prod-partner-docs.norton.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 04:70:8d:00:ed:7f:df:76:9b:4c:31:94:2c:bf:9e:69 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=prod-partner-docs.norton.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:70:8d:00:ed:7f:df:76:9b:4c:31:94:2c:bf:9e:69
Serial Number (int): 5901309124552215253922113900580413033
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ff:86:41:5f:2d:d2:af:0c:bf:12:80:0b:6a:5f:9d:6c:9b:eb:67:6c
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 34:79:42:83:99:78:d0:d4:ee:53:a8:34:2e:7f:58:5a:d6:9b:7c:cb
Fingerprint (sha256): 00:10:8c:bf:02:e2:a4:bd:30:0f:4c:25:f1:43:55:e8:4e:f3:7a:b3:05:e7:78:bf:08:a2:3c:7a:a4:fb:eb:bb

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate prod-partner-docs.norton.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod-partner-docs.norton.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prod-partner-docs.norton.com
prod1-fe-slate.prod.aws.lifelock.com

Other certificates including the domain name norton.com

(limited to 100 certificates)
CSR-LT2INTERNAL.NORTON.COM
ANTITHEFT-BETA.NORTON.COM
prod-partner-docs.norton.com
email.norton.com
secure03.stage.lithium.com
support-qa1-bat.norton.com
SYMANTECPAYMENTS-DEV2.NORTON.COM
interceptor-load.backup.norton.com
BUY-AKA-PRD.NORTON.COM
admin-ptk.norton.com
dbs-dev.norton.com
status.norton.com
storemanagerui-qa31.norton.com
eaas-qa5.norton.com
status.carolinahandling.com
www.symantec.com
CSRT-LT2INTERNAL.NORTON.COM
cebealt-int2.norton.com
prod1-fe-dwm.prod.aws.lifelock.com
CSRT-QA1.NORTON.COM
keymaster01.np.norton.com
antitheft-int.norton.com
mobilesecuritycore.norton.com
csas.norton.com
wonauthor.norton.com
ncp-cpe-func-west.norton.com
NOW-AKA-STG.NORTON.COM
status.sirocco.global
nspweb-int.backup.norton.com
ACCOUNT-BETA.NORTON.COM
www-stage.norton.com
mobilesecurity-stg.norton.com
qa-us.np.norton.com
api-int1.norton.com
mocksso-int.backup.norton.com
PRVSRCH-LT2.NORTON.COM
commerce.backup.com
llprivacy-int.norton.com
my-int.norton.com
account-stage.norton.com
test-static.norton.com
UPDATECENTER-INT.NORTON.COM
account-int.norton.com
buy-qa4.norton.com
nms-appstoreanalyzer.norton.com
chips-stage-muw1.np.norton.com
store.norton.com
PRVCM-DEV12.NORTON.COM
dls.norton.com
onlinefamily-stg.norton.com
sapi.norton.com
support-ltm2-tuc.norton.com
support-ltm2-tuc-qa.norton.com
CM-QA11.NORTON.COM
neo.nortonlifelock.com
API.LOGIN-STAGE.NORTON.COM
dbs-fs-int.norton.com
web-perf.backup.norton.com
agentappconnector.norton.com
san-10-s7.tlsprovisioning.exacttarget.com
messagefilter-stage.norton.com
ebook.norton.com
shasta-clt.symantec.com
redirector-prod.symc.symantec.com
deepscan.norton.com
account-stage.norton.com
idsafe.norton.com
onboard.norton.com
req.lab.norton.com
partners-int.norton.com
www.norton.com
onboard-int.norton.com
buy-static.norton.com
pengp-int.norton.com
prod1-fe-dsp.prod.aws.lifelock.com
support-ltm2-ecl-stg.norton.com
mqa-int.lab.norton.com
ebizkeyvault.norton.com
int2-fe-dsp.dev.aws.lifelock.com
DATATOOL-PRV1.NORTON.COM
secure03.stage.lithium.com
connectsafe.norton.com
spoc.norton.com
store.norton.com
lotus-idgw.dev.norton.com
login-stage.norton.com
submit.norton.com
www.norton.com
cloudconnect-int.norton.com
onlinefamily-stg.norton.com
stage-weborigin.nortonlifelock.com
ks.norton.com
STORE.NORTON.COM
web.backup.norton.com
ncp.norton.com
SUPPORT-LTM2-TUC-LT.NORTON.COM
mts-simulation.norton.com
antitheft-int2.norton.com
antitheft-beta.norton.com
pewebapps.norton.com

Certificate

The complete raw certificate details for prod-partner-docs.norton.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yD1Gx5nP+L+oOHY1XVN
2uwh6gau+Fo6s58BFsprwSaLnjxobr605Gom1eJMaerE5N7rteWOMJBnDknTgC+U
xyL2d3Os+Km1A1SviqsDR0xJlurlNyj3UgcHlAE869QjYA0hbIGgJq5NJ+ImzLm4
Albr/nvmGJO/qZmK/klU2LitpMwfLypsMUR7gfa+arnbp8qhUJ1a9Onp6Ac73BIV
NlP2z6PgAcbJhKUQkXv5krxmCXHvc148Sycb/OQKHYDSMo3d/pcFksWsnjNKHfbd
sfTCKG8anIe4aTB/kDXbS4pqt+Gob87HvJK1aEzXWZ1dQPxPjp0V+QbilN3SR2P7
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5901309124552215253922113900580413033
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod-partner-docs.norton.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28672347149166630853642600866237319284463440718204573233107330362391131385310946166589249213692488447536082188849685490269129708634221518642951987541567481165443717745794259830693068114369364608030051501223093306375861319978258199920219518456563756374281254688599330327521190121204571308820384186853654984159317639252268026135450807298529649159282460470345505328823197871105305641290826653102311860373584131519501950657740211112263106899742102163577871160993111900695478188440238492672747538611694752726869663589668068245138527259075212079485226412146166957058817840227661430759328408734605747974302122034955414666231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff86415f2dd2af0cbf12800b6a5f9d6c9beb676c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-partner-docs.norton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod1-fe-slate.prod.aws.lifelock.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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