*.eu-prod.seller-eligibility-service.xbf.aglt.amazon.dev

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 07:8f:f4:41:dd:16:cb:bb:cb:a1:9e:6e:9f:09:4c:6a was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.eu-prod.seller-eligibility-service.xbf.aglt.amazon.dev

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:8f:f4:41:dd:16:cb:bb:cb:a1:9e:6e:9f:09:4c:6a
Serial Number (int): 10052048547462491539131026717297691754
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 8a:5e:fd:32:eb:52:63:58:c2:77:1b:43:87:e8:1c:90:21:6b:21:28
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 78:ba:3a:3b:ac:17:a0:10:7b:12:ce:b7:6a:fc:71:64:13:5c:49:3e
Fingerprint (sha256): 02:0e:d0:59:70:e6:d6:57:37:54:8c:2a:f1:cb:f1:f2:c9:22:f2:5b:89:66:c2:0a:84:03:9f:ca:d1:2c:b1:73

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate *.eu-prod.seller-eligibility-service.xbf.aglt.amazon.dev

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.eu-prod.seller-eligibility-service.xbf.aglt.amazon.dev

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.eu-prod.seller-eligibility-service.xbf.aglt.amazon.dev
nlb.eu-prod.seller-eligibility-service.xbf.aglt.amazon.dev
alb.eu-prod.seller-eligibility-service.xbf.aglt.amazon.dev

Other certificates including the domain name amazon.dev

(limited to 100 certificates)
gamma.us-east-1.nets.datacentral.amazon.dev
employees.beta.api.talent-alchemy.hr.amazon.dev
regular.us-east-1.alpha.atta.kaspian.amazon.dev
peru-rules-visualizer.dmwita.people.amazon.dev
na.online-panel.advertising.amazon.dev
gamma.stream-manipulation.video.amazon.dev
a.prdsstpdx1.us-west-2.sampling.jihm.amazon.dev
api.prod.otto.ats.fintech.amazon.dev
saitarud.planofrecord.nasctech.amazon.dev
amira.magangal.people.amazon.dev
prod.us-west-2.manage.ihm.amazon.dev
beta.api.assessments.security.amazon.dev
beta.content-interception-service.metrix.music.amazon.dev
air.lmaq.last-mile.amazon.dev.lmaq.last-mile.amazon.dev
sam-dev-laijonat-test.vovi.last-mile.amazon.dev
toolshed.ots.amazon.dev
api.nhancao.alpha.nardol.business.amazon.dev
gamma.styleguides.leo.amazon.dev
us-west-2.beta.customer-identity.aee.amazon.dev
api.weizhedo.dev.afi-risk-portal.audible.amazon.dev
prod.us-east-1.seller-performance.seller-services.amazon.dev
gamma.webex.uc.amazon.dev
*.sandbox.sentrypatrolservice.coro.amazon.dev
bryaustiuse.concert.atoz.amazon.dev
beta.mcp.email.amazon.dev
sungyenl.alpha.console.materials.sustainability.amazon.dev
*.usawesta2aalphaadropabhag.reverse-logistics.devices.amazon.dev
alpha.digiscan.finauto.amazon.dev
api.personal.clarity-mfe.clarity.team.hrsc.pxt.amazon.dev
alpha.inventory-history.aft.amazon.dev
us-east-1.prod.wake-word-allowlisting.reaver.avs.amazon.dev
eu-west-1.beta.sblandingpageservice.advertising.amazon.dev
meikanp.caspian-payments-cn.royalties.digital.amazon.dev
raven.tools.amazon.dev
a.alphpdx.us-west-2.alpha.ihmfds.jihm.amazon.dev
meikanp.caspian-payments.royalties.digital.amazon.dev
us-east-1.beta.messaging.ui.bsm.selling-partners.amazon.dev
api.piranha.igt.amazon.dev
naive-ingest.beta.telemetry.pxt.amazon.dev
naive-ingest.ibrasde.beta.telemetry.pxt.amazon.dev
api.beta.packaging-portal.ops-integration.amazon.dev
rss-api-internal.internal.dev.rss.ring.amazon.dev
cm-eu-gamma.flex-routing.last-mile.amazon.dev
beta.piper.amazon.dev
*.pdx.alpha.admin.tempus.games.amazon.dev
workflow.api.beta.batch.caspian.dccs.amazon.dev
solomon.prime-video.amazon.dev
*.timlawso.physical.advertising.amazon.dev
api-ritekkum.task-management.wfm.amazon.dev
blocklistservice.us-west-2.dev.gws.ring.amazon.dev
api.gamma.us-west-2.tardis.kuiper.amazon.dev
api.gamma.account-management.acs.amazon.dev
heimdall.prime-video.amazon.dev
*.eu.iar.rbs.amazon.dev
ksems.ellyland.people.amazon.dev
tacs.cupid-na.idprism-auth.amazon.dev
beta.gateway.secint.amazon.dev
us-west-2.beta.seller-data.csba.seller-services.amazon.dev
*.secondary.us-west-2.alpha.galactus.jihm.amazon.dev
a.prddb3.eu-west-1.ihmgtss.jihm.amazon.dev
*.staging-beta.pwa.goblin.alexa.amazon.dev
fill-rate.ats.amazon.dev
beta.supernova.amazon.dev
beta.alexeyma.people.amazon.dev
api.pdc.marjohar.people.amazon.dev
alpha.usamazon.gateway.career-profile.hr.amazon.dev
wordwatcher.custodian.bm.amazon.dev
prod.devices.ateambi.accounting.amazon.dev
us-east-1.355416415502.dev.fst-portal.dex.amazon.dev
na.prod.contextual-augmentation.last-mile.amazon.dev
trck.cnn.gamma-eu.turntable.sonic.advertising.amazon.dev
hwr.dcf6d4111ccc3c70914441a2e9c95828.hotwire.ecst.amazon.dev
egreedov.email.tts.audible.amazon.dev
na.gamma.jury-dispute-resolution.auditing.tfs.amazon.dev
golddm.oasis.opstechit.amazon.dev
auth.api.chrisfll.batch.caspian.dccs.amazon.dev
pi.alpha.pdx.spectra.fintech.amazon.dev
jmcmanu.beta.euclid.devices.amazon.dev
prod.pbgcs.cetech.amazon.dev
hadzikos.people.amazon.dev
alpha.memorydatabase.lab126.amazon.dev
alpha.hitting-bullseye.zappos.amazon.dev
alpha.euclid-remote.pricing.devices.amazon.dev
*.bba.tool.amazon.dev
webapp-aemilia.asdn.amazon.dev
prod.assets.act.legal.amazon.dev
api.us-west-2.prod-jp.shopper-gateway.subs.f3.amazon.dev
*.open-search.coffee.selling-partners.amazon.dev
eu.beta.irene.auditing.tfs.amazon.dev
pi.beta.iad.spectra.fintech.amazon.dev
beta.mcp.email.amazon.dev
acmantis.na.devo.markkyle.people.amazon.dev
yaayad.devo.copsassistant-cdn.pars-bpa.amazon.dev
admin-console.alpha.cases.pxt.amazon.dev
beta.talent-alchemy.hr.amazon.dev
eu-west-1.prod.transcentral.ctt.amazon.dev
eu-west-1.gamma.icemaker.affs.amazon.dev
closed-loop-feedback.email.vector.advertising.amazon.dev
*.eu-west-1.gamma.galactus.jihm.amazon.dev
beta.strong-logger.fee.selling-partners.amazon.dev

Certificate

The complete raw certificate details for *.eu-prod.seller-eligibility-service.xbf.aglt.amazon.dev in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8y/AaE70iC8TaxqR0rCx
wpSIJY8zF1CctYprNIKN0rX3xlT3QIjhiNk8EYxZRkE1+8SgPh5TYbHLBjAAM3xA
T9uSPiqh8ng+CBa1vemxQC+g6pelwx4hJ6Z9qNRim87osDAa3nejbe9jLiVdSOr+
WYPJjrVEXwGjUnpBrcM3oVmFb1AiJUeU0HYslnn6OpW3s0542pISJSepK2itfS7u
Qs7BpxwqD+8ELzUhYXomqjsuvM9i1oVQz9OtVHxPlzawIzcNp5ghjlb7Q7xKx5iK
MJSvOCi9k6EBimu41ZCbHTgA6NivBTy8y8xTSGTHq36Q67SJSdLwt3Nk8Pfh5tmu
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10052048547462491539131026717297691754
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.eu-prod.seller-eligibility-service.xbf.aglt.amazon.dev'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30699455294195840377614423923684883948554104640870611671239919028060910931391328416036474623276867004137998345123945333121614321870603052829043195153640571849239970729943787941525563058398080021554098246291512808171119174131320077449780098900157887036383862665046396736058053506810816431285011477601197333191267349055036807454738697294357299096806845792138136918551930513126148295427707053655018268722531326145617358488079596395827803526180639551819341189958168436949434405331546178389086122365179289072682225733547969036085665065538246085633132342117795773704133117253167297292457626059412651551117682571963881074339
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8a5efd32eb526358c2771b4387e81c90216b2128
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (181 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu-prod.seller-eligibility-service.xbf.aglt.amazon.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nlb.eu-prod.seller-eligibility-service.xbf.aglt.amazon.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alb.eu-prod.seller-eligibility-service.xbf.aglt.amazon.dev'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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