ss-help-article-ui-qa.np.digital.business.comcast.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 09:88:ff:cf:5c:7c:ac:81:2a:32:5b:85:09:22:c7:fc was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ss-help-article-ui-qa.np.digital.business.comcast.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:88:ff:cf:5c:7c:ac:81:2a:32:5b:85:09:22:c7:fc
Serial Number (int): 12674392778126893377191992209195583484
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 79:a8:57:22:1d:da:7e:19:66:5f:ab:cd:e7:49:c4:85:1e:b1:05:51
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): f7:51:4c:ae:63:dc:6c:dc:92:9a:f4:9c:b3:0a:83:7d:67:1d:9c:1f
Fingerprint (sha256): 00:ec:5b:0d:8d:6c:1c:c5:14:91:6c:fa:5e:e7:2b:02:e5:88:4e:6e:51:d1:8b:6e:ce:65:76:e0:7f:23:cd:94

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate ss-help-article-ui-qa.np.digital.business.comcast.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ss-help-article-ui-qa.np.digital.business.comcast.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ss-help-article-ui-qa.np.digital.business.comcast.com
*.va.ss-help-article-ui-qa.np.digital.business.comcast.com
*.ss-help-article-ui-qa.np.digital.business.comcast.com
*.or.ss-help-article-ui-qa.np.digital.business.comcast.com

Other certificates including the domain name comcast.com

(limited to 100 certificates)
cronaas.stage.rules.comcast.com
xfwaaa.partners.sys.comcast.net
remote.comcast.com
ss-payment-ctnt-qa.np.digital.business.comcast.com
apsportal.cable.comcast.com
portal.sandbox.rules.comcast.com
*.jns2.gumby.comcast.com
elasticsearchpoc.xfinitysats.com
p2-elearning.comcast.com
www.salesspace.comcast.com
observability-poc-content-pqa.np.digital.business.comcast.com
ss-help-shared-content-stg-va.np.digital.business.comcast.com
utrccesxvdi01.cable.comcast.com
codcctelocm02.cable.comcast.com
lift.comcast.com
poc-bsd-ui-framework-dev.np.digital.business.comcast.com
tintaiih.comcast.net
ncovrec-ho-1p.cable.comcast.com
key-retail.cable.comcast.com
waf-setup-poc-stg-va.np.digital.business.comcast.com
compass.static.np.digital.business.comcast.com
partner.comcast.com
nds.cable.comcast.com
www.xfinity.comcast.net
ncovlb-as-1p.cable.comcast.com
otto.snp.comcast.com
promotion.stg.ss.np.api-business.comcast.com
penguin.dev.ibis.comcast.com
secure08.lithium.com
ss-cpni-content-prod-va.digital.business.comcast.com
5753952654065664-fe1.pantheonsite.io
vault-po.autobahn.comcast.com
activation4.comcast.com
malownicvair04.cable.comcast.com
sonarqube.comcast.com
audit.staging.vault.comcast.com
ss-help-article-ui-qa.np.digital.business.comcast.com
gavinv11ris02.cable.comcast.com
diversity.comcast.com
vd-limited-mes-b.sdwan.comcast.net
servicestab.dh.comcast.com
midwest.comcast.com
user-management.prod-va.digital.business.comcast.com
ss-order-summary-ui-dev.np.digital.business.comcast.com
*.jns-test.gumby.comcast.com
jobs-stg.comcast.com
penguin.prod.ibis.comcast.com
ncovrec-as-8p.cable.comcast.com
pr-327-lightning-mosaic.eapdev.comcast.com
ss-billing-ui-int.np.digital.business.comcast.com
cbhdb2-ch2-1p.cable.comcast.com
ss-user-directory-cntnt-pqa.np.digital.business.comcast.com
streamhvbr-ch2-e01p.sys.comcast.net
ama-gpt-api-comcastnow-stg.comcast.com
cafeapp-wc-a3p.cable.comcast.com
cdxocproc-il-1p.cable.comcast.com
secure09.lithium.com
ncovrec-as-9p.cable.comcast.com
res-api.svc-dev.thor.comcast.com
pawchscmspweb01.cable.comcast.com
*.business.comcast.com
ieapply-stg.internetessentials.com
pawayvapmbpmp02.cable.comcast.com
ss-payment-ctnt-pqa.np.digital.business.comcast.com
ss-voice-security-cntnt-dev.np.digital.business.comcast.com
qa.g.gears.comcast.com
edge.myriad-lite.top.comcast.net
copdcvnx01-cs1.cable.comcast.com
njswl-c031207.cable.comcast.com
password-reset-bff.qa.np.api-business.comcast.com
ieapi.internetessentials.com
ss-help-home-ui-qa.np.digital.business.comcast.com
api-staging.xfinitymfa.com
ss-billing-ui-int.np.digital.business.comcast.com
api-prod.salesx.business.comcast.com
wifilogin-st.xfinity.com
advomswebdev.comcast.com
*.np.salesx.comcast.com
secure08.lithium.com
design.comcast.com
aquaweb-wc-7p.cable.comcast.com
gisstrm-po-c7p.cable.comcast.com
ucm.cable.comcast.com
observability-poc-content-qa.np.digital.business.comcast.com
ss-help-search-micro-ui-qa.np.digital.business.comcast.com
sample-ui-01-test.digital.business.comcast.com
bsd-global-nav-content-int.np.digital.business.comcast.com
umd-cablehelp.comcast.com
ss-help-topic-ui-pqa.np.digital.business.comcast.com
cwa.comcast.com
amagcweb-as-1p.cable.comcast.com
integration-contingent.comcast.com
customer-hub-content-prod-va.digital.business.comcast.com
secure05.stage.lithium.com
rocketfuel-ui-assets-qa.np.digital.business.comcast.com
voice-security-content-prod.digital.business.comcast.com
user-invite-service.internal.int.np.api-business.comcast.com
ncovem-ho-2p.cable.comcast.com
bomui.g.cable.comcast.com
nde-portal.cb-es.comcast.com

Certificate

The complete raw certificate details for ss-help-article-ui-qa.np.digital.business.comcast.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtrNZrvUCJE3fOxa8TYe
QwSpnxuQdpeh1UBsxm2fiB+3OhMELu5C+7FJ5JbTTU4ApoSQyB5ofY1+IuTw/BMF
hK/moNONWAO7X1i3qqOaO4tSCmn9zoyCarkvoJftPwXA6WYrZ5A+OMJkSj9LfcZ1
x5DZcUVxqS5TGn/f8c7U4vF9h1FFnD0exkFioiQxJnNNU7z8Fi90xaSNoCkdnnJa
lg7M2JAlTmOleDOcoa+kQJrwvFs2JylFP0iIEWjroKnQu20x/sAiUTzWoi/Tdl/t
f0DXsip3H5wvV92089fOf6LjXZMWAlpeJF7LJW0L+Qwt2vjdBmZ7DcExmqYKOjJd
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12674392778126893377191992209195583484
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ss-help-article-ui-qa.np.digital.business.comcast.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24598126622948170947225725893871796709127578356494659072038039584193396692185673367844391003326661517723936136172647798174769567185942105380530356286061207424521905109541435859710780404326102662912360125645191106492398061703359206371222345882434641452840800987054760951656154211119450532414901334751684654009651614264944217534953463138803886863005286019735159226516535691584881773888433657749505039073292019205639844452666331999374749458183706905226863212794787600960674156763833640327007426163322932772034596725924295694889393032803603227202288301900129523147050710141035868091471660629271228742368138336026559143293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							79a857221dda7e19665fabcde749c4851eb10551
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (235 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ss-help-article-ui-qa.np.digital.business.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.va.ss-help-article-ui-qa.np.digital.business.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ss-help-article-ui-qa.np.digital.business.comcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.or.ss-help-article-ui-qa.np.digital.business.comcast.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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