DV SSL/TLS Certificate for *.c.prod-ap-southeast-2.armapps.canary.console.amplify.aws.dev

Certificate is witin its validity period

Issued by Amazon (Amazon RSA 2048 M03)

About the *.c.prod-ap-southeast-2.armapps.canary.console.amplify.aws.dev DV SSL/TLS Certificate

This certificate with serial number 0a:43:23:51:78:80:47:ff:cd:b9:e6:ca:85:9a:55:6d for *.c.prod-ap-southeast-2.armapps.canary.console.amplify.aws.dev was issued on by Amazon.

With 2 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for *.c.prod-ap-southeast-2.armapps.canary.console.amplify.aws.dev provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Amazon

Organization: Amazon
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 0a:43:23:51:78:80:47:ff:cd:b9:e6:ca:85:9a:55:6d
Serial Number (int): 13640880186481567334262033815764096365
Serial Number Length: 124 bits, 16 octets

Subject Key Identifier: cf:06:fa:be:eb:e8:8a:b6:f1:17:1b:0c:4f:04:bb:5d:a8:cd:b0:e3
Authority Key Identifier: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (SHA-1): 37:68:06:85:80:5a:70:cf:7b:aa:03:42:c1:3a:8c:18:a5:cf:5a:b9
Fingerprint (SHA-256): a2:34:78:19:85:30:65:c2:35:46:9e:70:7a:75:d3:3a:66:9b:92:a9:72:d1:aa:57:ab:18:1f:82:f5:b4:a3:6d

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation Information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate *.c.prod-ap-southeast-2.armapps.canary.console.amplify.aws.dev
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.c.prod-ap-southeast-2.armapps.canary.console.amplify.aws.dev

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for *.c.prod-ap-southeast-2.armapps.canary.console.amplify.aws.dev in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0ng67b3TB+9LmgQQaNP
/bFgoktvI8G8EGc9RrYE/PrQAs8robNtUP+e3sgLmkyZ+01ECnVGovMqpvrsJ5QS
Vap+AaHXxfkahdastT80+RrwQmliaus6OpVBCjwensPeWlTEjV6tOQ6+7L/uhWl2
p7usvQMTfbtkCAxsgy3pXb+Tnpcbdz15A3GRUHizTr3xO0JSCFlQ+2rbq/NZ6ush
qX6BB8tfMfN88YS5emqZpFyMi5gmWdnpIq/5H8omh45x9ymEyhOVp4g+JlAADa8C
1idWqitjOjHaijDkg0wgvkm8PwfC2Ma2sxMZWhDkNUwIfYatbVmOvFG7MO3Dmf12
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13640880186481567334262033815764096365
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-08-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.c.prod-ap-southeast-2.armapps.canary.console.amplify.aws.dev'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21623181043037183793514395055314855714140717019718809274981235441371786404068670717842830332909343815425780302748138048084180453500396840753594971361126940980103406859218735605666092618824298576648125355451238175826872049171698872039090135941368511830580744530563943448921090023924907711670734253370140704337966861842890282751857214389447838538029301452419195890729013715623262914467993956366037501423933883481075335531212525261793270540686787587312589970022697538695413338913737359635336057345329182302207213190315101708613908551469546689243286277470927565933717905996253048499382597924064500599407166263334191068919
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf06fabeebe88ab6f1171b0c4f04bb5da8cdb0e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.c.prod-ap-southeast-2.armapps.canary.console.amplify.aws.dev'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.prod-ap-southeast-2.armapps.canary.console.amplify.aws.dev'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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