cdn.prod.spsc.io

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0a:67:5f:6f:41:92:fc:0d:db:1e:1a:28:53:51:e0:8f was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cdn.prod.spsc.io

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:67:5f:6f:41:92:fc:0d:db:1e:1a:28:53:51:e0:8f
Serial Number (int): 13829022177810851066810067136506093711
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0a:8d:2c:fd:fe:82:b7:ae:96:83:26:49:4d:13:f2:2b:3e:6f:7f:51
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): bd:23:fb:b1:33:5e:c6:28:0c:ea:84:6f:a5:9c:da:20:6d:7c:63:70
Fingerprint (sha256): 00:a0:b6:41:7a:8d:a5:58:2c:2f:35:e1:17:e3:dd:df:00:3c:ae:2f:ab:02:97:9c:56:a7:90:99:66:70:4f:10

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate cdn.prod.spsc.io

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cdn.prod.spsc.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdn.prod.spsc.io

Other certificates including the domain name spsc.io

(limited to 100 certificates)
*.prod.spsc.io
cdn.prod.spsc.io
stage.annotation.spsc.io
api.pa-supplier-configuration.spsapps.net
locales.spsc.io
*.dev.spsc.io
test.id.spsc.io
*.sourcing.prod.spsc.io
*.location.spsc.io
*.xtl.compilation.spsc.io
cdn.dev.spsc.io
auth.spsc.io
*.item.spsc.io
script-service-config-api.spsc.io
dev.devcenter.spsc.io
cdn.stage.spsc.io
routing-api.test.spsc.io
stage.notify.spsc.io
routing-api.spsc.io
labelui.spsc.io
filebroker-config-api.preprod.spsc.io
apiv2.fulfillment.spsc.io
id.spsc.io
s3-outbound-service-api.dev.spsc.io
cdn.test.spsc.io
stage.labelui.spsc.io
*.stage.spsc.io
*.test.spsc.io
geocoder.spsc.io
cdn.prod.spsc.io
*.fulfillment.spsc.io
*.test.spsc.io
*.fulfillment.spsc.io
intercom.spsc.io
filebroker-config-api.preprod.spsc.io
dev.geocoder.spsc.io
*.notify.spsc.io
test.devcenter.spsc.io
labelui.spsc.io
*.location.spsc.io
apiv2.fulfillment.spsc.io
otm.api.spsc.io
dev.geocoder.spsc.io
stage.notify.spsc.io
*.preprod.spsc.io
form-presets.test.spsc.io
label.spsc.io
*.prod.spsc.io
*.stage.spsc.io
api.profile-service.stage.spsc.io
s3-outbound-service-api.test.spsc.io
*.prod.spsc.io
catalog-gateway.service.test.spsapps.net
script-service-config-api.spsc.io
tnc.spsc.io
*.fulfillment.spsc.io
*.id.spsc.io
*.fulfillment.spsc.io
cdk-hackathon-api.service.test.spsapps.net
route-registry-api.dev.spsc.io
test.id.spsc.io
s3-outbound-service-api.test.spsc.io
*.location.spsc.io
stage.analytics-monitor.spsc.io
dev.devcenter.spsc.io
routing-api.test.spsc.io
dev.label.spsc.io
*.location.spsc.io
fulfillment.spsc.io
label.spsc.io
*.dev.spsc.io
*.profile-service.stage.spsc.io
api.data-engine-command-center.spsapps.net
corp-analytics.spsc.io
sentry.spsc.io
analytics-monitor.spsc.io
annotation.spsc.io
*.sourcing.stage.spsc.io
*.location.spsc.io
test.geocoder.spsc.io
notify.spsc.io
intercom.spsc.io
routing-api.spsc.io
script-service-api.spsc.io
routing-api.spsc.io
dev.id.spsc.io
locales.dev.spsc.io
tnc-bridge.spsc.io
service-registry-api.spsc.io
devcenter.spsc.io
1screen-prospace-converter.service.prod.spsapps.net
service-registry-api.spsc.io
api.template.test.spsapps.net
cdn.stage.spsc.io
*.item.spsc.io
*.sourcing.stage.spsc.io
annotation.spsc.io
service-registry-api.dev.spsc.io
cdn.prod.spsc.io
script-service-api.test.spsc.io

Certificate

The complete raw certificate details for cdn.prod.spsc.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaHQpsNm0axciUYvwDeg
4+aKiq8QcLKZYJ7ClFr8Ac0EAru1b5Ixuks47vspmEvyJCm8QopJgZ2R6LZd81+v
d/hoi4n/LeGqZ3/SHE1jwcPePO3IavLJY9MFd+gLGdRgALntaPKulSLHKE44GVWc
TIXlIQIWcTL2KZg0MuTEb/0HonmFHfjG3w2ymgOezVSR0/ywOSuI9l9hUt0ZYWJT
SkDUbte8pPOD7PcL6wQ61LrqFY0yyyknG+wreQvzYYz9nCaHTGi2hD8xYMZr/Dty
HLtMEjlw977zh1ViNYhPQFKp1lHB2kwYAHbFl2RTk3CCmblwmQq2QtsRinTnjdk6
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13829022177810851066810067136506093711
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdn.prod.spsc.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23938833611042294793330422941288948540097390934272228185378146123008587676782432793317255383143865120866600970022066990781783061930185825563184419623028589205974492538407244697327235634319949487341544214951559257510692280523140514865577905501779647704744761386480025633117881867477207305674614535905894124601966319556371109409178322304442719301142153522487471857728840389928415329774302043594486807638329561801291670617911267409311533084997243202798473369646044582391041812384233324250122024748057210074653290029958613728768057691772282562959088662791307169241617638561672273307536572358458245049395990147076009310723
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a8d2cfdfe82b7ae968326494d13f22b3e6f7f51
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.prod.spsc.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007eb872889dd0368c8ec8b4c635e13ba8e87aefc9b3048ac66735dea01928fa0ba55eeaa666a69fab7756f4433322f1b381e8a5c346429b094645ba4fc90f16381ba4c60e173e39d53015a7ccb4d4d76743ce232d3a3c7cef175368eaef9543fa23223b1f6fe2a3329b0c390ffe1490630cbfccf1a5b12e5be7d65a43a7deba5f2e09faf46d5843bf686161cfb9d2cf8e5d9c3f6fdc650cd066d67961bc4462aed83ad1d31639aff91fcced42d8e6a5c946d84f3b13cf7d993667e6575652fd773477eaa86de2749846fb9378e5ff2ebfdf32ba93b327ae09bc77c416e4e3b0c080ac183a72eb7c1850684725bbd8be84d7a751ed152eb6e5f4595c973726a501