naive-ingest.ibrasde.beta.telemetry.pxt.amazon.dev

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0e:a3:27:9d:3a:40:2d:b5:fb:6d:07:a1:a3:e7:42:63 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=naive-ingest.ibrasde.beta.telemetry.pxt.amazon.dev

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:a3:27:9d:3a:40:2d:b5:fb:6d:07:a1:a3:e7:42:63
Serial Number (int): 19456339799753773964314207870272356963
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 10:39:d8:8a:19:c7:32:1a:a6:03:72:f2:19:aa:74:7c:ec:e9:93:30
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): a4:79:18:03:4e:3b:80:a3:69:70:2c:82:2e:22:f8:ef:da:9d:17:e0
Fingerprint (sha256): 00:ba:f4:ac:cb:b7:42:db:40:98:9e:f7:16:65:86:16:2d:30:9d:df:c1:d5:58:ec:8d:83:7a:08:e0:44:95:00

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate naive-ingest.ibrasde.beta.telemetry.pxt.amazon.dev

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for naive-ingest.ibrasde.beta.telemetry.pxt.amazon.dev

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

naive-ingest.ibrasde.beta.telemetry.pxt.amazon.dev

Other certificates including the domain name amazon.dev

(limited to 100 certificates)
gamma.us-east-1.nets.datacentral.amazon.dev
api-us-east-1.beta.mobile-vpn.aee.amazon.dev
eu.online-panel.advertising.amazon.dev
sbbordov.eboss-wds.wfm.amazon.dev
employees.beta.api.talent-alchemy.hr.amazon.dev
regular.us-east-1.alpha.atta.kaspian.amazon.dev
peru-rules-visualizer.dmwita.people.amazon.dev
na.online-panel.advertising.amazon.dev
gamma.stream-manipulation.video.amazon.dev
us-west-2.personal-harsunda.opus-se.pharmacy.amazon.dev
a.prdsstpdx1.us-west-2.sampling.jihm.amazon.dev
api.prod.otto.ats.fintech.amazon.dev
saitarud.planofrecord.nasctech.amazon.dev
grcsecuritydevo.ring.amazon.dev
amira.magangal.people.amazon.dev
prod.us-west-2.manage.ihm.amazon.dev
beta.api.assessments.security.amazon.dev
beta.content-interception-service.metrix.music.amazon.dev
hrxpluginservice.us-west-2.pt.backend-hrsc.pxt.amazon.dev
air.lmaq.last-mile.amazon.dev.lmaq.last-mile.amazon.dev
sam-dev-laijonat-test.vovi.last-mile.amazon.dev
toolshed.ots.amazon.dev
api.nhancao.alpha.nardol.business.amazon.dev
gamma.styleguides.leo.amazon.dev
us-west-2.beta.customer-identity.aee.amazon.dev
api.na.backend.proddashboard.rns.amazon.dev
api.weizhedo.dev.afi-risk-portal.audible.amazon.dev
prod.us-east-1.seller-performance.seller-services.amazon.dev
gamma.webex.uc.amazon.dev
*.sandbox.sentrypatrolservice.coro.amazon.dev
varshovi.dev.smartforms.pxt.amazon.dev
bryaustiuse.concert.atoz.amazon.dev
beta.mcp.email.amazon.dev
trck.pix.twitch.prod-na.turntable.sonic.advertising.amazon.dev
sungyenl.alpha.console.materials.sustainability.amazon.dev
*.usawesta2aalphaadropabhag.reverse-logistics.devices.amazon.dev
beta.shieldknot.mshop-ct.amazon.dev
smartcert.alexa.amazon.dev
query-aspect.us-east-1.beta.retrieval.nile.amazon.dev
alpha.digiscan.finauto.amazon.dev
devo.us-east-1.data-controller-management.alexa.amazon.dev
api.personal.clarity-mfe.clarity.team.hrsc.pxt.amazon.dev
alpha.inventory-history.aft.amazon.dev
pdx-beta.cscpsgraphqlservice.csalt.amazon.dev
us-east-1.prod.wake-word-allowlisting.reaver.avs.amazon.dev
eu-west-1.beta.sblandingpageservice.advertising.amazon.dev
meikanp.caspian-payments-cn.royalties.digital.amazon.dev
mscampos.credential-manager.cartorio.intech.amazon.dev
alb.teammanagement.dev.adwanima.people.amazon.dev
retool.beta.wfpp.hr.amazon.dev
raven.tools.amazon.dev
gamma-api.us-east-1.ams.aatmetadata.advertising.amazon.dev
a.alphpdx.us-west-2.alpha.ihmfds.jihm.amazon.dev
meikanp.caspian-payments.royalties.digital.amazon.dev
us-east-1.beta.messaging.ui.bsm.selling-partners.amazon.dev
api.piranha.igt.amazon.dev
naive-ingest.beta.telemetry.pxt.amazon.dev
naive-ingest.ibrasde.beta.telemetry.pxt.amazon.dev
compass.icon.amazon.dev
api.beta.packaging-portal.ops-integration.amazon.dev
rss-api-internal.internal.dev.rss.ring.amazon.dev
vpce.cs-dockit-backend-beta-us-east-1.arysk.people.amazon.dev
api.salzhang.us-west-2.istanbul-midware.ams.ascs-cpp.amazon.dev
cm-eu-gamma.flex-routing.last-mile.amazon.dev
beta.piper.amazon.dev
*.pdx.alpha.admin.tempus.games.amazon.dev
us-east-1.prod.amber-dashboard.kanga.advertising.amazon.dev
workflow.api.beta.batch.caspian.dccs.amazon.dev
solomon.prime-video.amazon.dev
*.taiwoflb.document-cost-repository.intech.amazon.dev
*.timlawso.physical.advertising.amazon.dev
api-ritekkum.task-management.wfm.amazon.dev
blocklistservice.us-west-2.dev.gws.ring.amazon.dev
api.gamma.us-west-2.tardis.kuiper.amazon.dev
api.gamma.account-management.acs.amazon.dev
alpha.eu.art.aces.amazon.dev
heimdall.prime-video.amazon.dev
eds-alb.bilarm.people.amazon.dev
alpha.portal.wwa.amazon.dev
gamma.eu-w1.invoice-ingestion-validation.finance.amazon.dev
beta.na.curationpa-opensearch.ab.amazon.dev
us-west-2.prod.fgdr.helis.infosec.amazon.dev
*.eu.iar.rbs.amazon.dev
ksems.ellyland.people.amazon.dev
tacs.cupid-na.idprism-auth.amazon.dev
alpha.us-east-1.afs.borarthy.people.amazon.dev
beta.gateway.secint.amazon.dev
us-west-2.beta.seller-data.csba.seller-services.amazon.dev
beta.us-west-2.access-media.key.amazon.dev
*.secondary.us-west-2.alpha.galactus.jihm.amazon.dev
a.prddb3.eu-west-1.ihmgtss.jihm.amazon.dev
*.staging-beta.pwa.goblin.alexa.amazon.dev
streamingvvs.tts.audible.amazon.dev
slaccale.local.us-west-2.service.policy-lever.alexa.amazon.dev
fill-rate.ats.amazon.dev
nike.advisor.amazon.dev
us-west-2.beta.linky.prime-video.amazon.dev
api.us-west-2.beta.pdnewsletterservice.kids.amazon.dev
adsp-ob.pdx-prod.fmaas.frequency.advertising.amazon.dev
*.15.prod-na.semanticsearch.photos.amazon.dev

Certificate

The complete raw certificate details for naive-ingest.ibrasde.beta.telemetry.pxt.amazon.dev in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOy5zLawU/VO6uHS5lg8
CnWdogkTtzdKTtV2Wn86UpwoTmDzqHhRa5j+C36N2C1LKQqIc9F+UrNLP95XZ2hB
Ho1eHM3oJ/DTWMGd12+U7109StFKW3SUed+k6RH7rgj00lpSi+FuAXOTRTUNNtzY
GRis8WHViGltv7I6z1ctby8Q2rfAaAryNrz02zbPW7MOjfCBcN8cnKnsJmiptlyv
3y13AeeAJ8x67irbhEv7CoEu3ocLdj0pezQxctCeD2Nu2A202k6BZNJ06RNZEWh/
YgJES3PJqqu94Kkx/2+3dq+64F24gnsr/ZLQHLKycyGhbbwR0zY5boKKXEmt9pOH
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19456339799753773964314207870272356963
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'naive-ingest.ibrasde.beta.telemetry.pxt.amazon.dev'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25869348045889992390622068320187906143993324637867226345512302011933891598820459855608587711795049662064182394602762375037420984149174421587348492715791479598418587635759684427398889880821206407088880271890149801375128871336643173163382810203209534779670829071574599595672998368321227387712497297626458879170058862520285525299785327909407807331879987185594365322110572038781426133671078339039067605208147057427828803264016915996447025684509454767617098388063869483504051945522172956702569575135492762705881067257129986912886479569574499638912335347500865631729894158620700979014691657988105678195580374166768683550543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1039d88a19c7321aa60372f219aa747cece99330
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naive-ingest.ibrasde.beta.telemetry.pxt.amazon.dev'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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