*.chat.twitch.tv

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 07:54:a9:9b:75:d5:23:d6:75:f0:d6:a5:42:38:cc:77 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.chat.twitch.tv

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:54:a9:9b:75:d5:23:d6:75:f0:d6:a5:42:38:cc:77
Serial Number (int): 9744188950666960062001134966951955575
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ee:b1:0f:03:d1:58:ae:b4:d7:6a:f7:d8:ca:08:95:f5:4d:0d:a9:0f
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 79:c4:74:9a:8e:2d:a7:8f:05:de:cc:e9:e2:dc:c6:c3:96:44:dc:5a
Fingerprint (sha256): 04:9c:66:62:5f:85:72:b2:7b:46:83:98:bd:14:c9:fe:df:5d:43:a2:1a:30:7d:da:16:6d:37:5d:42:0b:da:39

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.chat.twitch.tv

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.chat.twitch.tv

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.chat.twitch.tv

Other certificates including the domain name twitch.tv

(limited to 100 certificates)
cartman.prod.internal.us-west-2.twitch.tv
watch.twitch.tv
imgix4.map.fastly.net
panels-staging.twitch.tv
*.prod.us-west2.twitch.tv
twitch.tv
jp.blog.twitch.tv
it.blog.twitch.tv
imgix4.map.fastly.net
blog.twitch.tv
tv.twitch.tv
dns-vetting1f.map.fastly.net
imgix4.map.fastly.net
devstatus.twitch.tv
panels-images-staging.twitch.tv
devstatus.twitch.tv
prod.25.slot.cdn.salesforce-communities.com
m.twitch.tv
dns-vetting1f.map.fastly.net
*.twitch.tv
prod.25.slot.cdn.salesforce-communities.com
twitch.map.fastly.net
bemol-status.linxcommerce.com.br
assets.help.twitch.tv
twitch.tv
countess.twitch.tv
na85-1.cdn.salesforce-communities.com
statuspage.io
statuspage.io
tr.blog.twitch.tv
statuspage.io
spade.twitch.tv
assets.help.twitch.tv
*.pubsub-edge.twitch.tv
statuspage.io
id-cdn.twitch.tv
devstatus.twitch.tv
na85-1.cdn.salesforce-communities.com
*.chat.twitch.tv
twitch.tv
extensions-discovery-images.twitch.tv
twitch.tv
vmetric.twitch.tv
tv.twitch.tv
internal.passport.twitch.tv
connections.prod.internal.us-west-2.twitch.tv
cartman.staging.internal.us-west-2.twitch.tv
devstatus.twitch.tv
na85-1.cdn.salesforce-communities.com
*.twitch.tv
pubsub-edge-darklaunch.twitch.tv
uploads.twitch.tv
prod.25.slot.cdn.salesforce-communities.com
data.us-west-2.di.xarth.tv
dns-vetting1f.map.fastly.net
tv.twitch.tv
devstatus.twitch.tv
bemol-status.linxcommerce.com.br
id-cdn.twitch.tv
dns-vetting1f.map.fastly.net
cis.blog.twitch.tv
na75-2.cdn.salesforce-communities.com
twitchboard-prod.twitch.tv
devstatus.twitch.tv
bemol-status.linxcommerce.com.br
panels-images-prod.twitch.tv
extensions.sings.twitch.tv
dev.twitch.tv
compass.networkstatus.co.nz
blueprint.us-west-2.di.xarth.tv
*.darklaunch.tmi-room.twitch.a2z.com
discourse.design.twitch.tv
na85-1.cdn.salesforce-communities.com
watch.twitch.tv
*.staging.us-west2.twitch.tv
contributorstatus.crowdflower.com
devstatus.twitch.tv
*.staging.irc-edge.twitch.a2z.com
prod.25.slot.cdn.salesforce-communities.com
passport.twitch.tv
fr.blog.twitch.tv
dev.passport.twitch.a2z.com
extensions-discovery-images.twitch.tv
*.twitch.tv
vmetric.twitch.tv
dns-vetting1f.map.fastly.net
bemol-status.linxcommerce.com.br
id-cdn.twitch.tv
m.twitch.tv
fr.blog.twitch.tv
na85-1.cdn.salesforce-communities.com
link.twitch.tv
watch.twitch.tv
assets.help.twitch.tv
origin.edge-beta.ads.twitch.tv
imgix4.map.fastly.net
pubsub-edge-darklaunch.twitch.tv
gds-vhs-drops-campaign-images.twitch.tv
prod.25.slot.cdn.salesforce-communities.com
dragonfly.twitch.tv

Certificate

The complete raw certificate details for *.chat.twitch.tv in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMVEDrnu0QNpDx828A0c
zQ2iEJuV032k6UMfPDcNk6D5/NKOvMfDjewcLpDTY6o84Pi2aB2VLTwMGlItTZJk
vhW8aYzf3BNL0F9dGeXeaRcx3wlP2P8WpwHzKWStaQJb5PN0C38gxkBH7jbwHdK8
7KD0hhUrvToiQ4GQPNFFyLFUHQNtJgM4NRGVJmrlSz4esvRX5PvlOipvxY9ElFnJ
z7zyhHp8NHqmvupq7Te7HIoMJYnh2Ns4AOQfYl0I41lt3eijEhl2FCM3Zwq5w0z9
QdGwVUw+yHS/tF9zX2EFh9Ym9XMZF0S/uy1KbJ63OoKWuFuh03JV9T0GRMthDZWj
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9744188950666960062001134966951955575
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.chat.twitch.tv'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22315217090020508340710825192858976998317694983694301584049198268733405194027197936942183690526811890827777590467566055694167907381387625868578122430604338689360363878370501508300502013860214566186912427527052794986732571847430464897184064546931483247367832835512892426238489187816366308439112945918039637577449875344902173319249880927775286601630620863103949565292292962260554643744393191528765652630760640930100450090615396859419184204646391188750578738308265266831679338045283541142928000926113466486099221926423093005295211854934477229937436836563494028444996155977865459471622689908703610496488238537857519952741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eeb10f03d158aeb4d76af7d8ca0895f54d0da90f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chat.twitch.tv'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005ea0ce7fb97240616b37895a28099352d4e9142b662354a2605676a68126d92efd8d54263e5b4e1aa670518c10bb3180c9cc6a1ce691eae0f96a0055880b7c3d20264c97ceaffa15b75ca2f5f69a37f9dad170dd54b8870205609c23ef0b4d780e0fc13aff30dfb93f7162f85452c0390afa962debbf03e60255dae142d69f165f08b381fdc151a457788f1e5c9a5c258230031dda4a86290613a7e7dd683ba046d2d53eab98b683caabd24cf95a7869c0db5261a698c585d4cf7d77efb6276093510011ca5a1d681a46453de113288373e831ed07c62a603b36931098ec0bc7ae800b583d682b890d854d39e741693c90867cd5ff058134c6b7aebde97e465f