eu.beta.irene.auditing.tfs.amazon.dev

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 04:71:6c:11:9b:30:8b:ea:56:18:de:55:1c:eb:d8:1e was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=eu.beta.irene.auditing.tfs.amazon.dev

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:71:6c:11:9b:30:8b:ea:56:18:de:55:1c:eb:d8:1e
Serial Number (int): 5905833423298921829871872644997699614
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 21:48:f9:ff:5e:2f:e3:6e:24:14:c1:70:4a:6c:fb:74:86:8b:36:c2
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 90:7d:c2:e8:08:ef:f3:a8:a4:f2:c7:e8:db:09:ce:9c:c0:26:cc:2f
Fingerprint (sha256): 01:de:e6:61:15:0d:95:a6:85:12:e1:2e:ae:82:48:92:da:d1:d4:59:2a:76:68:3f:a5:99:2a:ed:a8:3d:cc:13

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate eu.beta.irene.auditing.tfs.amazon.dev

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eu.beta.irene.auditing.tfs.amazon.dev

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eu.beta.irene.auditing.tfs.amazon.dev

Other certificates including the domain name amazon.dev

(limited to 100 certificates)
gamma.us-east-1.nets.datacentral.amazon.dev
eu.online-panel.advertising.amazon.dev
sbbordov.eboss-wds.wfm.amazon.dev
employees.beta.api.talent-alchemy.hr.amazon.dev
regular.us-east-1.alpha.atta.kaspian.amazon.dev
peru-rules-visualizer.dmwita.people.amazon.dev
na.online-panel.advertising.amazon.dev
gamma.stream-manipulation.video.amazon.dev
us-west-2.personal-harsunda.opus-se.pharmacy.amazon.dev
a.prdsstpdx1.us-west-2.sampling.jihm.amazon.dev
api.prod.otto.ats.fintech.amazon.dev
saitarud.planofrecord.nasctech.amazon.dev
grcsecuritydevo.ring.amazon.dev
amira.magangal.people.amazon.dev
prod.us-west-2.manage.ihm.amazon.dev
beta.api.assessments.security.amazon.dev
beta.content-interception-service.metrix.music.amazon.dev
air.lmaq.last-mile.amazon.dev.lmaq.last-mile.amazon.dev
sam-dev-laijonat-test.vovi.last-mile.amazon.dev
toolshed.ots.amazon.dev
api.nhancao.alpha.nardol.business.amazon.dev
gamma.styleguides.leo.amazon.dev
us-west-2.beta.customer-identity.aee.amazon.dev
api.weizhedo.dev.afi-risk-portal.audible.amazon.dev
prod.us-east-1.seller-performance.seller-services.amazon.dev
gamma.webex.uc.amazon.dev
*.sandbox.sentrypatrolservice.coro.amazon.dev
varshovi.dev.smartforms.pxt.amazon.dev
bryaustiuse.concert.atoz.amazon.dev
beta.mcp.email.amazon.dev
sungyenl.alpha.console.materials.sustainability.amazon.dev
*.usawesta2aalphaadropabhag.reverse-logistics.devices.amazon.dev
query-aspect.us-east-1.beta.retrieval.nile.amazon.dev
alpha.digiscan.finauto.amazon.dev
devo.us-east-1.data-controller-management.alexa.amazon.dev
api.personal.clarity-mfe.clarity.team.hrsc.pxt.amazon.dev
alpha.inventory-history.aft.amazon.dev
us-east-1.prod.wake-word-allowlisting.reaver.avs.amazon.dev
eu-west-1.beta.sblandingpageservice.advertising.amazon.dev
meikanp.caspian-payments-cn.royalties.digital.amazon.dev
mscampos.credential-manager.cartorio.intech.amazon.dev
alb.teammanagement.dev.adwanima.people.amazon.dev
raven.tools.amazon.dev
a.alphpdx.us-west-2.alpha.ihmfds.jihm.amazon.dev
meikanp.caspian-payments.royalties.digital.amazon.dev
us-east-1.beta.messaging.ui.bsm.selling-partners.amazon.dev
api.piranha.igt.amazon.dev
naive-ingest.beta.telemetry.pxt.amazon.dev
naive-ingest.ibrasde.beta.telemetry.pxt.amazon.dev
compass.icon.amazon.dev
api.beta.packaging-portal.ops-integration.amazon.dev
rss-api-internal.internal.dev.rss.ring.amazon.dev
vpce.cs-dockit-backend-beta-us-east-1.arysk.people.amazon.dev
api.salzhang.us-west-2.istanbul-midware.ams.ascs-cpp.amazon.dev
cm-eu-gamma.flex-routing.last-mile.amazon.dev
beta.piper.amazon.dev
*.pdx.alpha.admin.tempus.games.amazon.dev
us-east-1.prod.amber-dashboard.kanga.advertising.amazon.dev
workflow.api.beta.batch.caspian.dccs.amazon.dev
solomon.prime-video.amazon.dev
*.taiwoflb.document-cost-repository.intech.amazon.dev
*.timlawso.physical.advertising.amazon.dev
api-ritekkum.task-management.wfm.amazon.dev
blocklistservice.us-west-2.dev.gws.ring.amazon.dev
api.gamma.us-west-2.tardis.kuiper.amazon.dev
api.gamma.account-management.acs.amazon.dev
alpha.eu.art.aces.amazon.dev
heimdall.prime-video.amazon.dev
eds-alb.bilarm.people.amazon.dev
us-west-2.prod.fgdr.helis.infosec.amazon.dev
*.eu.iar.rbs.amazon.dev
ksems.ellyland.people.amazon.dev
tacs.cupid-na.idprism-auth.amazon.dev
alpha.us-east-1.afs.borarthy.people.amazon.dev
beta.gateway.secint.amazon.dev
us-west-2.beta.seller-data.csba.seller-services.amazon.dev
*.secondary.us-west-2.alpha.galactus.jihm.amazon.dev
a.prddb3.eu-west-1.ihmgtss.jihm.amazon.dev
*.staging-beta.pwa.goblin.alexa.amazon.dev
fill-rate.ats.amazon.dev
nike.advisor.amazon.dev
us-west-2.beta.linky.prime-video.amazon.dev
api.us-west-2.beta.pdnewsletterservice.kids.amazon.dev
i.api.us-east-1.buildtransshipadaptor.jihm.amazon.dev
beta.supernova.amazon.dev
beta.alexeyma.people.amazon.dev
api.pdc.marjohar.people.amazon.dev
alpha.usamazon.gateway.career-profile.hr.amazon.dev
wordwatcher.custodian.bm.amazon.dev
beta.cap-and-release.mop.amazon.dev
prod.devices.ateambi.accounting.amazon.dev
poet-internal.ordering.amazon.dev
us-east-1.355416415502.dev.fst-portal.dex.amazon.dev
na.prod.contextual-augmentation.last-mile.amazon.dev
trck.cnn.gamma-eu.turntable.sonic.advertising.amazon.dev
hwr.dcf6d4111ccc3c70914441a2e9c95828.hotwire.ecst.amazon.dev
egreedov.email.tts.audible.amazon.dev
na.gamma.jury-dispute-resolution.auditing.tfs.amazon.dev
golddm.oasis.opstechit.amazon.dev
auth.api.chrisfll.batch.caspian.dccs.amazon.dev

Certificate

The complete raw certificate details for eu.beta.irene.auditing.tfs.amazon.dev in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsX/p0sFoaVCXBGcw/zz3
a5HhnfNn4ePLvRkKUdRniQ8ss7g2gHeq6Ia9t+3Pn9BE/1IfF40irNgkY16Sq38Z
Lqbv2VimXJTJqmT+qeqZpaUr7/uNTKCa+V4cwE/lgBJgR14bk0L5EbhQA/nuIGa6
GJhjOjYcj//665OpK7or7u+AtmHtkM3pbSDSbIRc9d5jcEvBZ36N/IuYPkDUdUgr
xJqsghYGgVL73iC2TdMmWfxUR6vmzCDV6WAdCxO/UVgGkYKHmrdQRFraQPsOA1lQ
M5rWZgHUCpPt0j9zpVLeoTwpSeBHbw8mb8xZMEYHRPoG36/Pbb7SVwSY54cgSWRV
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5905833423298921829871872644997699614
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eu.beta.irene.auditing.tfs.amazon.dev'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22407256413677492592335616835072009833835315708360744813705213570449269967077295535530126034556275868208043572825156496344873572955938575743862934882620267813884108341757615409257551462776778325583758362592157704040269932276536102077067602369404563576497279014966588263928505281269128725407425430441912418005371596695414472698757434006321233700273755223564634566155254102952059274244689649790618776856219198587734858742359455260277496817239522737757801034098063838300496013387085972630654867876020892818721202903702612754804147926104632641361233775145287619134644903889190125714221005989283398275396293105521300624707
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2148f9ff5e2fe36e2414c1704a6cfb74868b36c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu.beta.irene.auditing.tfs.amazon.dev'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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