accounts-stg.fsapi.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 08:eb:e5:65:d7:ce:cb:d6:c8:a5:c2:47:49:86:88:b6 was issued on by Amazon.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=accounts-stg.fsapi.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:eb:e5:65:d7:ce:cb:d6:c8:a5:c2:47:49:86:88:b6
Serial Number (int): 11858666468667940082047537475907651766
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 23:c7:8e:f5:18:ab:66:c4:1e:b8:e6:0a:ce:4b:22:89:86:b8:42:13
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 57:72:3f:29:f3:2a:fc:4f:0f:c7:e1:11:47:10:7d:a3:33:cd:af:30
Fingerprint (sha256): 04:47:d4:ec:d9:56:ca:bc:59:e9:0a:09:ad:54:a4:4e:0a:53:23:b0:a7:6a:f3:46:42:9f:61:8a:8d:b8:ff:39

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate accounts-stg.fsapi.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for accounts-stg.fsapi.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

accounts-stg.fsapi.com
token.accounts-emea-stg.fsapi.com
toucan.accounts-stg.fsapi.com
toucan.accounts-emea-stg.fsapi.com
api.accounts-emea-stg.fsapi.com

Other certificates including the domain name fsapi.com

(limited to 100 certificates)
relay.stg.withsecure.com
us2.spi.psb.fsapi.com
lorsp.sc2.fsapi.com
*.sensesdk-ci.fsapi.com
lykaal-layer3.mind.pc-ci.fsapi.com
emea.psb-regional-gateway.psb.fsapi.com
psblive.reporting-service.internal.psb-stg.fsapi.com
bigdata-labs.ds.fsapi.com
stable.epp.elements-ci.fsapi.com
toucan.accounts-apac.fsapi.com
helrdomaster02.fi.f-secure.com
portal.radar.elements-stg.withsecure.com
gustvimaster.infra-dev-services.fsapi.com
ew1.doorman.ci.gw.fsapi.com
gustvi.infra-dev-services.fsapi.com
stable.psb-ci.fsapi.com
ew1-psb-ci-latest-ecs-internal.psb-ci.fsapi.com
public.prod.ane1.cosmos-prd.fsapi.com
eu1.psb.fsapi.com
update-karma.pc.fsapi.com
mobile-dl.sp.f-secure.com
*.accounts-emea-ci.fsapi.com
ddr-dev.sensesdk-ci.fsapi.com
accounts-stg.fsapi.com
latest.psb-regional-gateway.psb-ci.fsapi.com
jenkins-staging.fi.f-secure.com
eu1.reporting-service.internal.psb.fsapi.com
helcccpmaster01.fi.f-secure.com
guts2.sp.f-secure.com
jp3.psb.fsapi.com
influxdb-mindcontrol.pc-ci.fsapi.com
ulmaster01.internalsecure.com
famp-ci.fsapi.com
savaja-layer3.mind.pc-ci.fsapi.com
doorman.sp.f-secure.com
restmc.mind.sc2.fsapi.com
client-alb.musttu.guts2-ci.fsapi.com
alb.j4a.infra-dev-services.fsapi.com
api.prd.ew1.doorman.fsapi.com
ddr-dev2.sensesdk-ci.fsapi.com
token.accounts-apac-ci-integration.fsapi.com
obus.sc.fsapi.com
api.unstable.ew1.mes-ci.fsapi.com
client.sarkar.guts2-ci.fsapi.com
ntstr.pc.fsapi.com
psbtp.micro-cosmos.internal.psb-stg.fsapi.com
obus.eu-west-1.mind.pc-ci.fsapi.com
hydra.eu-west-1.mind.pc-ci.fsapi.com
ups.ups-prd.fsapi.com
lykaal-layer3.mind.pc-ci.fsapi.com
lorsp-karma.sc2.fsapi.com
eu1.spi.psb.fsapi.com
mind-bin-feature-ex.ap-southeast-1.mind.pc.fsapi.com
public.stable.ew1.cosmos-ci.fsapi.com
dds-dev3.sensesdk-ci.fsapi.com
alb.j4a.services-ci-infra-services.fsapi.com
bump.borgs-ci.fsapi.com
relay.withsecure.com
ddr-dev2.sensesdk-ci.fsapi.com
eu-smi-eu.spi.psb.fsapi.com
sandbox.dev-lehtjo.ci.gw.fsapi.com
dp-antial.ds-ci.fsapi.com
accounts-ci-integration.fsxt.net
sebe-lb-int.eu-west-1.ele.fsapi.com
famp.fsapi.com
staging.pete.ds.fsapi.com
psblive.psb-stg.fsapi.com
redirects.ele.fsapi.com
scanner.cloudprotection.fsapi.com
monitoring.savaja.sc.fsapi.com
ew1a-splunk-indexer.infra-dev-services.fsapi.com
alb.j4a.infra-dev-services.fsapi.com
ws-ci.fsapi.com
api.unstable.ew1.mes-ci.fsapi.com
sarkar.guts2-ci.fsapi.com
cpa.ci.ew1.entitlements-ci.fsapi.com
doorman.sp.f-secure.com
ntstr.eu-west-1.mind.pc-stg.fsapi.com
doorman-beta.sp.f-secure.com
salmi-s3-api.eu-west-1.sc-ci.fsapi.com
staging.pete.ds.fsapi.com
toucan.accounts-emea-ci-integration.fsapi.com
infra-auth-proxy.ds-ci.fsapi.com
token.accounts-emea.fsapi.com
ew1b-splunk-indexer.ci-infra-services.fsapi.com
influxdb-mindcontrol-lykaal.pc-ci.fsapi.com
toucan.accounts-apac-stg.fsapi.com
api.unstable.ew1.mes-ci.fsapi.com
push-na.fsapi.com
api.int.ci.ew1.entitlements-ci.fsapi.com
accounts-ci-integration.fsxt.net
atlas.ci.fsapi.com
admin.guts2-prd.fsapi.com
psb3.batch-password-protection.internal.psb.fsapi.com
jenkins-elements02.internalsecure.com
emea4.psb.fsapi.com
rexex.kaleeri.fsapi.com
sebe-tp.fsapi.com
stable.psb-ci.fsapi.com
admin.int.ci.ew1.guts2-ci.fsapi.com

Certificate

The complete raw certificate details for accounts-stg.fsapi.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8KYNQ3g6TWlmRn0iCQLl
iyS9LTOUxnY6LJmdq5GUJlZnP7P6DzOL/+1EhoRt8DiT1W6TZCaEflSuMSx4+BJu
+08NZBAcO0MFTZz2HWzlbAKLMqeGydHniBLRW1mK47GYWF0SchEULARU0udTZksh
ZoUijoZUfRJE8I48Nq0IafTWr5bGbcBuIEErybvfr7vVk+Kn4Owx9nZRvXpeCriX
A6qXU1YZlEylkV1indYQJycAKcEKnkKyrt6aqlFY3tamTFgX4ZZRFWSDEc8qKSJU
CVtcSK1VUC3KhqqRwwGxWr3TsjfEKlbXSmvxuXs1j2tiBMRzO//Dq4tnBXO0szEh
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11858666468667940082047537475907651766
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'accounts-stg.fsapi.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30379076391566006199539694337264243905289081467251582752476162320788118293397147031835258227783418539484007227126771568358199304082451887934833136600663141277376194685124274756396143530618810494041141195801138990275987624839226022209924212806701037341993624115321891298705832811924379025600815792811947763680653017935755128484065322705484322619167242730993554324525760471170654450240713395154660485025068515052555511338395765110943478460191173344853638796333988452533492084999661501298026118906457111869636290862470680720100790387986458914092900271318518537363164766605811152583041549089394818485285505246315404140807
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							23c78ef518ab66c41eb8e60ace4b228986b84213
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (162 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts-stg.fsapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'token.accounts-emea-stg.fsapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toucan.accounts-stg.fsapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toucan.accounts-emea-stg.fsapi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.accounts-emea-stg.fsapi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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