*.gift-test.starbucks.co.jp

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:50:9f:3f:e7:33:ff:db:1f:3d:c0:56:54:c8:ce:15 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.gift-test.starbucks.co.jp

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:50:9f:3f:e7:33:ff:db:1f:3d:c0:56:54:c8:ce:15
Serial Number (int): 16369349664156896430451108166958108181
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d0:6b:88:38:60:31:ee:3d:df:cf:b5:f9:bc:55:01:b6:b3:69:97:48
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): b3:95:20:7e:e0:4e:3e:b6:4c:13:d2:eb:2f:64:fa:40:0a:fd:5b:98
Fingerprint (sha256): 05:d8:80:29:41:f0:81:d2:3a:b4:ab:f5:f2:e3:39:9f:0b:ac:4b:91:27:0c:0c:a0:58:be:52:5f:e5:02:02:7d

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate *.gift-test.starbucks.co.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.gift-test.starbucks.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.gift-test.starbucks.co.jp

Other certificates including the domain name starbucks.co.jp

(limited to 100 certificates)
proxy.webapp.starbucks.co.jp
ast-pos-stg.app.starbucks.co.jp
card.starbucks.co.jp
gift-test.starbucks.co.jp
ceto.recursyve.dev
gift.starbucks.co.jp
login2.starbucks.co.jp
case2.ccc.starbucks.co.jp
*.ticket-test.starbucks.co.jp
case2.ccc.starbucks.co.jp
gift-test.starbucks.co.jp
www.jobgen.co
dev.menu.starbucks.co.jp
sirens-library.starbucks.co.jp
dev.cart2.starbucks.co.jp
integ.mng.menu.starbucks.co.jp
sdrepair.starbucks.co.jp
*.www2.starbucks.co.jp
sdrepair.starbucks.co.jp
ccm-prd.pfs.starbucks.co.jp
*.gift-test.starbucks.co.jp
gift-test2.starbucks.co.jp
card2.starbucks.co.jp
login2.starbucks.co.jp
card.starbucks.co.jp
*.sbcapi2.starbucks.co.jp
integ2.menu.starbucks.co.jp
*.starbucks.co.jp
member2.starbucks.co.jp
webapp-itg.starbucks.co.jp
proxy.webapp-itg.starbucks.co.jp
simphony-dev.starbucks.co.jp
stg.mng.menu.starbucks.co.jp
admin-sirens-library.starbucks.co.jp
gift-test.starbucks.co.jp
app.licitanautacr.com
link.starbucks.co.jp
proxy.webapp-itg.starbucks.co.jp
member2.starbucks.co.jp
login2.starbucks.co.jp
www.starbucks.co.jp
*.case2.ccc.starbucks.co.jp
*.case.ccc.starbucks.co.jp
integ3.menu.starbucks.co.jp
*.starbucks.co.jp
sdweb.starbucks.co.jp
st.starbucks.co.jp
card.starbucks.co.jp
webapp-itg.starbucks.co.jp
menu.starbucks.co.jp
*.starbucks.co.jp
*.sbgc2.starbucks.co.jp
case2.ccc.starbucks.co.jp
ticket-test.starbucks.co.jp
enq.starbucks.co.jp
www.findata.com.br
sapig-prd.starbucks.co.jp
link.starbucks.co.jp
*.case2.ccc.starbucks.co.jp
*.ccc.starbucks.co.jp
*.webapp-stg.starbucks.co.jp
ticket-test.starbucks.co.jp
sans20202021.ondagoapp.com
deploy.starbucks.co.jp
*.paymenthub.starbucks.co.jp
ticket-test.starbucks.co.jp
www.getinvite.co
*.case.ccc.starbucks.co.jp
*.starbucks.co.jp
integ2.asset.menu.starbucks.co.jp
www.lunelia.com
asset.menu.starbucks.co.jp
*.starbucks.co.jp
*.paymenthub.starbucks.co.jp
*.starbucks.co.jp
*.starbucks.co.jp
sapig-prd.starbucks.co.jp
*.sbgc2.starbucks.co.jp
gift-test.starbucks.co.jp
antifraud.member2.starbucks.co.jp
www.starbucks.co.jp
*.starbucks.co.jp
gift-test2.starbucks.co.jp
gift-test.starbucks.co.jp
proxy.webapp-itg.starbucks.co.jp
*.starbucks.co.jp
store2.starbucks.co.jp
mng.dev4.cart2.starbucks.co.jp
*.app.starbucks.co.jp
gift-test.starbucks.co.jp
sbcard-itg.starbucks.co.jp
*.dyf.starbucks.co.jp
gift-test.starbucks.co.jp
*.case2.ccc.starbucks.co.jp
*.ccc.starbucks.co.jp
*.www.starbucks.co.jp
proxy-alb.webapp.starbucks.co.jp
kjaskimqomvnjdvw3z7ywlz09xvba86.starbucks.co.jp
card.starbucks.co.jp
ticket-test.starbucks.co.jp

Certificate

The complete raw certificate details for *.gift-test.starbucks.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JUIp5OhmPidWOVcBMSP
AnuSzI8KHY/jltH84huXCVDOcQkQwi5jiueVT52Vqa1HoT7lVy5QRJu0BS0QRgtC
1tC//AB5v4MRIE0iQskHvnamrmdQR9dtMiGIQ9WLxyEfdUGwhLmXrpbSKO5uBtPm
npeRZV/JkgpnXJ2NY7bkD9dNUiE9euk57Rngt/68WlaMwtKK2Q6tC2xaMvUymK3E
ODHgtIDW8rk1iFItLgYPLJXvJ1qeBRq1rSWAQBE9PR+XiDde7HuGEdR5yY8XhC7l
1aiLqKdpuVrIPttC9zwLqAY/JVfgJkknU9sEiqaS3FsMCIpI3ECdFCJTV8jVhew0
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16369349664156896430451108166958108181
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.gift-test.starbucks.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27845918401831726025824215340091228835809800633879288164863185530670609347670883068919890098263720005085401210278593290779695590323099216942663006153365669112442016943401646948113797251488636922408150393260033696429680053434237367206492354237427469042924005939354134204610598852444225988789886776306632745240472616179354113110107422970418347029210579825383733472617695296395241769377036349656978677557223084128032284608119851119116852918406576953358898430129537339188101918153883385131671107193893905947258943902873458854018046456174961926745312382897513057483961683322274833112417645275259275145766598914343732786343
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d06b88386031ee3ddfcfb5f9bc5501b6b3699748
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gift-test.starbucks.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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