ssofaast-aftx.amazon.co.jp

Issued by Amazon

About this certificate

This digital certificate with serial number 0a:79:50:99:21:62:4f:76:9f:23:8c:ef:8c:dc:5f:69 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ssofaast-aftx.amazon.co.jp

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:79:50:99:21:62:4f:76:9f:23:8c:ef:8c:dc:5f:69
Serial Number (int): 13922182602740884997729560614408052585
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 78:d2:62:61:b5:0c:9b:a4:58:96:18:e2:0f:d6:87:f1:a7:4d:a7:b8
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 72:b0:5f:21:b8:6f:79:01:09:5d:ea:5a:cd:01:4c:be:51:16:98:57
Fingerprint (sha256): 01:2c:a6:0a:d5:e2:44:95:b1:2d:a2:8b:43:1d:3f:bf:dc:31:e0:e5:06:6c:b4:ce:93:27:c2:92:76:9f:a2:8c

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate ssofaast-aftx.amazon.co.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssofaast-aftx.amazon.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssofaast-aftx.amazon.co.jp

Other certificates including the domain name amazon.co.jp

(limited to 100 certificates)
alexa-skills.amazon.com.au
*.peg.a2z.com
completion.amazon.co.jp
authorcentral.amazon.co.jp
cde-ta-g7g.amazon.com
identity.browserapps.amazon.co.jp
primenow.amazon.co.jp
dcp.amazon.co.jp
skills-store-eu.amazon.com
dl.amazon.co.jp
dp-gw-na.amazon.com
nonprofitcentral.amazon.com
rcm-fe.assoc-amazon.com
dl.amazon.co.jp
ssofaast-aftx.amazon.co.jp
aeswidget.amazon.jp
aax-fe-retail-direct.amazon-adsystem.com
aan.amazon.co.jp
logistics.amazon.com
kdp.amazon.co.jp
argileto.amazon.com
payments-sandbox.amazon.co.jp
pitangui.amazon.com
*.peg.a2z.com
primenow.amazon.co.jp
fls-fe-opf.amazon.com
amazonux.com
ssofaast.amazon.co.jp
shm.amazon.co.jp
mt.amazon.co.jp
kindlestore-sha-proxy.amazon.com
brandservices.amazon.com
aftlite-portal-nrt.amazon.co.jp
kep.amazon.com
alexa-skills-beta.amazon.com.au
widgets.amazon.co.jp
kep.amazon.com
dp-gw-na.amazon.com
kdp.amazon.co.jp
www.amazon.co.jp
transportation.amazon.co.uk
stage-business.amazon.co.jp
fls-fe.amazon.com
chat.amazon.co.jp
r.amazon.co.jp
dropship.amazon.co.jp
identity.browserapps.amazon.co.jp
www22.amazon.co.jp
pitangui.amazon.com
thumbnails-photos.amazon.co.jp
advertising-api-fe.amazon.com
kep-eu.amazon.com
ramp.amazon.com
cde-ta-g7g-sha-proxy-preprod.amazon.com
cde-ta-g7g.amazon.com
manga.amazon.co.jp
account-p2k.amazon.com
aeswidget.amazon.jp
vdp.amazon.com
t200fe.api.cer.amazonvideo.com
webservices.amazon.co.jp
kindle-store-proxy-endpoint-na.amazon.com
aan.amazon.co.jp
*.peg.a2z.com
pay.amazon.co.jp
skills-store-eu.amazon.com
kdp.amazon.co.jp
kdp-eu.amazon.co.jp
skills-store-eu.amazon.com
documents.amazon.co.jp
akamai-renew-cert-digicert-arcus-www.amazon.com
dcp.amazon.co.jp
brandservices.amazon.com
cde-ta-g7g-preprod.amazon.com
api-sandbox.amazon.co.jp
ab.amazon.co.jp
ddee-preprod-jp.amazon.co.jp
rental-account.partnercentral-na.amazon.com
ddee-preprod.amazon.com
aax.online-panel.advertising.amazon.dev
hh2.amazon.co.jp
twitch.amazon.co.jp
cde-ta-g7g.amazon.com
kdp-eu.amazon.co.jp
www.amazon.co.jp
vdp.amazon.com
*.peg.a2z.com
transportation.amazon.co.jp
artistcentral.amazon.co.jp
kuato.amazon.co.jp
chat.amazon.co.jp
rcm-fe.assoc-amazon.com
msh.amazon.co.jp
brandservices.amazon.com
digprjsurvey.amazon.co.jp
sha256.webservices.amazon.co.jp
music-xray-service.amazon.co.jp
twitch.amazon.co.jp
transportation.amazon.co.uk
seller-central-pilot.amazon.co.jp

Certificate

The complete raw certificate details for ssofaast-aftx.amazon.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVzDeggHRnd2ESP+voQS
kFMY79BxlIotO3RTeZPERpLxGyrQoaNCPME5sqip8tQmsCzm5GINjnugi8UWOuxG
qdpUQgEF5BUBdRbmmbUfWHY4tO3LC87x36G/Ty+HDn2q7xHMcpEhI9CyGHwJ9cso
ddQRRuQbm4cDhzvHTcP01BzlIgAWKGro99NIGsMBhp9FWwKUxVq5leocd1EE0DCj
n8W+NbcWOElWBHq//16lzmv9Ul87WSZkLqDUfVd8iVtuJg6KhL/9Du8n16Up4Jox
5pMfVEC3S+6cl0EbyA1ikL7uQKWjXr9dYXkBO85xNhlWVKfq8yU3Q1L81k6aWirT
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13922182602740884997729560614408052585
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssofaast-aftx.amazon.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23399829845294573997192972587017431458172002205694213201736537299920765325439033151362969334879684681522495753142208088516154513693358693278166610469781148843600121202052306544295980326144279100707056841552541358517634553567801745112264641733643230938667381896240642500935563713268699969879552136894838609769321465442722718988315380670503224189203712577130606471763092799600889950836282877891962467429393406958192775121728625789951054586929104880953357962850330811443609508692653665744117007626052051242750515731734718329727031146912114531853180371839793983542039847403650638939325399992188626090320825299529999504241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							78d26261b50c9ba4589618e20fd687f1a74da7b8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssofaast-aftx.amazon.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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