account-id.beta.passport.transportation.a2z.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 05:00:80:62:c2:1e:7b:9e:58:78:1d:de:be:d4:85:07 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=account-id.beta.passport.transportation.a2z.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:00:80:62:c2:1e:7b:9e:58:78:1d:de:be:d4:85:07
Serial Number (int): 6648743951790716628205601652257096967
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 13:25:9e:fc:58:17:4e:ae:ae:83:31:49:94:b7:0f:c3:07:c0:cf:ff
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): de:03:ea:b1:72:11:9c:d8:86:52:bf:52:e0:b5:26:68:8d:2b:38:37
Fingerprint (sha256): 00:24:ec:6c:2b:c6:b5:2d:24:54:a5:0b:aa:18:57:86:58:be:aa:29:29:bf:46:25:ac:af:15:27:c7:b0:c8:dd

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate account-id.beta.passport.transportation.a2z.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for account-id.beta.passport.transportation.a2z.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

account-id.beta.passport.transportation.a2z.com

Other certificates including the domain name a2z.com

(limited to 100 certificates)
migration.symapiallegro.content-platform.a2z.com
sleiman.alpha.us-west-2.goshawk.aws.a2z.com
*.cloudcatalog.zappos.com
api.prod.pdx.data-service.backbone.networking.aws.a2z.com
b0d35.prod.ap-east-1.integtest.puller.iot.aws.a2z.com
public-writer.c-1.ap-northeast-2.cloudmap.aws.a2z.com
ap-southeast-1.prod.budgets.v1.bhvr.wheatley.aws.a2z.com
workflow.af-south-1.sso.aws.a2z.com
beta-api.us-east-1.smart-pixel.advertising.a2z.com
api.sigma-mx.test.cds.hvh.a2z.com
console.beta.zimbru.av-lr.a2z.com.beta.zimbru.av-lr.a2z.com
entityservice.preprod.ap-northeast-2.ml-platform.aws.a2z.com
gms.delphi.twitch.a2z.com
elb.ap-southeast-1.cs.boost.aws.a2z.com
api.eu-west-3.bifrost.beta.aura.acm.aws.a2z.com
ffsproxy.ring.devices.a2z.com
cea4b.prod.ap-northeast-1.integtest.puller.iot.aws.a2z.com
alpha.us-west-2.workteam-management.crowdscale.aws.a2z.com
*.d-c-ss.prod.ap-northeast-1.canary.identity.iot.aws.a2z.com
roleproxy.preprod.cn-northwest-1.ml-platform.aws.a2z.com
labeling.prod.eu-central-1.ml-platform.aws.a2z.com
api.crucible-beta.apn.a2z.com
gamma.catalog-entity-relationships.video.a2z.com
*.gc-rc-sr-158.8dl6bo.c1.kafka.us-east-1.sharabhi.people.a2z.com
replication.ruimi.us-west-2.duckhawk.a2z.com
ph.preprod.jobsatamazon.hvh.a2z.com
api.integ.pi.a2z.com
mds.prod.eu-central-1.ml-platform.aws.a2z.com
dataingestionservice.spektr.a2z.com
api.todo.frontend.s3.aws.a2z.com
ec.416278730961.dp.us-east-1.device-manager.a2z.com
*.rdlp-krang.av-lr.a2z.com
www.annotation.sandbox.nanook.lab126.a2z.com
5e74f.prod.ca-central-1.integtest.snapper.iot.aws.a2z.com
smbatch.preprod.ca-west-1.ml-platform.aws.a2z.com
beta.inbound.rodeo.aft.a2z.com
b717a.prod.me-central-1.integtest.puller.iot.aws.a2z.com
staging.momentum.twitch.a2z.com
ease.gamma.ap-east-1.ml-platform.aws.a2z.com
sd-brb.beta.discovery.security.a2z.com
service.prod.eu-north-1.ml.glue.aws.a2z.com
pub2.himanshj.desktop.us-east-1.canary.snapper.iot.aws.a2z.com
*.beta.us-east-1.integtest.puller.iot.aws.a2z.com
us-east-2-prod.mms.cloudtrail.aws.a2z.com
gamma.us-east-1.michigan.glue.aws.a2z.com
site.maanniss.variable-fee.video.a2z.com
api.pdxportal-beta.apn.a2z.com
*.gc-rc-sr-158.3wucrt.c1.kafka.us-east-1.sharabhi.people.a2z.com
1d0f8.beta.us-east-1.integtest.moonraker.iot.aws.a2z.com
*.d-c-ss.prod.eu-central-1.canary.identity.iot.aws.a2z.com
*.release.device-registry.ring.devices.a2z.com
*.bw.peg.a2z.com
portal.beta.ocelot.outposts.aws.a2z.com
roleproxy.prod.eu-north-1.ml-platform.aws.a2z.com
mfarm-cms-presto.us-east-2c.us-east-2.athena.aws.a2z.com
*.replacementc.dpzbg8.c1.kafka.us-east-1.sharabhi.people.a2z.com
account-id.beta.passport.transportation.a2z.com
880e4.prod.ap-northeast-1.integtest.puller.iot.aws.a2z.com
saml-runtime.sa-east-1.prod.apps-auth.aws.a2z.com
tomhm.alpha.tango-graphql.imdb.a2z.com
ms.155717691546.ap-northeast-1.mercury.rds.a2z.com
contributedrule.gru.prod.config.aws.a2z.com
allegiance.legacy-event.insights.video.a2z.com
*.developers.alexa.a2z.com
syd52.prod.tinkerbell.ebs.aws.a2z.com
api.hkg.runbmc-prod.conan.a2z.com
api.serverless-demo-webapp.kaizen.shopbop.a2z.com
*.ashtohms-dev.us-west-2.factsorchestration.spectre.aws.a2z.com
clujason-ops.gamesparks.aws.a2z.com
gojam-test.content-platform.a2z.com
api.test.us-east-1.remotecommands.rds.a2z.com
us-east-1.development.case-api.support.aws.a2z.com
test-acm.derby.dev.cloudbrowse.a2z.com
*.d-c-ss.prod.eu-west-2.canary.identity.iot.aws.a2z.com
*.rw-c-ss.prod.eu-north-1.canary.identity.iot.aws.a2z.com
*.d-c-ss.prod.ap-southeast-2.canary.identity.iot.aws.a2z.com
pre.ap-southeast-3.prod.isac.access.idaho.aws.a2z.com
verification.credential.business.a2z.com
portal.us-west-2.beta.ops.codedeploy.a2z.com
us-east-2.prod.ssm.v1.bhvr.wheatley.aws.a2z.com
ca-central-1.prod.console.elb.aws.a2z.com
*.d-c-ss.prod.eu-central-1.canary.identity.iot.aws.a2z.com
*.replacementc.pmojd6.c1.kafka.us-east-1.sharabhi.people.a2z.com
primary.us-west-2.beta.twitchbeefcake.services.twitch.a2z.com
testdomain2.173480755032.brelandm.a2z.com
alpha.dev-photo.eam.aws.a2z.com
testocsp.backup.beta.us-east-1.canary.moonraker.iot.aws.a2z.com
gamma.ap-southeast-4.spectrograph.cloudwatch.aws.a2z.com
*.d-c-ss.prod.sa-east-1.canary.identity.iot.aws.a2z.com
demantradev2.robotics.a2z.com
alpha.griffonquery.roparikh.people.a2z.com
livetracking.prod.ap-northeast-2.hydratest.aws.a2z.com
vccordob.idq-hawk.a2z.com
api.us-northeast-1-donor.bifrost.prod.aura.acm.aws.a2z.com
database-service.beta.caracal.proserve.aws.a2z.com
us-west-1.development.317961243480.amux.support.aws.a2z.com
1752a.prod.me-central-1.integtest.snapper.iot.aws.a2z.com
bacon-splunk-shc.public.prod.ap-northeast-2.ses.aws.a2z.com
128ca.prod.ap-south-1.integtest.puller.iot.aws.a2z.com
183ba.prod.eu-west-2.integtest.puller.iot.aws.a2z.com

Certificate

The complete raw certificate details for account-id.beta.passport.transportation.a2z.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1AatJvUXFq+UqeUDHXv
mqMh6VAO+HzxXNhiK8Wqq6q9vLj5XyhsE2YmPifo9m2L1fPL4KOoHJ18mWFBuOTw
drlmQTUh+OeuiVbApv3VafFrGdFnaoFzY/I7MJ99gejz8uQPgkGoSJ5HvZuzoQ++
So1Bc9z8Dt1hBvScG0KfkDF/VO4vq1UI13GKmaFwzGBAmRJ/3/JG5z8VSRuXvu1c
5pisHpmZl+iXmcMoJZNtEdKNX4LhZMQOLMZENYiapgr/tb5JCqwLbUyIQBmEMDvk
Fnp6T6Fi4HWc7Gq3zQXu/ZgytaST5NFC1vQFkRDsSk4zlCc+PlsnbUCGoQP7Hrnw
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6648743951790716628205601652257096967
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'account-id.beta.passport.transportation.a2z.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17586625301889628823665059921363496360753977552567716520478334762707081849834984045591665977215112571408636204891642214951957117208064691463619582360606923360614679355651988453991173311377731605683884153733701337600909825671832209323154040682877286205017453969909928585919607048116431675583766427296041373673040657634774209580223197788830776336491601551935642226627596634912314179314888405211899503938595555966479547657973273208646119207773678786035630774696793105887359131635619245328069742520646337424554547218124007527550852618838745561512411127100702824414343981928049197835242133019045329283503422913896263577777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							13259efc58174eaeae83314994b70fc307c0cfff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account-id.beta.passport.transportation.a2z.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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