s3.cn-north-1.amazonaws.com.cn

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 03:f5:91:fb:90:b2:30:d7:9e:e3:88:02:79:18:f5:7d was issued on by Amazon.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=s3.cn-north-1.amazonaws.com.cn

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f5:91:fb:90:b2:30:d7:9e:e3:88:02:79:18:f5:7d
Serial Number (int): 5262757598138361821516992814366913917
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 97:ff:33:4a:c6:4e:b4:e6:75:95:64:f3:c7:82:38:80:b9:fe:5e:53
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 1c:47:82:8e:6b:e4:41:44:e9:d0:94:f7:fb:d3:b7:31:ca:49:fd:46
Fingerprint (sha256): 00:0d:1f:0c:5f:18:eb:ec:57:0e:bd:56:0a:31:66:94:f1:7e:13:e9:c0:91:7b:5a:8b:56:2a:4a:ca:98:5a:ad

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate s3.cn-north-1.amazonaws.com.cn

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for s3.cn-north-1.amazonaws.com.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

s3.cn-north-1.amazonaws.com.cn
bucket.vpce-0e32531e066b8f0e4-me4h1qpj-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn
*.accesspoint.vpce-0e32531e066b8f0e4-me4h1qpj-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn
*.s3.cn-north-1.amazonaws.com.cn
bucket.vpce-0e32531e066b8f0e4-me4h1qpj.s3.cn-north-1.vpce.amazonaws.com.cn
*.bucket.vpce-0e32531e066b8f0e4-me4h1qpj-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn
*.control.vpce-0e32531e066b8f0e4-me4h1qpj.s3.cn-north-1.vpce.amazonaws.com.cn
*.s3-control.cn-north-1.amazonaws.com.cn
*.control.vpce-0e32531e066b8f0e4-me4h1qpj-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn
*.control.vpce-0e32531e066b8f0e4-me4h1qpj-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn
*.accesspoint.vpce-0e32531e066b8f0e4-me4h1qpj.s3.cn-north-1.vpce.amazonaws.com.cn
*.s3-accesspoint.cn-north-1.amazonaws.com.cn
bucket.vpce-0e32531e066b8f0e4-me4h1qpj-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn
*.accesspoint.vpce-0e32531e066b8f0e4-me4h1qpj-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn
*.bucket.vpce-0e32531e066b8f0e4-me4h1qpj.s3.cn-north-1.vpce.amazonaws.com.cn
*.bucket.vpce-0e32531e066b8f0e4-me4h1qpj-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn
bucket.vpce-0e32531e066b8f0e4-me4h1qpj-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn
*.accesspoint.vpce-0e32531e066b8f0e4-me4h1qpj-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn
*.bucket.vpce-0e32531e066b8f0e4-me4h1qpj-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn
*.control.vpce-0e32531e066b8f0e4-me4h1qpj-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn

Certificate

The complete raw certificate details for s3.cn-north-1.amazonaws.com.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dkTMrbJQd+cfc5IhJEC
VNwEFBt1V0I8A46WPrD19Y1LEXnVko+/8ykvZh6zSWQ3W2Sdf2TINk8ZHdEX1LnG
Zx37xN40ZULP0W/6TVaB1+cQLiX+2DQdWjQh2bmM0IG5FI7YgrEuqCyWT0G2WhVC
OFvEQzuxc6BjpaM5QDcXSrdsllHaRU04Mn7caaJmeOjVfNqjQjKXbQSTQ8xfUJfN
mbGLXjvEFJhQApnq1Y0NFMVZgQ51qNKn1ezcTLxHAXBeu/FP02FvOHdlSDJyWVcf
fX9148oZoSsm6J0uCnvmZeSQe4UwEuE5dCePhcI+Mbu9upqjcyG656KBsp4Rytgx
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5262757598138361821516992814366913917
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 's3.cn-north-1.amazonaws.com.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29015615505642928469926846606402818510807745892347398405668797176738554582280715234559589920046619318514969170279304150620716452987904725758892173706216029751999982617737043626593780858535422219252329909088180433922514704530552819991747058646618169330176080244464136605640154504401175757250901346466653288701931929977907670795196295820328524786032650088678422527131288652015700198533443166558760195670274566066262316078535040399183929772927485404265160902972777448212466979207128957064976632988415356531701389092796720576014308748460767229156825330128801946128036543727437831812946106292871229912135500216407202214197
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							97ff334ac64eb4e6759564f3c7823880b9fe5e53
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1566 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-0e32531e066b8f0e4-me4h1qpj-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-0e32531e066b8f0e4-me4h1qpj-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-0e32531e066b8f0e4-me4h1qpj.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-0e32531e066b8f0e4-me4h1qpj-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-0e32531e066b8f0e4-me4h1qpj.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-control.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-0e32531e066b8f0e4-me4h1qpj-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-0e32531e066b8f0e4-me4h1qpj-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-0e32531e066b8f0e4-me4h1qpj.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-accesspoint.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-0e32531e066b8f0e4-me4h1qpj-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-0e32531e066b8f0e4-me4h1qpj-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-0e32531e066b8f0e4-me4h1qpj.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-0e32531e066b8f0e4-me4h1qpj-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-0e32531e066b8f0e4-me4h1qpj-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-0e32531e066b8f0e4-me4h1qpj-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-0e32531e066b8f0e4-me4h1qpj-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-0e32531e066b8f0e4-me4h1qpj-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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