s3.eu-west-3.amazonaws.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0e:f0:aa:db:23:89:50:ed:b2:d2:d5:32:2a:6c:54:5d was issued on by Amazon.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=s3.eu-west-3.amazonaws.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:f0:aa:db:23:89:50:ed:b2:d2:d5:32:2a:6c:54:5d
Serial Number (int): 19858808558635372614479474520161539165
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 4b:f0:40:2d:37:d2:1b:e4:d9:8b:2d:53:08:11:0f:ab:1c:96:22:32
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): b7:ef:e5:91:c7:0d:e6:9e:a8:f6:ec:f4:ec:70:d3:4a:5f:93:5b:d5
Fingerprint (sha256): 00:01:37:e5:20:81:7d:cd:0a:d1:ec:53:7e:d4:e1:19:45:80:20:b7:bb:87:88:4b:fb:fc:75:07:39:36:c1:44

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate s3.eu-west-3.amazonaws.com

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for s3.eu-west-3.amazonaws.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

s3.eu-west-3.amazonaws.com
*.bucket.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3b.s3.eu-west-3.vpce.amazonaws.com
*.accesspoint.vpce-0d69a27251e40c728-3w1cr27r.s3.eu-west-3.vpce.amazonaws.com
bucket.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3c.s3.eu-west-3.vpce.amazonaws.com
*.control.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3a.s3.eu-west-3.vpce.amazonaws.com
*.accesspoint.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3c.s3.eu-west-3.vpce.amazonaws.com
bucket.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3b.s3.eu-west-3.vpce.amazonaws.com
*.control.vpce-0d69a27251e40c728-3w1cr27r.s3.eu-west-3.vpce.amazonaws.com
bucket.vpce-0d69a27251e40c728-3w1cr27r.s3.eu-west-3.vpce.amazonaws.com
*.s3-accesspoint.eu-west-3.amazonaws.com
*.accesspoint.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3b.s3.eu-west-3.vpce.amazonaws.com
*.s3.eu-west-3.amazonaws.com
bucket.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3a.s3.eu-west-3.vpce.amazonaws.com
*.control.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3c.s3.eu-west-3.vpce.amazonaws.com
*.bucket.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3a.s3.eu-west-3.vpce.amazonaws.com
*.bucket.vpce-0d69a27251e40c728-3w1cr27r.s3.eu-west-3.vpce.amazonaws.com
*.bucket.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3c.s3.eu-west-3.vpce.amazonaws.com
*.accesspoint.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3a.s3.eu-west-3.vpce.amazonaws.com
*.s3-control.eu-west-3.amazonaws.com
*.control.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3b.s3.eu-west-3.vpce.amazonaws.com

Certificate

The complete raw certificate details for s3.eu-west-3.amazonaws.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5KLptdDCXHYzk3S7Kswr
n//S1nVy91BofFVP13FyY0V8WE7it/Hlang0N/e/fmkd/gsFefSftkX83WaDIhMn
vWkka4Wlw/skj349WimqLMr+qjYVY+XLxq0yJbjATSAWQY4xZ3CgwCGUc0FcyIKN
5xhKrymFpLTOYKmVjaJqLU43dbIIAWTPzjBMhsgnTSgeskWaAJPdzw/RcsvB8CTg
ZQsKhRdYoES94dC79jkpc4aCHyP3RBwyKrAN43/bDkGiWxZREgEEYjiTIp8Jp1o7
PKJ5o7X6jagwPuMG0bswWgmgiTx9otRwLqP6xYBgwiufnpwNunxJpCow+xp4W8Zz
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19858808558635372614479474520161539165
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 's3.eu-west-3.amazonaws.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28862668892447479842140489346700680681489226212195750626835780177180656865190259181878673023701954544966658501622447916688954102003614032368604812588303708342560346811811314669040555789688436267224297038900807564117011096615976426188832373116148743705995779776011962235500531622634259000696033976803287567228171960471050660479350482761232916355060274779002289287638317641752784558272263445012836957631251688148518628416742684220310822833150703182207389496716083088315548946605159208381799968707498113276822152433171485965105443453440836890064983857574090084614255111247473933964390661319299632098851418944319242269653
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4bf0402d37d21be4d98b2d5308110fab1c962232
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1474 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3.eu-west-3.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3b.s3.eu-west-3.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-0d69a27251e40c728-3w1cr27r.s3.eu-west-3.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3c.s3.eu-west-3.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3a.s3.eu-west-3.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3c.s3.eu-west-3.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3b.s3.eu-west-3.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-0d69a27251e40c728-3w1cr27r.s3.eu-west-3.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-0d69a27251e40c728-3w1cr27r.s3.eu-west-3.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-accesspoint.eu-west-3.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3b.s3.eu-west-3.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3.eu-west-3.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3a.s3.eu-west-3.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3c.s3.eu-west-3.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3a.s3.eu-west-3.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-0d69a27251e40c728-3w1cr27r.s3.eu-west-3.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3c.s3.eu-west-3.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3a.s3.eu-west-3.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-control.eu-west-3.amazonaws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-0d69a27251e40c728-3w1cr27r-eu-west-3b.s3.eu-west-3.vpce.amazonaws.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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