useast1-ush-web-microsites-np.use.ucdp.net

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 08:85:e2:22:b1:32:88:75:9b:98:74:08:0a:7a:af:6f was issued on by Amazon.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=useast1-ush-web-microsites-np.use.ucdp.net

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:85:e2:22:b1:32:88:75:9b:98:74:08:0a:7a:af:6f
Serial Number (int): 11328986021632347261009677122325360495
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 23:85:95:6d:14:b1:2c:e8:93:a0:84:b4:7b:3b:f2:45:7a:d1:f4:7a
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 7f:6a:c6:34:b2:d6:88:61:3d:1b:13:e2:52:25:85:38:59:e2:66:a9
Fingerprint (sha256): 04:b1:90:09:31:26:00:d1:8c:7b:c3:69:cd:66:9d:d6:e8:5a:7c:03:78:5e:bc:95:ee:33:46:84:04:9a:41:00

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate useast1-ush-web-microsites-np.use.ucdp.net

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for useast1-ush-web-microsites-np.use.ucdp.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

useast1-ush-web-microsites-np.use.ucdp.net
useast1-ush-web-microsites-uat.use.ucdp.net
useast1-ush-web-microsites-qa.use.ucdp.net
useast1-ush-web-microsites-stg.use.ucdp.net
useast1-ush-web-microsites-feature2.use.ucdp.net
useast1-ush-web-microsites-feature1.use.ucdp.net
useast1-ush-web-microsites-feature3.use.ucdp.net
useast1-ush-web-microsites-dev.use.ucdp.net

Other certificates including the domain name ucdp.net

(limited to 100 certificates)
www.universalorlando.com
sphere-o.ucdp.net
p406-qa.use.ucdp.net
cred-stg02.use.ucdp.net
secure.universalstudios.com
cred-qa.use.ucdp.net
cred-qa.use.ucdp.net
usoqdtvtendvip.use.ucdp.net
acp.use.ucdp.net
secure.universalstudios.com
mdmae.use.ucdp.net
ushdevservices.use.ucdp.net
cloudant-stg02.use.ucdp.net
secure.universalstudios.com
validfill.use.ucdp.net
loc-prod.use.ucdp.net
useast1-ush-web-microsites-np.use.ucdp.net
www.universalorlando.com
ticketsqa.universalorlando.com
uoconsul.use.ucdp.net
cred-stg.use.ucdp.net
cs-qa.use.ucdp.net
ush-vpn.ucdp.net
utils-uat.use.ucdp.net
www.universalorlando.com
rms.ucdp.net
www.universalorlando.com
usoqdtvtmmvip.use.ucdp.net
hhnweb-stg02.use.ucdp.net
fraud-stg02.use.ucdp.net
hhnweb-uat-o.ucdp.net
hhnweb-dev.use.ucdp.net
inter-stg.use.ucdp.net
guest-dev.use.ucdp.net
apip-qa02.use.ucdp.net
tucppm.ucdp.net
lbqaegalaxy.use.ucdp.net
uniphd1-web.use.ucdp.net
utils-uat.use.ucdp.net
guest-uat.use.ucdp.net
et-dev.use.ucdp.net
tmt.use.ucdp.net
www.universalorlando.com
inter-dev.use.ucdp.net
usopmadmvip01.use.ucdp.net
utils-prod.use.ucdp.net
secure.universalstudios.com
hhnweb-qa.use.ucdp.net
wcs-prod.use.ucdp.net
ticketsqa.universalorlando.com
hhnweb-qa.use.ucdp.net
store.universalstudioshollywood.com
ticketsqa.universalorlando.com
hhnweb-qa-o.ucdp.net
www.universalorlando.com
loc-stg02.use.ucdp.net
utils-dev.use.ucdp.net
sphere-o.ucdp.net
creative.ucdp.net
secure.universalstudios.com
calend-dev.use.ucdp.net
minion.ucdp.net
uniphd1-webnew.use.ucdp.net
hhnweb-uat-o.ucdp.net
utils-qa.use.ucdp.net
spheresvc-o.ucdp.net
hhnweb-qa.use.ucdp.net
minionwcf.ucdp.net
hub-dev.use.ucdp.net
cloudant-uat.use.ucdp.net
www.universalorlando.com
secure.universalstudios.com
www.universalorlando.com
www.universalorlando.com
shaggy.ucdp.net
inv-stg02.use.ucdp.net
folio-qa.use.ucdp.net
services-qa.ucdp.net
www.universalorlando.com
hhnweb-qa-o.ucdp.net
ushwebstore.nbcuni.com
usor7psnipe01.use.ucdp.net
geoip-prod.use.ucdp.net
inter-stg02.use.ucdp.net
ticketsqa.universalorlando.com
ticketsqa.universalorlando.com
ticketsqa.universalorlando.com
useast1-ush-web-content-np.use.ucdp.net
mdmae.use.ucdp.net
cp.use.ucdp.net
rest-dev.use.ucdp.net
mdmae-dev.use.ucdp.net
ushwebstore.nbcuni.com
webmail.use.ucdp.net
guest-stg.use.ucdp.net
hhnweb-qa-o.ucdp.net
inter-stg02.use.ucdp.net
ticketsqa.universalorlando.com
p406-dev02.use.ucdp.net
creativeqa.ucdp.net

Certificate

The complete raw certificate details for useast1-ush-web-microsites-np.use.ucdp.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8AMSmzQwHXVyCPZgHri
3HLE6GGnO9TS1V6KDJWzaXbHo8sQUsRwZQhXifQErsBCvutu1oNCMzdzQk/6crr3
B5+9XQlA2VvdLMvdvi+CDoz74A0rnybkC8uaRrEOLHm12sL+COY6ivgGRqZTEexP
S+izzvyJZnmIqVyqvj/I5xSwMtq/XlfPipIPqE+HLY64cjApqS+F6UlloqA768mf
+FT6Evvw5JJsFVe1w9ryenE/XlgQzvuvT74LFJJfNROqWl0IZd0hSs7Uz4sAaAyA
1XcwzncEbC/CjUzA3zFlXjx9WC/WvRyWOOdS8JDs7jCm5t317AcQ9Wdx/Usxx6iQ
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11328986021632347261009677122325360495
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'useast1-ush-web-microsites-np.use.ucdp.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25721078311761578500453548303369042944667543758099563443658499798133985464363192323830746193400722944521370788349587390803438543767694977570233600870446381025761514634533668707777110024557873204533071860078568572439218696631950439815455594324733118572221284147120734547133002251163359194103806809282211166068979122388057636826083268175542399905455674320935220040353863878507809447773156079109020273192733295226619983980703377956869707422295232133481780151130289469338744394911115433225229777206016583361627668013243379999647985395660424239156401915058140808777978138521978638409166802459619592257671696481979187368017
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2385956d14b12ce893a084b47b3bf2457ad1f47a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (377 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useast1-ush-web-microsites-np.use.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useast1-ush-web-microsites-uat.use.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useast1-ush-web-microsites-qa.use.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useast1-ush-web-microsites-stg.use.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useast1-ush-web-microsites-feature2.use.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useast1-ush-web-microsites-feature1.use.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useast1-ush-web-microsites-feature3.use.ucdp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'useast1-ush-web-microsites-dev.use.ucdp.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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