t200fe.api.cer.amazonvideo.com

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 0c:48:e7:97:bc:29:99:4e:4e:4c:a8:ed:bd:ac:d1:43 was issued on by DigiCert Inc.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=t200fe.api.cer.amazonvideo.com

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:48:e7:97:bc:29:99:4e:4e:4c:a8:ed:bd:ac:d1:43
Serial Number (int): 16329278581537953025459848592967389507
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7e:8c:68:c5:f0:16:78:db:dc:b8:40:38:3f:2a:d0:32:45:53:b1:36
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): 8c:4e:c0:a8:be:01:0d:ed:e4:d0:1f:b2:c6:e9:62:40:cd:eb:7a:66
Fingerprint (sha256): 05:16:cc:5b:8c:a1:ed:e7:17:a6:c1:81:d2:1c:91:6e:d6:b6:e4:9a:9d:c8:9a:e0:e4:26:6c:96:3b:27:79:5e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate t200fe.api.cer.amazonvideo.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for t200fe.api.cer.amazonvideo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fals.atv-ps-fe.amazon.com
atv-ps-fe.amazon.com
atv-ps-fe.amazon.co.jp
atv-ps-fe.primevideo.com
*.api.amazonvideo.com
*.eu.api.amazonvideo.com
*.na.api.amazonvideo.com
*.fe.api.amazonvideo.com
t200fe.api.cer.amazonvideo.com

Other certificates including the domain name amazonvideo.com

(limited to 100 certificates)
av-eu.amazon.com
*.eu.ec.api.amazonvideo.com
373d34d0e98bde984724670582a237e8.fe.api.amazonvideo.com
*.prod.sev.amazonvideo.com
av-eu-preflight.amazon.com
t200fe.api.cer.amazonvideo.com
373d34d0e98bde984724670582a237e8.fe.api.amazonvideo.com
*.alpha.sev.amazonvideo.com
t200eu.api.cer.amazonvideo.com
av-fe.amazon.com
atv-ps.amazon.com
t100.preprod.api.cer.amazonvideo.com
t100.api.cer.amazonvideo.com
www.primevideo.com
t200fe.api.cer.amazonvideo.com
*.ccast.api.amazonvideo.com
mock-server.dub.internal.alpha.ter.amazonvideo.com
t200eu.api.cer.amazonvideo.com
av-fe.amazon.com
373d34d0e98bde984724670582a237e8.fe.api.amazonvideo.com
373d34d0e98bde984724670582a237e8.eu.api.amazonvideo.com
*.na.ab.api.amazonvideo.com
*.alpha.sev.amazonvideo.com
*.na.ab.api.amazonvideo.com
atv-ps-fe.amazon.com
av-fe.amazon.com
atv-ext-fe.amazon.com
atv-ext.amazon.com
*.prod.sev.amazonvideo.com
av-na.amazon.com
*.prod.sev.amazonvideo.com
av-eu.amazon.com
www.primevideo.com
atv-ps-eu.amazon.com
atv-ext-fe.amazon.com
*.eu.ec.api.amazonvideo.com
*.alpha.sev.amazonvideo.com
t300.api.cer.amazonvideo.com
atv-ext-eu.amazon.com
*.alpha.sev.amazonvideo.com
atv-ps-eu.amazon.com
t400.preprod.api.cer.amazonvideo.com
primevideo.com
t100eu.api.cer.amazonvideo.com
atv-ext-fe.amazon.com
atv-ext.amazon.com
t300.api.cer.amazonvideo.com
373d34d0e98bde984724670582a237e8.eu.api.amazonvideo.com
*.ccast.api.amazonvideo.com
atv-ext-eu.amazon.com
t200eu.api.cer.amazonvideo.com
*.eu.ec.api.amazonvideo.com
atv-ext-fe.amazon.com
*.eu.ec.api.amazonvideo.com
av-eu.amazon.com
*.cloudfront.eu.api.amazonvideo.com
av-fe-preflight.amazon.com
atv-ext.amazon.com
t300.preprod.api.cer.amazonvideo.com
av-na-preflight.amazon.com
t300.api.cer.amazonvideo.com
t200.beta.ter.amazonvideo.com
*.us-east-1.prod.sev.amazonvideo.com
av-eu-preflight.amazon.com
t300.preprod.api.cer.amazonvideo.com
*.ccast.api.amazonvideo.com
*.beta.sev.amazonvideo.com
t200.beta.ter.amazonvideo.com
atv-ext-eu.amazon.com
373d34d0e98bde984724670582a237e8.fe.api.amazonvideo.com
av-fe-preflight.amazon.com
atv-ext-fe.amazon.com
atv-ext-eu.amazon.com
m.dub.t100.prod.ter.amazonvideo.com
pvvr.cdn.amazonvideo.com
av-na-preflight.amazon.com
av-us.amazon.com
www.primevideo.com
t100.beta.ter.amazonvideo.com
373d34d0e98bde984724670582a237e8.na.api.amazonvideo.com
t400.preprod.api.cer.amazonvideo.com
atv-ext-fe.amazon.com
atv-ext.amazon.com
*.amazonvideo.com
www.primevideo.com
av-fe-preflight.amazon.com
atv-ext.amazon.com
t400.api.cer.amazonvideo.com
t100.beta.ter.amazonvideo.com
atv-ext.amazon.com
*.eu-west-1.prod.sev.amazonvideo.com
t100.preprod.api.cer.amazonvideo.com
*.na.ab.api.amazonvideo.com
primevideo.com
t300.api.cer.amazonvideo.com
t200eu.api.cer.amazonvideo.com
t100.preprod.api.cer.amazonvideo.com
atv-ext-fe.amazon.com
atv-ext.amazon.com
atv-ps.amazon.com

Certificate

The complete raw certificate details for t200fe.api.cer.amazonvideo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkr6sxZVpvfb/9WGbqT3
mCPBALuarS+j34jyPQ5lMhk5dJZoehihs1lFeNz7z0iQR8d7uQkTl9+y+MZYag7w
0Tw35/bpFE7rkyfTaK67NI0HCMHEjoOf3tJ+0RiS7CU3uwQSCoRgWUGGveqIzSEb
++oMG3HR4krPv8JP9ZDmfYlnQ6CgF6yFXjZwiaKlPkDMbPYrhX7wum6VCMCK9l9+
ABMLomJYeKK2zp8y0dckMLVMxzhtKf8P5CGkxReaEnLnWkYfyr9aID3YiEAJOqql
2FextHGUcO4wfyO0Sj/xPSmTuSqavHeUsbd634jHYLuUW785bFibOdDUQu6vJrLL
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16329278581537953025459848592967389507
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 't200fe.api.cer.amazonvideo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21497485512698138560964666581305306538899411102363357752466012633318644825127066270641079124308021141351674902805274834186411315851261819403650622959402406183578143637385002054352530690833006690329823106477117556355830572441485145619900227609455401307347748705854558301670581202181843008469610128782896240368899040673860753319140862773181911397309569727666598944231111200271233679298024268257452609205025612178012528670452726997222160914436871083114718780048795577767457573699240043769844067438022881547575137749781506383957189010422197964337940277522559648722803772422762006584040776850379877597417845410946387987287
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7e8c68c5f01678dbdcb840383f2ad0324553b136
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (235 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fals.atv-ps-fe.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atv-ps-fe.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atv-ps-fe.amazon.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atv-ps-fe.primevideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.api.amazonvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu.api.amazonvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.na.api.amazonvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fe.api.amazonvideo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't200fe.api.cer.amazonvideo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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