logitech.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0d:b8:76:0a:95:68:b9:cb:c2:fd:06:f1:ff:9a:26:cf was issued on by Amazon.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=logitech.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:b8:76:0a:95:68:b9:cb:c2:fd:06:f1:ff:9a:26:cf
Serial Number (int): 18237740730029042816311613389788554959
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 02:25:0d:d2:8f:16:2b:ac:6d:b6:01:56:ac:2f:e6:d1:fb:cb:6f:84
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 07:93:9d:26:64:52:53:1a:a9:8e:af:91:a1:60:8a:0a:ae:61:53:19
Fingerprint (sha256): e7:53:08:4d:5a:c5:79:26:5c:a5:9d:16:f6:e1:84:68:e2:40:47:85:f5:e8:7b:98:f9:0f:9b:fb:69:72:d9:df

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate logitech.com

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for logitech.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

logitech.com
*.logitechg.com.cn
logitechg.fr
*.logitech.fr
*.logitech.com.cn
logicool.co.jp
*.logitechg.fr
*.logicool.co.jp
logitechg.com
logitech.com.cn
logitechg.com.cn
*.logitech.com
logitech.fr
*.logitechg.com
logitech.ch

Other certificates including the domain name logitech.com

(limited to 100 certificates)
statuspage.io
design.logitech.com
partners.logitech.com
cart.logitech.com
*.ops.logitech.com
statuspage.io
exchange.logitech.com
brandassets.logitech.com
dc.jtech.cc
secure02.lithium.com
originaem-gaming.logitech.com
shop.logitech.com
reports.pws.logitech.com
*.logitech.com
dev3.vc.logitech.com
lat.logitech.com
supplier.logitech.com
logilife.logitech.com
*.it.logitech.com
buy.logitech.com
onlinestatus.bambora.com
design.logitech.com
postrack.logitech.com
brandassets.logitech.com
prod.46.slot.cdn.salesforce-communities.com
developers.logitech.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
logitech.com
statuspage.io
*.logitech.com
logiappstore.logitech.com
webapps.logitech.com
*.logitech.com
requirements.logitech.com
prod.46.slot.cdn.salesforce-communities.com
blog.logitech.com
secure02.lithium.com
*.gerrit.logitech.com
twwarranty.logitech.com
opensearch-logs.logitech.com
plantuml.devops.logitech.io
partnernews.logitech.com
testreports.vc.logitech.com
logilife.logitech.com
segtglobalsummit.logitech.com
forums.logitech.com
statuspage.io
logitech.com
cart.logitech.com
logitech.com
statuspage.io
sourcegraph.logitech.com
spaces-staging.logitech.com
statuspage.io
*.logitech.com
postrack.logitech.com
*.logitech.com
opensource.logitech.com
buy.logitech.com
creative.logitech.com
statuspage.io
help.logitech.com
dev.vc.logitech.com
originaem-gaming.logitech.com
twepp.logitech.com
ci.vctools.logitech.com
*.logitech.com
brandassets.logitech.com
secure02.lithium.com
logilife.logitech.com
vc.logitech.com
buy.logitech.com
secure04.stage.lithium.com
login.logitech.com
dc.jtech.cc
statuspage.io
viewer.logitech.com
partners.logitech.com
dev2.vc.logitech.com
buy-ue.logitech.com
secure02.lithium.com
teamcity.logitech.com
twepp.logitech.com
statuspage.io
statuspage.io
vip.logitech.com
postrack.logitech.com
statuspage.io
partners.logitech.com
iot.eu-west-3.vc.logitech.com
statuspage.io
logiappstore.logitech.com
opensource.logitech.com
dev.vc.logitech.com
logilife.logitech.com
*.logitech.com
lat-srv.logitech.com

Certificate

The complete raw certificate details for logitech.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi3hc8N1aKrVh3SZG6fv
XsaWxI0TF/488Ppb6/GpdouR+SftUIhiiTA0vgjbE/3eb7XJAvAw86xI6pBMXx4J
WrkYgnN52ggHtVc90yg9rwyok5EDUvWemJpRa2soptqqsK50IUj55gf4L1dy9T27
kk931Ic0ns6Sby+/1e1BXL3RaODzkmQjt+M9Km/eYjBWw59a0b0falYJM9mZCEzu
vRGGfuWHnz7fL3baBMjjdq/SJU2c8yjZI5uHyUjZchfeIEt+m3tazvnHMU6lcIZG
0KHhgQ9QTq5Kgig/1zihWSbujv5Lxfdj1EkA1/PSE5arC+BchPFr/6bAlDFunWvA
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18237740730029042816311613389788554959
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'logitech.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24007902546470768091226001303602631621444825540156076115033025438192397553147206096949240837949739351453638239864414705489144044623139743824699914107883320521177604735964581573144725168663621630509981149963951565649144527125884866954559675026436862495979636275291327782970181598153686682010620673369773335210364227850203542497865136254977138894139577657351513214957321782400354899258704776091749318781914771074089726569032263392247813951022294424315362041316907527239660222375468198077926381437834160440435000281310156678925503754964433448942664686754261665681968333051147926872164368693412023575134285249427771474113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							02250dd28f162bac6db60156ac2fe6d1fbcb6f84
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logitech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logitechg.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logitechg.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logitech.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logitech.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logicool.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logitechg.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logicool.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logitechg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logitech.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logitechg.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logitech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logitech.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logitechg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'logitech.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a2feec6ea2d6b5c681cc6cda5d49018537383dd518ee12dbb4f0f8ebb3d9b5580bcf7593baf145f47136cfa10e525de5f2135a4b18311bddb37b36932cff5a5060944a2e8490fdb71ad0a47657f9eea43ee357470b481f2f7ee55164705eb171bb85fb0f6791e818baa4eaf922c9ea138b2b5ccb55703a15f9dd47089990b3f2510deafd33dd197c5e7643429dc57cfb1ef79e12d6e891399cd1950770963c47645ec381c8e6522f7b6a2595414bb5464ff9d525da01c755df09a8c4ad554773ea3765652cd37458b85ee772c90aa77fe6a4a3644ee09c4e5d964c316b4686284cb35575f9d67b26a70ad07efb71f298c84a0892ffa08c55a2b8ee79eaa537b2