account.magento.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0a:5c:0b:63:a1:11:84:28:28:ad:40:38:17:e1:b0:b5 was issued on by Amazon.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=account.magento.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:5c:0b:63:a1:11:84:28:28:ad:40:38:17:e1:b0:b5
Serial Number (int): 13770202268776354364753537490068025525
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 9c:bb:ae:b6:d9:0c:b7:d2:21:a5:7e:01:2c:a9:23:fc:fe:72:68:06
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): cc:83:9f:ae:d7:ee:bb:d6:4f:df:c4:b1:f7:ac:be:32:6e:1e:98:d4
Fingerprint (sha256): 00:bc:f2:65:ea:3d:37:fb:87:2a:06:4f:aa:1a:73:33:06:03:e7:fc:3b:a4:1c:ee:90:e0:31:e1:5b:9b:53:d2

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate account.magento.com

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for account.magento.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

account.magento.com
magentocommerce.com
notifications.magentocommerce.com
www.magentocommerce.com
u.magento.com
www.magento.com
www.account.magento.com
www.u.magento.com
identity.magento.com
partners.magento.com
magento.com

Other certificates including the domain name magento.com

(limited to 100 certificates)
su.magento.com
magentocloud9.map.fastly.net
*.dev.magento.com
statuspage.io
kickoff-apam.magento.com
guide.magento.com
engcom.dev.magento.com
de.magentocommerce.com
accounts.magento.com
afterwork-la.magento.com
accounts.magento.com
dns-vetting1-mims-pawel.map.fastly.net
magentocloud2.map.fastly.net
mcus.ecg.magento.com
prod.magento.com
shoporg.magento.com
events.magento.com
backend.opensource.engcom.magento.com
account.magento.com
secure08.lithium.com
staging.cloud.sparta.magento.com
static.magento.com
secure05.stage.lithium.com
events.magento.com
obui-sendgrid-api-prod.magento.com
dns-vetting1-mims-pawel.map.fastly.net
secure08.lithium.com
afterwork-minneapolis.magento.com
afterwork-nyc.magento.com
marketplace-stg3.magento.com
magentocloud35.map.fastly.net
magentocloud9.map.fastly.net
kickoff-emea.magento.com
secure08.lithium.com
marketplace-stg.magento.com
kickoff-emea.magento.com
dns-vetting1-mims-pawel.map.fastly.net
accenturetest.magento.com
secure08.lithium.com
secure08.lithium.com
resource.magento.com
sandbox.api.magento.com
glossary.magento.com
secure05.stage.lithium.com
cloud.sparta.magento.com
afterwork-la.magento.com
afterwork-seattle.magento.com
*.mcom.magento.com
cloud.sparta.magento.com
*.corp.magento.com
events.magento.com
brand.magento.com
magentocloud55.map.fastly.net
afterwork-minneapolis.magento.com
*.corp.magento.com
api.opensource.magento.com
obui-sendgrid-api-dev.magento.com
dns-vetting1-mims-pawel.map.fastly.net
*.mcom.magento.com
statuspage.io
magentocloud9.map.fastly.net
afterwork-philadelphia.magento.com
secure05.stage.lithium.com
marketplace-stg3.magento.com
dns-vetting1-mims-pawel.map.fastly.net
afterwork-minneapolis.magento.com
mcc.stg.swat.magento.com
omsdocs.magento.com
support.magento.com
experienceleague.adobe.com
mcus.ecg.magento.com
afterwork-sf.magento.com
statuspage.io
statuspage.io
nrf.magento.com
stg.swat.ceng.magento.com
kickoff-emea.magento.com
support.magento.com
statuspage.io
marketplace-stg3.magento.com
dns-vetting1-mims-pawel.map.fastly.net
tst.sparta.ceng.magento.com
mcc.stg.swat.magento.com
secure08.lithium.com
statuspage.io
statuspage.io
secure08.lithium.com
*.corp.magento.com
mp-stg-static.magento.com
statuspage.io
magentocloud58.map.fastly.net
magentocloud9.map.fastly.net
dns-vetting1i.map.fastly.net
magentocloud9.map.fastly.net
backend.staging.opensource.engcom.magento.com
de.magento.com
kickoff-emea.magento.com
api.magento.com
*.bcn.magento.com
events.magento.com

Certificate

The complete raw certificate details for account.magento.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8QuCXfa8g4CaiekWEj05
oDq0JU+nu67Mtb5LNVZD0TXaKMNUAICW5A7oazTniu5LlC92ebKuHXsAV1U/+H89
ctcBMr66B2mjYAqSlepyN1spL9yQ6qzd+BetAaKmF/LDpkGeNBoX5mvzcSVX5UT0
eL4S6+XKHEO1vozxIP7TGk5fzDkQWTX5IvyoLJBRlGgQkyqcrm5cPEoaYm6rNXnl
lyX5CeFsIfh8ck9cFxkwTbUmKwWOQ2JbsHe8q7m04gWvUDzGIxjefqCYzj1UUXc0
7KdAiELYMuZiKwEUDyTCHmKL7+0S8MWC/m+JhwvecVdAHEennMoJxLETw+LSz00Q
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13770202268776354364753537490068025525
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'account.magento.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30429106917683678184652839667827115629382237627515739352464941621699679373562641339231731304432515822965187546423397898039318983782874835201829425502571006277609578729341079608182418202981532228304737577501503441393160205183945904588324996694192825546140956284709885040570829565308266661243352417805023290038614620306547759135638793794552252146150734849587152646600438073986671782474435636849115190190463534873553026711181595000051403646937610357332811975325707141616848681728891759620358377233194945252079900451069597601675379090171067249766081516179884007648938956586669751873623836372724657234566496360410710347979
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9cbbaeb6d90cb7d221a57e012ca923fcfe726806
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (238 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'account.magento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magentocommerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notifications.magentocommerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magentocommerce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u.magento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.account.magento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.u.magento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity.magento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.magento.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magento.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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