s3-test.kzebdi.ngap.sit.earthdata.nasa.gov

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0b:c5:fd:d7:1f:05:71:f5:ce:d8:c5:85:7a:b0:af:57 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=s3-test.kzebdi.ngap.sit.earthdata.nasa.gov

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:c5:fd:d7:1f:05:71:f5:ce:d8:c5:85:7a:b0:af:57
Serial Number (int): 15649538928050718179541739455418249047
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b1:50:f7:cc:a4:62:a5:a1:8a:22:b2:de:7a:5d:78:09:f8:88:1d:2b
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 0f:e9:0a:09:21:70:6e:5e:c4:af:a6:ed:78:4b:46:91:94:81:c2:28
Fingerprint (sha256): 00:e8:73:74:98:45:07:f6:5b:62:92:29:26:02:3e:c2:1f:b6:cc:53:27:fe:20:e3:b6:ac:d5:8d:66:06:58:d6

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate s3-test.kzebdi.ngap.sit.earthdata.nasa.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for s3-test.kzebdi.ngap.sit.earthdata.nasa.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

s3-test.kzebdi.ngap.sit.earthdata.nasa.gov

Other certificates including the domain name nasa.gov

(limited to 100 certificates)
*.jpl.nasa.gov
*.jpl.nasa.gov
*.jpl.nasa.gov
sma.gsfc.nasa.gov
*.jpl.nasa.gov
maptis.ndc.nasa.gov
*.jpl.nasa.gov
nirps-staging.msfc.nasa.gov
plop.nascom.nasa.gov
grin.hq.nasa.gov
*.jpl.nasa.gov
*.jpl.nasa.gov
*.jpl.nasa.gov
lrp.at.nasa.gov
spacecomm.nasa.gov
www-gsfc.edn.gsfc.nasa.gov
science.hq.nasa.gov
server-mpo.arc.nasa.gov
*.jpl.nasa.gov
*.fltops.jpl.nasa.gov
step.nasa.gov
ensight.eosdis.nasa.gov
photonics.gsfc.nasa.gov
education.jsc.nasa.gov
AntiSpam.ndc.nasa.gov
cptrace.nasa.gov
msfcvpn.nasa.gov
sip.jpl.nasa.gov
omisips2.omisips.eosdis.nasa.gov
*.jpl.nasa.gov
nai-ar.ndc.nasa.gov
code.luna.nasa.gov
atfi.hq.nasa.gov
veritas.ndc.nasa.gov
handbook.appdat.jsc.nasa.gov
*.jpl.nasa.gov
stereo-ssc.nascom.nasa.gov
*.dip.amesaero.nasa.gov
monitoring.eva.appdat.jsc.nasa.gov
*.jpl.nasa.gov
straw.nasa.gov
code541.gsfc.nasa.gov
*.jpl.nasa.gov
nescacademy.larc.nasa.gov
ecc.earthdata.nasa.gov
*.jpl.nasa.gov
cptrace.nasa.gov
corrosion.ksc.nasa.gov
minx-docs.arc.nasa.gov
omisips1.omisips.eosdis.nasa.gov
ceres-wg.larc.nasa.gov
*.jpl.nasa.gov
supplychain1.gsfc.nasa.gov
aerocenter.gsfc.nasa.gov
*.jpl.nasa.gov
search.earthdata.nasa.gov
docserver.gesdisc.eosdis.nasa.gov
xanth.nsstc.nasa.gov
science.wff.nasa.gov
dashboard.sandbox.lpdaac.earthdata.nasa.gov
*.jpl.nasa.gov
*.jpl.nasa.gov
istd.gsfc.nasa.gov
uat.earthdata.nasa.gov
*.hq.nasa.gov
sra.jsc.nasa.gov
gs6102dsc-web2.gesdisc.eosdis.nasa.gov
*.jpl.nasa.gov
cxfmea-cil.nasa.gov
openhouse.larc.nasa.gov
*.jpl.nasa.gov
femci.gsfc.nasa.gov
*.jpl.nasa.gov
vso1.nascom.nasa.gov
urap.gsfc.nasa.gov
*.mdscc.nasa.gov
lance4.modaps.eosdis.nasa.gov
*.jpl.nasa.gov
fcportal.nsstc.nasa.gov
*.nccs.nasa.gov
*.jpl.nasa.gov
*.jpl.nasa.gov
*.jpl.nasa.gov
sfa.staging.ird.appdat.jsc.nasa.gov
omisips1.omisips.eosdis.nasa.gov
lacerta.gsfc.nasa.gov
developer.sit.earthdata.nasa.gov
sta3cd-map.larc.nasa.gov
iris.production.appdat.jsc.nasa.gov
ozoneaq.gpc.gsfc.nasa.gov
s3-test.kzebdi.ngap.sit.earthdata.nasa.gov
plmpdms.jpl.nasa.gov
*.homeandcity.nasa.gov
*.jpl.nasa.gov
HumanResearchWiki.jsc.nasa.gov
discovery.larc.nasa.gov
*.jpl.nasa.gov
cmr.earthdata.nasa.gov
sohoftp.nascom.nasa.gov
rtf.nas.nasa.gov

Certificate

The complete raw certificate details for s3-test.kzebdi.ngap.sit.earthdata.nasa.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2D+suMBhHnyFdylnQfI
FchsrUw76SL8vzPjrDR4hnzqAHPDiD3tlgwV89G53zUb/3Ybnfebmqs9P3Q/1Vau
ST23NA5LIx+jAcreUBPt4aUOey0d+Wz7HHFngOq2ue6B9oXIfXkA4EKCJFDk+uGq
HUETF+1fmS1HtM+WMcT1CfF2vzkCSXoOBIlvku8vbYVYEPstNkobFqQjngl6l+LM
wWbpSEEmhsvMzQi1KzGbchNYGMA5OtPdZWWRefBq/Z9YB8/0xt2uLRCLX7WWfB3N
Bo+fpoXJ/SvuRKTQ5dEW1xP/DXR+dDYMsUFW1EKXpjeIzx/duguX3PWPeqU+OHkI
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15649538928050718179541739455418249047
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 's3-test.kzebdi.ngap.sit.earthdata.nasa.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18604860806277820047390730138115427913788701816103497018955490406664364368137451594550972527471794945137603734065794002524515502986767813453335668554626185876974599468079184263974939732210413598425959092716437701020800837292061811994307259771037195058097765152613622097272615522200128631693860971578919722848127419096529792335287315630626531810245155525051800467508039346486495794443693108808457247305847467950151687022744016799995173611269470022081955554335658578101623517028624933593681768596136638688864344092375301186322102927936113441175616155654326121844577014154185165563829724844986689022051443916188352579593
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b150f7cca462a5a18a22b2de7a5d7809f8881d2b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3-test.kzebdi.ngap.sit.earthdata.nasa.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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