atoz.cupid-na.idprism-auth.amazon.dev

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 03:80:f1:ab:41:0e:f0:b3:18:43:cf:2a:5b:68:53:f2 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=atoz.cupid-na.idprism-auth.amazon.dev

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:80:f1:ab:41:0e:f0:b3:18:43:cf:2a:5b:68:53:f2
Serial Number (int): 4657199614112062818470805540153349106
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 61:cc:34:e8:eb:28:e5:04:de:6b:a0:d1:06:21:98:9d:b2:c8:02:0c
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 9d:74:65:86:25:4e:d3:4a:9a:ca:cb:a3:e3:9d:1e:9c:a4:a1:43:8b
Fingerprint (sha256): 05:a5:68:8f:57:31:a4:9d:49:46:f4:d3:56:4b:cb:d4:36:57:ca:df:3e:f3:38:c3:42:15:aa:ef:65:1b:06:7d

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate atoz.cupid-na.idprism-auth.amazon.dev

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for atoz.cupid-na.idprism-auth.amazon.dev

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

atoz.cupid-na.idprism-auth.amazon.dev

Other certificates including the domain name amazon.dev

(limited to 100 certificates)
employees.beta.api.talent-alchemy.hr.amazon.dev
regular.us-east-1.alpha.atta.kaspian.amazon.dev
gamma.stream-manipulation.video.amazon.dev
beta.content-interception-service.metrix.music.amazon.dev
air.lmaq.last-mile.amazon.dev.lmaq.last-mile.amazon.dev
sam-dev-laijonat-test.vovi.last-mile.amazon.dev
api.nhancao.alpha.nardol.business.amazon.dev
gamma.styleguides.leo.amazon.dev
us-west-2.beta.customer-identity.aee.amazon.dev
sungyenl.alpha.console.materials.sustainability.amazon.dev
us-east-1.prod.wake-word-allowlisting.reaver.avs.amazon.dev
eu-west-1.beta.sblandingpageservice.advertising.amazon.dev
us-east-1.beta.messaging.ui.bsm.selling-partners.amazon.dev
api.beta.packaging-portal.ops-integration.amazon.dev
cm-eu-gamma.flex-routing.last-mile.amazon.dev
solomon.prime-video.amazon.dev
*.timlawso.physical.advertising.amazon.dev
api-ritekkum.task-management.wfm.amazon.dev
blocklistservice.us-west-2.dev.gws.ring.amazon.dev
heimdall.prime-video.amazon.dev
*.eu.iar.rbs.amazon.dev
a.prddb3.eu-west-1.ihmgtss.jihm.amazon.dev
fill-rate.ats.amazon.dev
beta.supernova.amazon.dev
api.pdc.marjohar.people.amazon.dev
prod.devices.ateambi.accounting.amazon.dev
us-east-1.355416415502.dev.fst-portal.dex.amazon.dev
na.prod.contextual-augmentation.last-mile.amazon.dev
egreedov.email.tts.audible.amazon.dev
auth.api.chrisfll.batch.caspian.dccs.amazon.dev
alpha.hitting-bullseye.zappos.amazon.dev
prod.assets.act.legal.amazon.dev
api.us-west-2.prod-jp.shopper-gateway.subs.f3.amazon.dev
us-east-1.prod.configurable-param.mbe.last-mile.amazon.dev
us.beta.itinerary-manager.onroad-execution.last-mile.amazon.dev
dev.celestia.noc.amazon.dev
lialx.test.attribution.privacy.amazon.dev
collab.dev.eto.supply-chain.amazon.dev
coredump-parser.eink.amazon.dev
phishing.security.amazon.dev
auth.prototype.alps.music.amazon.dev
api.dev-austsilv.test.jurisdiction-planner.last-mile.amazon.dev
andrena.niksinn.icon.amazon.dev
cache.music.beta-na.turntable.sonic.advertising.amazon.dev
workflow.api.chrisfll.batch.caspian.dccs.amazon.dev
metrics-rhhigg.distance-assistant.opstechit.amazon.dev
eu.integ.device-automation.prime.amazon.dev
eventsinkgw.prod.gws.ring.amazon.dev
us-west-2.alpha.int.lab.dml.alexa.amazon.dev
neighborsapigw.prod.gws.ring.amazon.dev
aasthame.api.permissions.vector.advertising.amazon.dev
beta.query.gale.alexa.amazon.dev
deeplink.prod.alps.music.amazon.dev
lifepi.timlawso.physical.advertising.amazon.dev
corp.api-iad.gamma.hedwig.video.amazon.dev
*.beta.psidr.payments-security.amazon.dev
beta-dub.pokey.alexa.amazon.dev
api-ritekkum.task-management.wfm.amazon.dev
opensearch-dash-chchu.eu.devo.purge.percolate.p13n.amazon.dev
turn.ring-mobility.devices.amazon.dev
us-west-2.prod.api.3d.music.amazon.dev
*.ums.gamma.us-east-1.api.compliance.amazon.dev
prod.eu.latis.fclm.aft.amazon.dev
ers.mutescu.people.amazon.dev
hwr.f3d3ee9d29793b9cb526d592e34a8fb3.hotwire.ecst.amazon.dev
dev-1.pdx.nanobots.alexa.amazon.dev
*.srvindr-dev.estuary.pxt.amazon.dev
jp.datastash-prod.pacman.last-mile.amazon.dev
beta.ext-alexandria-quicknotate.prime-video.amazon.dev
us-west-2.beta.cx2.mts.primeair.amazon.dev
vps.pdx.prod.vx.xray.prime-video.amazon.dev
fba-i2i-console.scot.amazon.dev
alpha-6ae1e725d9.netsparker.security.amazon.dev
components.tapestry.amazon.dev
api.looc.robotics.amazon.dev
ops.chimera-beta.mlo.advertising.amazon.dev
beta.cruzoliv.people.amazon.dev
alpha.device.1p-idp.ihm.amazon.dev
beta.eu-west-1.tax-accessor.cmp.chroma.intech.amazon.dev
central.lmaq.last-mile.amazon.dev
nlb.definitions.rliulin.people.amazon.dev
vinoth.test.creative-report.calltoaction.advertising.amazon.dev
portal.transportation.amazon.dev
huyqdo.arel.amazon.dev
dev.beta.ap-northeast-1.autoflow-visualizer.aft.amazon.dev
appsync.alpha.risk-assessment.whs.amazon.dev
icon.amazon.dev
prod.fe.latis.fclm.aft.amazon.dev
spark.eu.prod.mcrs.moderation.amazon.dev
api.na.alpha.substitution-state-service.subs.f3.amazon.dev
katara.boombox.pandora.amazon.dev
us-west-2.beta.messaging.ui.bsm.selling-partners.amazon.dev
marinodd.service.workflow-orchestrator.aee.amazon.dev
api.fcmap.swanwes.people.amazon.dev
beta.dcms-onboarding.ring.amazon.dev
na.gmr.gamma.apa.books.amazon.dev
beta.us-west-2.builder.edge.kuiper.amazon.dev
alpha.mumblecore.kep.books.amazon.dev
iad.assets.creative-validation.vivid.amazon.dev
prod.portal.us-west-2.metastream.robotics.amazon.dev

Certificate

The complete raw certificate details for atoz.cupid-na.idprism-auth.amazon.dev in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsQL9srRansSOzM7Z6Av
idiIah89Y3xyU0NU0LSZJTZJ2o8HvzC2oIrcH6iiTk+YMHtp1aUC96bJq6L0cNr4
cRGDpB+Fb8gQzGSRd09dRpn3XaLDh8rTLhTFNPNoi63azCLw0B8TxF/BssQh15CS
puuwQlfa7J1Q7Z+zxGyYy01sllGDXgwndyjHVJOQOliKYJ2u92hPgiVcOOnTH9Pi
Wg+KuBDbVAlUjZSAfsl1heHjxgWzr1JFrJynu8duqkFvTdqHNGbJuQ66nYichPRR
jZ9Ai7dS4KE9cCoz0SKT5WS52I7zL/PCnwrXvHRG9y2cOTRvR4ZU92L2X2fqglFs
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4657199614112062818470805540153349106
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'atoz.cupid-na.idprism-auth.amazon.dev'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19537373212654035370463432169993717945412912493918913082164464745232698421426054471070179991867853407455776594490453610547923646261715205611603636399877359270070294953493465570938030519535559116587361327600012762041571095653635865578579228100916904807131238910151747043949680636501254051783586835522901574023342644179321858680613842099248362339184297275973695076496640588222839027580468557778240723043654027215550543045732565177901629759726291690513801025444644869398864081407331830256236395521203426379688445340489906746847187177481212432464607286387006911293914155785594125065879997892041051690781416878534711930017
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							61cc34e8eb28e504de6ba0d10621989db2c8020c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atoz.cupid-na.idprism-auth.amazon.dev'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001889844fd1a000004030047304502201117861333e9779e71a1e13825dbc9676d1883b47a42bdf211a60281072cfd57022100abe2a592e70a3abbd367ab7f41c41cf4fda4685e75f20212d7e988ba50e1f95a00770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d88473000001889844fd06000004030048304602210099fda63ad5f9e0d5f36fd402652995b38e83f2ec21e3dfccb895cdd94b9c7c92022100a79e2c7c266665dbeea71140055e0bf2c954b1b69103c9bcd42209b3cc1cebec007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab000001889844fcaa0000040300473045022100942c238cb226c21fc1ce74b6222ad5b81cfc0e195af1e11e2fd89e26a64fd08a022052b10b50d938e6e410b0f2b4d237f8ae01a8b6e4fa17c224ecbcda2b197378ee
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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