-checkout-tw.zacdn.com
*.zacdn.com
static-id.zacdn.com
Certificate
The complete raw certificate details for static-hk.zacdn.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEgjCCA2qgAwIBAgIQA6sus/ERVkiAf/ZKt2twzTANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTI0MDMxMjAwMDAwMFoXDTI1MDQxMTIzNTk1OVowHjEc MBoGA1UEAxMTc3RhdGljLWhrLnphY2RuLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAOG0DPL6FGEyrTajouCrPRJ3/0AfIaAHJBzv+XXyzx6+fXiR W4BAkYBW7j3MO1puytYB9DoiWZHeYdeeJ4qCH9tr3KORhMxDEE9GtKdPRo3SAg1B rZra7/khpVkTGutvcLpvDbIojXO2wl0ANFxbJC6/l5DJk/vSd+uAJsnjgE0abKWi fFfPFJI9EqY+KaMG1YAGG8yLjLfnYDDQdkX9DET5ev7gbLElFsmkAsFRWXLb/m4m ABHBliajIOawH0KSLd73pHA7sZ03JW3s7n+yP07ZVtRYSn3kbTT7Wcf5BfJsDU5U eHmGRjrN8W8sAutGd3mWgRNnG0MD4kxjIAGwTMcCAwEAAaOCAZwwggGYMB8GA1Ud IwQYMBaAFMAxUs1aUMOCfHRxzsvpnPl664LiMB0GA1UdDgQWBBSy0nSwASRMrsI1 2pdeTAP2mT6zTDA7BgNVHREENDAyghNzdGF0aWMtaGsuemFjZG4uY29tghtzdGF0 aWMtb3JpZ2luLnphbG9yYS5jb20uaGswEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYD VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNV HR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAyLmFtYXpvbnRydXN0LmNvbS9y Mm0wMi5jcmwwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2Nz cC5yMm0wMi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQu cjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNlcjAMBgNVHRMBAf8EAjAAMBMG CisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB8w8+bYcOdorJw 46/cXV5cXMf5h2+kfp+Uj4J/JKoW8rpqQz5Yzq5+XjXiplKOMtepzLm9E2ZtDvh9 /elDKP76Cqu8YKjLToocbCLObcukL0IM6evvK5KfSdSiYX/ne3XMEjJ85AOeUZ2q p6OPflahOhEsvxhogN/hrod+lOmeAv/DDTmkzlwteD3m0nqt9dfq5ynj8Pkc+wSF R/PiiP0N3dkzaEXnEIwNna15CQokIeBbuvsLKzmTl4POlXHJh2YF7j+jWpPs7XWH PmNU7oqsL3Bx2u3uO37NNGdu57WosUNHhM/4kEPVcYMvkNy4rVoZPMRQXYRz3EJi +7G9psX3 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bQM8voUYTKtNqOi4Ks9 Enf/QB8hoAckHO/5dfLPHr59eJFbgECRgFbuPcw7Wm7K1gH0OiJZkd5h154nioIf 22vco5GEzEMQT0a0p09GjdICDUGtmtrv+SGlWRMa629wum8NsiiNc7bCXQA0XFsk Lr+XkMmT+9J364AmyeOATRpspaJ8V88Ukj0Spj4powbVgAYbzIuMt+dgMNB2Rf0M RPl6/uBssSUWyaQCwVFZctv+biYAEcGWJqMg5rAfQpIt3vekcDuxnTclbezuf7I/ TtlW1FhKfeRtNPtZx/kF8mwNTlR4eYZGOs3xbywC60Z3eZaBE2cbQwPiTGMgAbBM xwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4876513997453907740166167385944584397 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-11 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'static-hk.zacdn.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28492404868719047839053254013170888124458774842814331455015229289669205654579864733772123361470279704239518522670410667620295423839159692200368118202088057946126578704600070873761610542855340856295196100579720651403622933618162517455339518146211602076106494904771855889918289537381598010592877624175450757541982702095197538799083440872995062420312960134032323555204213219187771981110952873929844895395221125444072665403112022156037524707721670658922546302947385927095001056422451794509089558092186180569016417571211640974267008135811772505116847091412288325584346983464781271568345850885005985492610795884442557631687 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b2d274b001244caec235da975e4c03f6993eb34c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-hk.zacdn.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static-origin.zalora.com.hk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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