ssofaast-wms.amazon.co.uk

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 02:43:28:fc:3d:b8:53:64:59:b8:24:d9:42:52:57:69 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ssofaast-wms.amazon.co.uk

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:43:28:fc:3d:b8:53:64:59:b8:24:d9:42:52:57:69
Serial Number (int): 3007171162074186615817773130240382825
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 3f:f0:17:f7:ae:91:57:c3:cf:f5:2e:60:53:ab:54:0e:62:65:56:b3
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 3c:62:1a:13:a3:d7:6c:fe:6b:d4:a9:88:e8:3c:31:0f:19:6e:bd:2f
Fingerprint (sha256): 06:52:b5:21:26:2b:68:a1:c4:b3:a9:fe:1f:8b:a1:b8:46:7b:41:e7:92:86:a6:85:d1:13:d4:47:28:21:8e:cc

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate ssofaast-wms.amazon.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssofaast-wms.amazon.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssofaast-wms.amazon.co.uk

Other certificates including the domain name amazon.co.uk

(limited to 100 certificates)
aax-eu.amazon.com
*.peg.a2z.com
translate-acx.amazon.co.uk
glimpse-publish-eu.amazon.com
cde-ta-g7g.amazon.com
smile.amazon.co.uk
skills-store-eu.amazon.com
securephotostorageservice-eu-external.amazon.com
dp-gw-na.amazon.com
content-drive.amazon.co.uk
vendorcentral.amazon.co.uk
internal-campfire-eu.amazon.com
services.amazon.co.uk
www.amazonmusic.es
gio-catalog-eu.amazon.com
vendorcentral.amazon.co.uk
authorize.payments-sandbox.amazon.co.uk
sdu.amazon.eu
logistics.amazon.com
api-amazondevices-eu.amazon.com
cscentral.amazon.co.uk
argileto.amazon.com
sdu.amazon.eu
luna.amazon.eu
af-mobile-api.amazon.co.uk
webservices.amazon.eu
*.peg.a2z.com
glimpse-publish-eu.amazon.com
shipping.amazon.co.uk
www.amazon.co.uk
accelerator.amazon.co.uk
fls-eu.amazon.com
www.amazon.co.uk
website-g7g.amazon.co.uk
membership.amazon.com
arap.amazon.co.uk
freight.amazon.co.uk
kindlestore-sha-proxy.amazon.com
arcus-www.amazon.co.uk
brandservices.amazon.com
gio-catalog-eu.amazon.com
ssofaast-aftx.amazon.co.uk
kep.amazon.com
alexa-skills-beta.amazon.com.au
kep.amazon.com
dp-gw-na.amazon.com
d16gars-eu.amazon.co.uk
r.amazon.co.uk
travel.amazon.co.uk
transportation.amazon.co.uk
api-preprod.amazon.co.uk
internal-campfire-eu.amazon.com
sellercentral.amazon.co.uk
www.amazonmusic.es
sharingservice.amazon.co.uk
primenow.amazon.co.uk
tschavari.de
sdu.amazon.eu
track.amazon.co.uk
carriercentral.amazon.eu
local-sfis.amazon.co.uk
account-status.amazon.co.uk
kep-eu.amazon.com
aws.amazon.co.uk
payments-sandbox.amazon.co.uk
ramp.amazon.com
cde-ta-g7g-sha-proxy-preprod.amazon.com
unagi-eu.amazon.com
cde-ta-g7g.amazon.com
gaming.amazon.eu
aax-eu-retail-direct.amazon-adsystem.com
kindle.amazon.com
amazon.is
account-p2k.amazon.com
api-sandbox.amazon.co.uk
www14.amazon.co.uk
kindle-store-proxy-endpoint-na.amazon.com
ddee-preprod-uk.amazon.co.uk
*.peg.a2z.com
skills-store-eu.amazon.com
endeavour.amazon.co.uk
logistics-platform.amazon.co.uk
brandregistry.amazon.co.uk
amzon.co.uk
read.amazon.co.uk
vpbs-eu.amazon.com
translate-acx.amazon.co.uk
ams.amazon.co.uk
skills-store-eu.amazon.com
identity.browserapps.amazon.co.uk
cscentral.amazon.co.uk
dl.amazon.co.uk
akamai-renew-cert-digicert-arcus-www.amazon.com
brandservices.amazon.com
hub.amazon.it
cde-ta-g7g-preprod.amazon.com
af-mobile-api.amazon.co.uk
d16gars-eu.amazon.co.uk
partnercentral.amazon.it
ssofaast-wms.amazon.co.uk

Certificate

The complete raw certificate details for ssofaast-wms.amazon.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyALubETnxjKCELTD7gTl
n30qnP0lL9SNtyZiw1E3JwlfzZC2pTqdZV4CPaeqAIQRZmNz60h2UMc6j9/WwLuy
2TXlywl92XDy28TqZ/N0YcW0x75QXRD1kLjsj5U7AmZ0bDv3AxJD48xaduDtN5tx
ijxoiNnxCaGW+io/vkkIJit9KRZ9m+DWLpPrErNcDF10j78AbVIO6EBPNAi+/flm
Mgb9UhkXZi8pHVNolBVGI3eVzV6ny9q8pTAfnntPuClrYQDmcnLQ62Dq3W08w5Ld
tK8QFebvPWs2kkzYQ/p1O9MB8/xr4BnMKdVQhkHpBy7MNwRG0AadHiUG6azjyh7h
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3007171162074186615817773130240382825
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssofaast-wms.amazon.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25249106490621361603681408602483261607835871491148839484842715072125313195132358672021369756290256970830761966615895875366952706052900100770895384254667994218591321836801806562087890485422406966441893453014872397581669428671949520951817364906841614385550495671217810814109079501388038073439613325464388034339649583110217886562972531361510366198203734771862023717025484811116593079693990264643996810064783594504417785433662463109361950302937804173491071292846868430050148101200991161623103348796126847440690647060515667391868049897077972294913037029161248686810233125934050796382225461528333207533340659216302408130933
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3ff017f7ae9157c3cff52e6053ab540e626556b3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssofaast-wms.amazon.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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