api.weizhedo.dev.afi-risk-portal.audible.amazon.dev

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0a:bd:52:10:0e:47:bc:29:1e:bb:82:8e:54:86:16:5f was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=api.weizhedo.dev.afi-risk-portal.audible.amazon.dev

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:bd:52:10:0e:47:bc:29:1e:bb:82:8e:54:86:16:5f
Serial Number (int): 14275288493769853250155762918875338335
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: cd:84:dd:19:bc:ec:fc:c1:f1:62:a1:06:61:bd:80:8a:e4:92:a7:b6
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): af:22:4f:83:a2:a4:30:d4:99:ee:6a:46:b4:48:f4:e4:c9:e2:03:c3
Fingerprint (sha256): 00:51:28:35:6f:23:e7:56:2b:37:9b:c0:47:6b:00:4b:52:09:c6:95:94:f1:ba:d1:e0:a6:63:78:bf:33:eb:58

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate api.weizhedo.dev.afi-risk-portal.audible.amazon.dev

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.weizhedo.dev.afi-risk-portal.audible.amazon.dev

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.weizhedo.dev.afi-risk-portal.audible.amazon.dev

Other certificates including the domain name amazon.dev

(limited to 100 certificates)
alpha.us-west-2.suyanxu.people.amazon.dev
gamma.us-east-1.nets.datacentral.amazon.dev
api-us-east-1.beta.mobile-vpn.aee.amazon.dev
eu.online-panel.advertising.amazon.dev
load-shedding-tools-api.barista.a9.amazon.dev
sbbordov.eboss-wds.wfm.amazon.dev
api.alpha.hiccup.avts.video.amazon.dev
employees.beta.api.talent-alchemy.hr.amazon.dev
regular.us-east-1.alpha.atta.kaspian.amazon.dev
peru-rules-visualizer.dmwita.people.amazon.dev
na.online-panel.advertising.amazon.dev
gamma.stream-manipulation.video.amazon.dev
us-west-2.personal-harsunda.opus-se.pharmacy.amazon.dev
a.prdsstpdx1.us-west-2.sampling.jihm.amazon.dev
api.prod.otto.ats.fintech.amazon.dev
*.na-beta.offer-data-service.xbf.aglt.amazon.dev
saitarud.planofrecord.nasctech.amazon.dev
temp.main.beta.us-east-1.gulfstream.pars.amazon.dev
grcsecuritydevo.ring.amazon.dev
amira.magangal.people.amazon.dev
prod.us-west-2.manage.ihm.amazon.dev
beta.api.assessments.security.amazon.dev
beta.content-interception-service.metrix.music.amazon.dev
hrxpluginservice.us-west-2.pt.backend-hrsc.pxt.amazon.dev
air.lmaq.last-mile.amazon.dev.lmaq.last-mile.amazon.dev
sam-dev-laijonat-test.vovi.last-mile.amazon.dev
toolshed.ots.amazon.dev
gamma-na.csmatchgqlservice.cs.amazon.dev
api.nhancao.alpha.nardol.business.amazon.dev
gamma.styleguides.leo.amazon.dev
us-west-2.beta.customer-identity.aee.amazon.dev
api.na.backend.proddashboard.rns.amazon.dev
api.firetv.eu-west-1.gamma.mario.imdbtv.amazon.dev
api.weizhedo.dev.afi-risk-portal.audible.amazon.dev
accelerated-training-module.fulfillment.amazon.dev
prod.us-east-1.seller-performance.seller-services.amazon.dev
alpha.us-west-2.pupauditservice.puptech.amazon.dev
gamma.webex.uc.amazon.dev
*.sandbox.sentrypatrolservice.coro.amazon.dev
varshovi.dev.smartforms.pxt.amazon.dev
api.us-west-2.kvvg.redstone.comms.atoz.amazon.dev
bryaustiuse.concert.atoz.amazon.dev
beta.mcp.email.amazon.dev
api.da.amazon.dev
trck.pix.twitch.prod-na.turntable.sonic.advertising.amazon.dev
sungyenl.alpha.console.materials.sustainability.amazon.dev
*.usawesta2aalphaadropabhag.reverse-logistics.devices.amazon.dev
beta.shieldknot.mshop-ct.amazon.dev
smartcert.alexa.amazon.dev
joviedoj.people.amazon.dev
query-aspect.us-east-1.beta.retrieval.nile.amazon.dev
alpha.nsbis.robotics.amazon.dev
alpha.digiscan.finauto.amazon.dev
ics-video-api-ap-southeast-3.ics.gso.amazon.dev
devo.us-east-1.data-controller-management.alexa.amazon.dev
api.personal.clarity-mfe.clarity.team.hrsc.pxt.amazon.dev
ejt.test.us-east-1.service.sizecharts.softlines.amazon.dev
alpha.inventory-history.aft.amazon.dev
api.lovelace.zleiwei.people.amazon.dev
pdx-beta.cscpsgraphqlservice.csalt.amazon.dev
us-east-1.prod.wake-word-allowlisting.reaver.avs.amazon.dev
eu-west-1.beta.sblandingpageservice.advertising.amazon.dev
meikanp.caspian-payments-cn.royalties.digital.amazon.dev
mscampos.credential-manager.cartorio.intech.amazon.dev
alb.teammanagement.dev.adwanima.people.amazon.dev
apigateway.clowello-mow.dev.infogroundingservice.agi.amazon.dev
api.alpha.ipv2bff.scot.amazon.dev
retool.beta.wfpp.hr.amazon.dev
raven.tools.amazon.dev
gamma-api.us-east-1.ams.aatmetadata.advertising.amazon.dev
a.alphpdx.us-west-2.alpha.ihmfds.jihm.amazon.dev
meikanp.caspian-payments.royalties.digital.amazon.dev
trpcservice.prod.appeals-hearing.pxt.amazon.dev
us-east-1.beta.messaging.ui.bsm.selling-partners.amazon.dev
alpha.eu.ifrs.inventory-financial-reporting.fba.amazon.dev
api.piranha.igt.amazon.dev
api-fe.gamma.bespoke-cvt.softlines.amazon.dev
api.prod-euamazon.axe.flexpricing.last-mile.amazon.dev
mvms-thin.retail.vms.amazon.dev
prod.onepod.eu-west-1.pebprocessor.pricing.amazon.dev
naive-ingest.beta.telemetry.pxt.amazon.dev
alpha.intro-trailerplanner-api.na.beta.fmc.aft.amazon.dev
naive-ingest.ibrasde.beta.telemetry.pxt.amazon.dev
compass.icon.amazon.dev
api.beta.packaging-portal.ops-integration.amazon.dev
rss-api-internal.internal.dev.rss.ring.amazon.dev
146518793265.dev.bracewell.gale.alexa.amazon.dev
*.us-west-2.ihmlibby.jihm.amazon.dev
vpce.cs-dockit-backend-beta-us-east-1.arysk.people.amazon.dev
api.salzhang.us-west-2.istanbul-midware.ams.ascs-cpp.amazon.dev
api.us-west-2.alpha-dereksj.dashcartconnector.wfm.amazon.dev
cm-eu-gamma.flex-routing.last-mile.amazon.dev
beta.piper.amazon.dev
temp.main.beta.us-east-1.gulfstream.pars.amazon.dev
*.pdx.alpha.admin.tempus.games.amazon.dev
us-east-1.prod.amber-dashboard.kanga.advertising.amazon.dev
a.alphpdx.us-west-2.alpha.ihmprojectlogan.jihm.amazon.dev
workflow.api.beta.batch.caspian.dccs.amazon.dev
retrieve.us-east-1.alpha.multimodal.retrieval.nile.amazon.dev
solomon.prime-video.amazon.dev

Certificate

The complete raw certificate details for api.weizhedo.dev.afi-risk-portal.audible.amazon.dev in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sBJCOZpyupSClJpKMJp
CNsKYhVhXU0j3DTLJGh06GsP3W8vLCQup4S20mzyAoZDeDjmkdaxwuTqLNNZ65xB
ZgE0oFN+gMBp0KXyfZ8bs2CmGzGoXzHcA8Z507NiZCR+ubv5thjc/DgzmpQechGD
UED0QSi96gcoIX+XUrqc8T6VTzUQdxGsHuxie7wZYsnDaDomX7ZTqveK4sVrE2xA
JeC6VPcB88IsDeJ7M8mygnVAs81AbCf0zz8ry7U1GCl3P6QNscVEIws+A/QeN5wj
2/y8BaDfK6UhmLIY3WMucXPgnXFdNqyfVyQNpt0Eu5dqXT8ut5uohb7d/QpLemba
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14275288493769853250155762918875338335
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.weizhedo.dev.afi-risk-portal.audible.amazon.dev'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26604863454352006329070649043802304772852821779786874384859219819876985447555563755883774549880713874799527677824327834523812105117138572137716764345732470172482101441004555510805852594636323735230660386747629899473079852597299459780581748022428337084959473716225750377478520888997360776092066016089847701101235445315672240071963816658524751758076281894419274039042343595447997787646377244244982945879357715270447937563760697675067575995218362928633309116017113102066362946449903988536131950288335321761834279689451223530156464902302527612820672612420521985729812620447086349008455895635333470595590923132822104758907
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cd84dd19bcecfcc1f162a10661bd808ae492a7b6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.weizhedo.dev.afi-risk-portal.audible.amazon.dev'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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