fill-rate.ats.amazon.dev

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 02:00:65:7a:09:be:cb:da:ee:6a:75:95:0b:bf:fb:9b was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fill-rate.ats.amazon.dev

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:00:65:7a:09:be:cb:da:ee:6a:75:95:0b:bf:fb:9b
Serial Number (int): 2660514183791650977854407985246239643
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 92:82:68:a9:a3:7c:db:41:50:de:11:26:a5:92:17:2d:de:85:6e:d0
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 23:85:d8:95:8b:01:06:1e:4d:df:42:33:4c:e8:72:16:28:0b:2b:99
Fingerprint (sha256): 01:32:93:16:d0:4d:f8:9c:53:b5:05:e0:6c:4a:e8:c5:af:36:a2:50:95:56:1e:d2:68:48:fa:63:3b:d8:f6:9c

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate fill-rate.ats.amazon.dev

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fill-rate.ats.amazon.dev

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fill-rate.ats.amazon.dev

Other certificates including the domain name amazon.dev

(limited to 100 certificates)
gamma.us-east-1.nets.datacentral.amazon.dev
employees.beta.api.talent-alchemy.hr.amazon.dev
regular.us-east-1.alpha.atta.kaspian.amazon.dev
gamma.stream-manipulation.video.amazon.dev
a.prdsstpdx1.us-west-2.sampling.jihm.amazon.dev
beta.content-interception-service.metrix.music.amazon.dev
air.lmaq.last-mile.amazon.dev.lmaq.last-mile.amazon.dev
sam-dev-laijonat-test.vovi.last-mile.amazon.dev
toolshed.ots.amazon.dev
api.nhancao.alpha.nardol.business.amazon.dev
gamma.styleguides.leo.amazon.dev
us-west-2.beta.customer-identity.aee.amazon.dev
sungyenl.alpha.console.materials.sustainability.amazon.dev
api.personal.clarity-mfe.clarity.team.hrsc.pxt.amazon.dev
us-east-1.prod.wake-word-allowlisting.reaver.avs.amazon.dev
eu-west-1.beta.sblandingpageservice.advertising.amazon.dev
raven.tools.amazon.dev
us-east-1.beta.messaging.ui.bsm.selling-partners.amazon.dev
api.beta.packaging-portal.ops-integration.amazon.dev
rss-api-internal.internal.dev.rss.ring.amazon.dev
cm-eu-gamma.flex-routing.last-mile.amazon.dev
solomon.prime-video.amazon.dev
*.timlawso.physical.advertising.amazon.dev
api-ritekkum.task-management.wfm.amazon.dev
blocklistservice.us-west-2.dev.gws.ring.amazon.dev
heimdall.prime-video.amazon.dev
*.eu.iar.rbs.amazon.dev
tacs.cupid-na.idprism-auth.amazon.dev
a.prddb3.eu-west-1.ihmgtss.jihm.amazon.dev
fill-rate.ats.amazon.dev
beta.supernova.amazon.dev
api.pdc.marjohar.people.amazon.dev
wordwatcher.custodian.bm.amazon.dev
prod.devices.ateambi.accounting.amazon.dev
us-east-1.355416415502.dev.fst-portal.dex.amazon.dev
na.prod.contextual-augmentation.last-mile.amazon.dev
egreedov.email.tts.audible.amazon.dev
auth.api.chrisfll.batch.caspian.dccs.amazon.dev
alpha.hitting-bullseye.zappos.amazon.dev
alpha.euclid-remote.pricing.devices.amazon.dev
prod.assets.act.legal.amazon.dev
api.us-west-2.prod-jp.shopper-gateway.subs.f3.amazon.dev
yaayad.devo.copsassistant-cdn.pars-bpa.amazon.dev
*.eu-west-1.gamma.galactus.jihm.amazon.dev
internal-services.main.beta.eu-west-1.gulfstream.pars.amazon.dev
us-east-1.prod.configurable-param.mbe.last-mile.amazon.dev
us.beta.itinerary-manager.onroad-execution.last-mile.amazon.dev
dev.celestia.noc.amazon.dev
api.alpha.fe.tli.aces.amazon.dev
lialx.test.attribution.privacy.amazon.dev
collab.dev.eto.supply-chain.amazon.dev
coredump-parser.eink.amazon.dev
phishing.security.amazon.dev
api.sudevann.helix-dev.dse.audible.amazon.dev
auth.prototype.alps.music.amazon.dev
api.dev-austsilv.test.jurisdiction-planner.last-mile.amazon.dev
andrena.niksinn.icon.amazon.dev
cache.music.beta-na.turntable.sonic.advertising.amazon.dev
workflow.api.chrisfll.batch.caspian.dccs.amazon.dev
metrics-rhhigg.distance-assistant.opstechit.amazon.dev
us-east-1.prod.uis-man-wrangle.robotics.amazon.dev
data.ssres.beta.movement.talent.amazon.dev
eu.integ.device-automation.prime.amazon.dev
eventsinkgw.prod.gws.ring.amazon.dev
us-west-2.alpha.int.lab.dml.alexa.amazon.dev
api.alpha-mahjyoth.case.threat-detection.cs.amazon.dev
hwr.674734f2f9443597a9d855cce5bfe7c8.hotwire.ecst.amazon.dev
svc.wewanyu.test.proxy.sram.review-tooling.security.amazon.dev
neighborsapigw.prod.gws.ring.amazon.dev
beta.fe.d16g-rodeo.advertising.amazon.dev
alpha.us-west-2.alexa-automation.blink.amazon.dev
aasthame.api.permissions.vector.advertising.amazon.dev
beta.query.gale.alexa.amazon.dev
deeplink.prod.alps.music.amazon.dev
lifepi.timlawso.physical.advertising.amazon.dev
corp.api-iad.gamma.hedwig.video.amazon.dev
*.beta.psidr.payments-security.amazon.dev
beta-dub.pokey.alexa.amazon.dev
api-ritekkum.task-management.wfm.amazon.dev
genaihub.ads.amazon.dev
opensearch-dash-chchu.eu.devo.purge.percolate.p13n.amazon.dev
turn.ring-mobility.devices.amazon.dev
rss-dpd-internal.internal.dev.rss.ring.amazon.dev
us-west-2.prod.api.3d.music.amazon.dev
*.ums.gamma.us-east-1.api.compliance.amazon.dev
web.prod.eu-west-1.artifact-index.ihm.amazon.dev
prod.eu.latis.fclm.aft.amazon.dev
ers.mutescu.people.amazon.dev
hwr.f3d3ee9d29793b9cb526d592e34a8fb3.hotwire.ecst.amazon.dev
dev-1.pdx.nanobots.alexa.amazon.dev
*.srvindr-dev.estuary.pxt.amazon.dev
jp.datastash-prod.pacman.last-mile.amazon.dev
beta.ext-alexandria-quicknotate.prime-video.amazon.dev
us-west-2.beta.cx2.mts.primeair.amazon.dev
vps.pdx.prod.vx.xray.prime-video.amazon.dev
fba-i2i-console.scot.amazon.dev
alpha-6ae1e725d9.netsparker.security.amazon.dev
components.tapestry.amazon.dev
api.looc.robotics.amazon.dev
ops.chimera-beta.mlo.advertising.amazon.dev

Certificate

The complete raw certificate details for fill-rate.ats.amazon.dev in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0mkgnZksdd+lLUbkgWF
SG7voegLnWaMNfhn6/lvApW3CDM3L79oam6WSqnyw/mJvszkcSlCPg29JcrXjUlZ
JFpbZlsGwCcRdnGAJ1VPuZzHGNwjJnKKkvxgBxkjJC5i0NOAiPTeREEi9tauGpns
/DhApZnF/WRL/kmRcAseSeRqn+VY5sx50TqNfxB/RxwgUskfDWOV2mONLTP+co3M
jnfzzc1pmLWRAXKQ/qbHeHBjqbvpe8KTKdpo8QchGVAoZGb+ybLZX1j2yr4gHVIh
x8rxrnjn9ak88YIfUpFqs7nPGTkqNmv70EPIc2c3mrKOhDLMZ2efkhgveRpPJwsv
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2660514183791650977854407985246239643
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fill-rate.ats.amazon.dev'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24147830775779522850024890548390252679288186039238797963316545892543438830957869034934797452776810831682839409019119038145794132027063058158261400754044526414859677940810178753250889719830745297405726032694203720022081549132567779050056692089367607083623709532878935203278375007164384071663379853929195408853930314444044717685397318558198150822404733351403099154864566226139519725025557639405994846679288961720782444201781338926763027563035107037379083109061169589109454265737139301883750012340462413626765255020952763758535874712934666065219714445646741589527376250427591869004627274431634447283781817953586147700547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							928268a9a37cdb4150de1126a592172dde856ed0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fill-rate.ats.amazon.dev'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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