api.rmsstag.dev3.shopping.dmkt-sp.jp

Issued by Amazon

About this certificate

This digital certificate with serial number 0f:f1:d7:75:75:08:cc:fc:bf:ea:92:23:93:d5:6c:d4 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api.rmsstag.dev3.shopping.dmkt-sp.jp

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:f1:d7:75:75:08:cc:fc:bf:ea:92:23:93:d5:6c:d4
Serial Number (int): 21194133503660816410926930967139806420
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 33:95:dc:30:9a:fa:0d:27:6d:b5:37:79:de:d3:0a:2b:94:36:a5:a1
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): aa:4c:37:68:a2:37:4c:10:b4:12:48:0b:d2:3a:f7:2a:bc:10:bf:86
Fingerprint (sha256): 04:a2:4c:78:fe:4b:32:ae:72:17:f2:c9:a4:45:82:50:71:c4:25:4b:76:53:97:2f:78:e4:5e:a1:3b:99:83:28

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate api.rmsstag.dev3.shopping.dmkt-sp.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.rmsstag.dev3.shopping.dmkt-sp.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.rmsstag.dev3.shopping.dmkt-sp.jp

Other certificates including the domain name dmkt-sp.jp

(limited to 100 certificates)
www.dmkt-sp.jp
img.fashion.dmkt-sp.jp
apl.d.dmkt-sp.jp
dev-wv.anime.dmkt-sp.jp
adm.dev1.fashion.dmkt-sp.jp
entry.dmkt-sp.jp
sys.kids.dmkt-sp.jp
avatar-mgmt.sandbox.dmkt-sp.jp
dev3.shopping.dmkt-sp.jp
sug.stg.dtv.dmkt-sp.jp
api-selection.music.dmkt-sp.jp
test-stg.music.dmkt-sp.jp
dev9.shopping.dmkt-sp.jp
adm.dev4.fashion.dmkt-sp.jp
public-test-ts03.dev.mealkit.dmkt-sp.jp
aacdn.jp
stg.prx.cp07.kids.dmkt-sp.jp
notification.selection.music.dmkt-sp.jp
mdl.travel.dmkt-sp.jp
dev-garelay.dmkt-sp.jp
leo-pre2.dev.d.dmkt-sp.jp
creators.dmkt-sp.jp
stage.selection.music.dmkt-sp.jp
ibcms-orijin-elb.sw.job.dmkt-sp.jp
travel.dmkt-sp.jp
dev-rsm.anime.dmkt-sp.jp
dev-rsm.anime.dmkt-sp.jp
b51-czstb-p010.dev.sw.job.dmkt-sp.jp
music.dmkt-sp.jp
develop.monthly.music.dmkt-sp.jp
cms.dev4.fashion.dmkt-sp.jp
develop-api.music.dmkt-sp.jp
id-credit.com
rmsprev.dev9.shopping.dmkt-sp.jp
cs1.anime.dmkt-sp.jp
dev-stg.anime.dmkt-sp.jp
*.kids.dmkt-sp.jp
book.dmkt-sp.jp
stg.ovstp.travel.dmkt-sp.jp
sms.living2.dmkt-sp.jp
sys.kids.dmkt-sp.jp
garelay.dmkt-sp.jp
dev.shopping.dmkt-sp.jp
tv.video.dmkt-sp.jp
*.video.dmkt-sp.jp
cpsupport.test.dgame.dmkt-sp.jp
dch.dmkt-sp.jp
delivery.dmkt-sp.jp
stg.gourmet.dmkt-sp.jp
k11-cmw.dev.d.living.dmkt-sp.jp
tv.video.dmkt-sp.jp
stlog-stg.stg.d.dmkt-sp.jp
alb3.sandbox.dgame.dmkt-sp.jp
kv.anime.dmkt-sp.jp
a.anime.dmkt-sp.jp
api.rmsstag.dev3.shopping.dmkt-sp.jp
b21-ibcms.dev.sw.job.dmkt-sp.jp
b12-ibcms-orijin-elb.dev.sw.job.dmkt-sp.jp
mdl.travel.dmkt-sp.jp
a21-iacmw.dev.gp.dmkt-sp.jp
rec.d.dmkt-sp.jp
iacmw-origin-elb.stg.gp.dmkt-sp.jp
entry.stg.data.dmkt-sp.jp
prx.cp07.kids.dmkt-sp.jp
ath-connect.dev1.fashion.dmkt-sp.jp
aacdn.jp
ai-try.gourmet.dmkt-sp.jp
b11-ibopp.dev.sw.job.dmkt-sp.jp
admin.travel.dmkt-sp.jp
gp.dmkt-sp.jp
a12-version-check.dev.gp.dmkt-sp.jp
store-stlog.d.dmkt-sp.jp
*.kids.dmkt-sp.jp
sea2.d.dmkt-sp.jp
stub.prt-connect.dev1.fashion.dmkt-sp.jp
*.dmusic.dmkt-sp.jp
stg.travel.dmkt-sp.jp
leo-pre.d.dmkt-sp.jp
admin.shopping.dmkt-sp.jp
test-com04.dev.mealkit.dmkt-sp.jp
dev2-rsm.anime.dmkt-sp.jp
b12-cbexc.dev.sw.job.dmkt-sp.jp
develop-magazine-service.dmkt-sp.jp
anime.dmkt-sp.jp
rmsstag.dev3.shopping.dmkt-sp.jp
b51-czstb-p011.dev.sw.job.dmkt-sp.jp
*.dkids.docomo.ne.jp
api.rmsstag.dev1.shopping.dmkt-sp.jp
aalmcdn.jp
adm.dev4.shopping.dmkt-sp.jp
stg.prx.cp07.kids.dmkt-sp.jp
bill.stg.dgame.dmkt-sp.jp
dev2-pc.video.dmkt-sp.jp
mng.dev.ec.anime.dmkt-sp.jp
front.stg.pt.dmkt-sp.jp
aacdn.jp
dev.dl.kids.dmkt-sp.jp
c1.d.dmkt-sp.jp
aacdn.jp
staging.shopping.dmkt-sp.jp

Certificate

The complete raw certificate details for api.rmsstag.dev3.shopping.dmkt-sp.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+I7es6QTUF54O+Aq9aw
ED2lmcSA/5BtH3QbeD/AZAGLldpzOdu75ODwt0Mxa+xCLU0Udw3oqKy19Riiirw4
/ir7viMSnCEsmMOCJz9kElxjbeSPNJiNlegrZXbOd/P/91amz8xgkU2X+rWcznf2
FHPsmMIGnsAsz1mJP0dKIhrahFyKcecg/wnYe2e6qzkGdQb+txvhGkNRuh8r6HM9
FQakkjnICx0lif4jukzG2mxYYBAIYp3VqMJzl2gUcN8HEo6PcICPrdV/RtQOuurk
QOfhvlpeRZXCQRAkotlrjG8uOdLxt//Y5QEM1tZxOOt5OVVw/8YCeMTjUnerydRW
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21194133503660816410926930967139806420
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-28 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.rmsstag.dev3.shopping.dmkt-sp.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29272607773185595724883569488754791631434992863286557868269646050216542670855444503432916461376915847241219134391672728766721101832211454592027218397349843182231494066901880655191370345940337143403912022594438881403710038906302446684888036442897450692136565906943033704870051615434551330323843197017546910870054252799343733948612307457097765599257583369852335388571959655380461975326222561440580000726386569783681461524297438035867120225646798759586660917759881883924705472107072104155187589363733923305511327912154830175269976065238294070472182620947088033649030191721528652973119216625105257749062847356695687222889
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3395dc309afa0d276db53779ded30a2b9436a5a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.rmsstag.dev3.shopping.dmkt-sp.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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