heydis-storage-public.wdprapps.disney.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 06:91:90:ec:17:cc:21:fb:bb:e0:1b:87:be:47:e2:4f was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=heydis-storage-public.wdprapps.disney.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:91:90:ec:17:cc:21:fb:bb:e0:1b:87:be:47:e2:4f
Serial Number (int): 8731190391391261025341353691378606671
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 86:eb:e9:e9:36:86:7b:b0:9b:2e:af:0c:bb:06:d3:9a:4e:4a:19:1a
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 8c:84:0f:34:71:6f:14:b9:da:0d:cd:8e:99:8e:54:c5:39:4b:16:01
Fingerprint (sha256): 00:77:0c:54:0f:8e:76:4b:0b:99:c1:eb:19:82:07:c2:3e:27:35:63:d2:24:66:39:72:62:1f:28:18:01:af:8a

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate heydis-storage-public.wdprapps.disney.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for heydis-storage-public.wdprapps.disney.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

heydis-storage-public.wdprapps.disney.com

Other certificates including the domain name disney.com

(limited to 100 certificates)
sf-prod-dr-az.media.disney.com
ppm-dev.disney.com
studiocloseup.disney.com
dev1.tbx-gim-rest-inv-dlr.wdprapps.disney.com
zenoss.disid.disney.com
shtktefafc-qa.apac.wdpr.disney.com
load.origin.castmeas-api.wdprapps.disney.com
productpoller.dahetd.studio.disney.com
stage.enttl-devicemgmt.wdprapps.disney.com
dc00011131n0616.corp.disney.com
stage.dlp-content.wdprapps.disney.com
*.studio.disney.com
latest.dvc-si-rsapi.wdprapps.disney.com
latest.sched-activity-order-svc.dlp.wdprapps.disney.com
*.stg.ensemble.disney.com
use1lq401.edp.disney.com
fas.wdprapps.disney.com
stage.tbx-core-api-roomrate.dlr.wdprapps.disney.com
DCLLABPOSRPTX.dcl.wdpr.disney.com
ocportal.disney.com
VWMS.shanghaidisneyresort.com.cn
airflow-flower.wdprapps.disney.com
vs-frmv-wa255.emea.wdpr.disney.com
ahws-agent.wdprapps.disney.com
video.disney.com
latest.cappiiapi.wdprapps.disney.com
mportal.intl.disney.com
testraadpmt-rmq-latest.wdpr.disney.com
latest.routing-svc.wdprapps.disney.com
latest.tbx-client-setup-dlp-use1.wdprapps.disney.com
load.tbx-supplier-setup.dlr.wdprapps.disney.com
test.dccr.disney.com
ngeapi-web.wdprapps.disney.com
shotguntools.fas.fa.disney.com
weekly.disney.com
latest.rrms-spa.wdprapps.disney.com
latest.origin-commerce-binding-web.shanghaidisneyresort.com
payment-reference-svc.dlp.wdprapps.disney.com
riley.disney.com
Booksdev.disney.com
viki.disney.com
heydis-storage-public.wdprapps.disney.com
crf.disney.com
simba-gg.wdprapps.disney.com
redirect.disneyinternational.com
video.disney.com
felix.disneyanimation.com
ops.nonprod.tech.disney.com
dlp-microservice-latest.wdprapps.disney.com
latest.quote-svc-internal.dlp.wdprapps.disney.com
stage.member-dvc.wdprapps.disney.com
origin.latest.wdw.nap7.wdpro.disney.com
entl-pkg-order-svc.dlp.wdprapps.disney.com
destiny.minio-operator.dcl.wdpr.disney.com
origin.load.product.service.wdprapps.disney.com
sandbox.sb-acm-test.wdpr-sandbox.disney.com
latest.tbx-api-shop-dlp-use1.wdprapps.disney.com
nemo0-ec-pa.wdw.attractions.disney.com
dmcqa.disney.com
eeudlp-gni-c9800-wlc.net.disney.com
*.spa.studio.disney.com
monitoring.nonprod.tech.disney.com
prod.merch-backend.wdprapps.disney.com
shadow.tbx-document-setup.dlr.wdprapps.disney.com
iscdml.disney.com
load.origin.arrwui-api-dlr.wdprapps.disney.com
stage.core-sales-validator.wdprapps.disney.com
raportal-k8s.ra-sandbox.disney.com
latest.pmaevntjb.wdprapps.disney.com
stage.rmdp-reference-data-slave.wdprapps.disney.com
heeuddjap01.wds.disney.com
latest.tbx-recommendation.wdw.wdprapps.disney.com
load.non-disney-addon-adapter-wdw.wdprapps.disney.com
stage.use1.mobile-notification-ha.gam-test.wdprapps.disney.com
load.csbspa.wdprapps.disney.com
vault-euw1.wdprapps.disney.com
shtktefw-qa-ro.apac.wdpr.disney.com
latest.dme-svc.wdprapps.disney.com
latest.tbx-master-setup.wdprapps.disney.com
dcpclmqa.disney.com
UCwebn7ext.disney.com
xbms-fin-batch.wdprapps.disney.com
stage.anonymizer-batch.wdprapps.disney.com
latest.pms-psl-tbx-su.wdprapps.disney.com
latest.01323-notifysvc.wdprapps.disney.com
bespin.disney.com
matchinggifts.disney.com
latest.tbx-flight-setup-dlp-use1.wdprapps.disney.com
stage.ssl-automation.wdprapps.disney.com
stage.tdls.studiotech.disney.com
stage.event-broker-service.wdw.wdprapps.disney.com
latest.tim-svc.wdprapps.disney.com
contentsecurity.disney.com
f5.disneyanimation.com
laod.dlp-is.wdprapps.disney.com
latest.internal.pbcsmodel.wdprapps.disney.com
latest.ore-m.wdprapps.disney.com
www.espnwwos.com
load.wdw-photopass-ui.wdprapps.disney.com
SPP1-DEV.disney.com

Certificate

The complete raw certificate details for heydis-storage-public.wdprapps.disney.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5VkHMiMARVn5LdPggwy
/C/8mYrkT+KI+7Y+euh4DbsnPRZipDglN5Vx4H0OGRTqaUxOhdS2xbCsTPmUcBNA
q9ZApK13IgtNeaGCcej7GG7+rqt12P2gZOf5Refv/0QYHzNqlCHR53ZstYnYNvRn
2MUySJGW3rkvtLVDS432sTt8t9/J/Q4HBGysMpzfOrj92TvVfmOEQkECakaNBVCk
kdVOrFaH2Mn+vn13JDDy3J/18QiE74zPn7leZQaf2rPmIVKzkZ9BgQUCtrOfhiDI
YtISzSVVI/32QVnBhowXFaYO/3PbswXYAKydN7mcxcczpdUvkn0h90kOYW5sfmzC
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8731190391391261025341353691378606671
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'heydis-storage-public.wdprapps.disney.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25195090167627055165290725312771593715771230667030803045599545275692760742082181271515495161842743893922789234179157135138016414604903675552437252903507697121497517722555463045631565239907128664076035051409073381668519724119460928298087229714696419031784611421084448302509154629214313107914011390104191723421030512131490402570983694578143682791733914433468284456082915764459654893068582357965679192225966121252030733594505481156428696576446693342690928303750997209199791031603335387771597345736501544774423812995158713487660156769349114836278973003440088249799312610491397840726994878363167089860336427055795946701453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							86ebe9e936867bb09b2eaf0cbb06d39a4e4a191a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heydis-storage-public.wdprapps.disney.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000185e78930be000004030046304402207eb5d330775a4801f37c1ae4ef575dc13365cb2c71e941a2be76b1173c1a0c090220579eae0bd0bc34d53e6b0c8b6e6ffe1544b115e1a65815d79b55f026ab4bf7c000760073d99e891b4c9678a0207d479de6b2c61cd0515e71192a8c6b80107ac17772b500000185e789312d00000403004730450220142c66980d5f76823e00b7b65a0d858b7c14bb24def6155d28af2c2917c4be05022100aacb7e69157b2a3a5bbc0e0c53825020df5ab5a29171d8315b11b192f8eb7bb300750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000185e78930fb0000040300463044022055c77de6fffc49596218b4bd74109967ef997da6d0e59bf630f26e74fc693e26022035a4345be9ffa8850d8f98891535166395c94ecf70c8bc00ceb2402a2ade432b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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