q1-np.uks.lacloud.playstation.net

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 03:86:bb:57:a0:18:1f:e0:92:87:9b:57:25:0f:d6:27 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=q1-np.uks.lacloud.playstation.net

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:86:bb:57:a0:18:1f:e0:92:87:9b:57:25:0f:d6:27
Serial Number (int): 4687251519391202451377338679349466663
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: cd:90:06:6b:82:23:fb:0f:19:d7:e3:76:e3:0a:35:58:b6:6e:92:45
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): fb:54:42:30:82:db:99:e5:37:b3:95:88:89:01:15:5f:b9:18:b3:43
Fingerprint (sha256): 00:23:bc:69:da:4d:18:e7:37:52:f7:56:8e:3f:8d:21:e3:04:2d:8a:c6:9b:8d:27:92:ac:65:91:99:2e:13:90

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate q1-np.uks.lacloud.playstation.net

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for q1-np.uks.lacloud.playstation.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

q1-np.uks.lacloud.playstation.net
*.q1-np.uks.lacloud.playstation.net

Other certificates including the domain name playstation.net

(limited to 100 certificates)
q1-np.uks.lacloud.playstation.net
fbapp.ww.np.community.playstation.net
secure.api.np.ac.playstation.net
api.upro.playstation.net
poseidon.e1.dataocean.playstation.net
www-stg.upro.playstation.net
report.playstation.net
*.jp.biz.playstation.net
csapi-ext.e1-np.tools.playstation.net
*.tools.playstation.net
*.intg.pt.playstation.net
*.playstation.net
sgs2.prod.scdn.dl.playstation.net
publish.playstation.net
theia.mgmt.dl.playstation.net
*.sp-int.lacloud.playstation.net
*.pcs-nonprod.nonprod.pcs.playstation.net
presto.prod.dataocean.playstation.net
vl.api.mgmt.ac.playstation.net
cdnauth.e1-spint.scdn.dl.playstation.net
a.ad.playstation.net
*.shield.tools.ce.playstation.net
teams-s2s.playstation.net
combine.upro.playstation.net
*.jp.biz.playstation.net
pspc.np.playstation.net
email.stg.pt.playstation.net
static-resource.e1-np.community.playstation.net
*.e1-pmgt.tools.playstation.net
sessionshare.e1-np.dl.playstation.net
learn.playstation.net
galactica2.api.d1.tools.playstation.net
*.test.tools.ce.playstation.net
sgs2.e1.scdn.dl.playstation.net
email.qa.pt.playstation.net
*.dl.playstation.net
*.usw2.01.central.etc.s0.playstation.net
*.e2-np.playstation.net
*.auth.np.ac.playstation.net
*.e1-np.community.playstation.net
account.np.ac.playstation.net
gs2-sec.ww.prod.dl.playstation.net
*.dl.playstation.net
*.ace.msys.playstation.net
pc.ps5.update.playstation.net
*.uks-3929-e1np-usw2-e1z9.dev21.kcloud.playstation.net
resource.e1-np.ac.playstation.net
*.ac.playstation.net
psn-rsc.prod.dl.playstation.net
secure.api.q1-np.ac.playstation.net
*.mgmt.community.playstation.net
vulcan.dl.playstation.net
*.q1-np.tools.playstation.net
auth.np.ac.playstation.net
*.api.sp-int.playstation.net
*.prod21.kcloud.playstation.net
*.dl.playstation.net
*.sp-int.lacloud.playstation.net
tokenizer.pqa.dataocean.playstation.net
a.ad.playstation.net
*.prod-qa.rds.s0.playstation.net
*.jp.biz.playstation.net
apsnobj.prod.dl.playstation.net
*.np.ac.playstation.net
*.deep.tools.ce.playstation.net
manuals.playstation.net
*.jp.biz.playstation.net
api.upro.playstation.net
www-stg.upro.playstation.net
sgs2.e1.scdn.dl.playstation.net
*.api.e1-np.playstation.net
*.shield.tools.ce.playstation.net
docserver.jp.biz.playstation.net
e1-np.str.us-west-2.dev.kcloud.playstation.net
email.dev.pt.playstation.net
*.e1-spint.lacloud.playstation.net
sgs2.e1.scdn.dl.playstation.net
develop.playstation.net
*.prod-qa.tools.playstation.net
kiki-stage.biz.playstation.net
*.dev.dl.playstation.net
tokenizer.pqa.dataocean.playstation.net
*.ww.np.community.playstation.net
psapp.updptl.np.community.playstation.net
sbahn-subscribe.pqa.dataocean.playstation.net
codes-internal.playstation.net
web.mgmt.playstation.net
reg.api.km.playstation.net
psn-rsc.e1.dl.playstation.net
nsx.sec.np.dl.playstation.net
psn-rsc.prod.dl.playstation.net
www-dev.upro.playstation.net
sgst.prod.dl.playstation.net
secure.api.q1-np.ac.playstation.net
recorder-clust02-lb.crs.playstation.net
*.kcnchoudhary.raptor-alpha-usw2-01.h.km.playstation.net
trident-token.prod.dataocean.playstation.net
web.prod-qa.playstation.net
*.np.communication.playstation.net
*.kcnchoudhary.raptor-alpha-usw2-01.h.km.playstation.net

Certificate

The complete raw certificate details for q1-np.uks.lacloud.playstation.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6avwGK5qYByEB2S6ZlB
O81vFTBGYTHMlE5Dlp6TcbYmZvv2X1hjH+wuitgSz0g0AoT41xf69Y9tIL5+dJVC
gwkguTNmT5aYjZKqPz1n0WYnWmjz+UodDBZVCQB2gL/HjP4FhxoxSpLpvWMVEPdT
Bx4655nwd3L8vXGrERyr0v/xo7Y8rm7O1jOMgV3UzQtyDunC0cIZDU+gkwM0+rtT
WX/zXXxVIyGunC2zjML1G/LNswxUqnIf/4wTqAZnDFgLiBfKk8vYBHR4eWZ4F192
qCJoIpZgo+ZH3KY/bnEpA7w6JcRGZqhyrxQ7yF7vaHhwjV/7+Ia9U7LmAs9DYKPd
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4687251519391202451377338679349466663
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'q1-np.uks.lacloud.playstation.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20154086680705986428867879968930185354487407588986470801847359149855893258293179220665343971400534745786741347450539379825006421323258406968828138967794684626002359891430564983365436796147579939933553440877055998926461237548637670357635144738019775326014926161820649674269822857634418181132396409082254140923374620206228391355201693348677956478383744628245982588762981752866438680033743383677481719015574742714779942458968284392126467835015353407337059461619133019010074747083590893331628584466715169898336604106008428284785354393064268564521096339574749966199167783104493887716371967982799663662166513390616056159611
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cd90066b8223fb0f19d7e376e30a3558b66e9245
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'q1-np.uks.lacloud.playstation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.q1-np.uks.lacloud.playstation.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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