technology.disneyanimation.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 09:c6:3e:f8:9b:0d:b9:37:be:52:7e:d7:2e:b4:9e:21 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=technology.disneyanimation.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:c6:3e:f8:9b:0d:b9:37:be:52:7e:d7:2e:b4:9e:21
Serial Number (int): 12992403946020635891753203792153452065
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 29:b7:11:98:20:de:2d:ae:0e:0a:a0:95:52:6f:c2:f9:5c:68:46:18
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 7e:ed:f2:85:d2:76:90:ec:ed:44:06:8f:28:15:4a:32:bd:71:f0:62
Fingerprint (sha256): 06:e2:11:a6:1d:dc:bc:68:90:43:3b:c5:15:10:c4:72:2d:67:33:73:8d:61:1e:2a:16:9e:e6:39:ce:f3:7d:5b

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate technology.disneyanimation.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for technology.disneyanimation.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

technology.disneyanimation.com
www.technology.disneyanimation.com

Other certificates including the domain name disneyanimation.com

(limited to 100 certificates)
shotguntools.fas.fa.disney.com
interviewfeedback.disneyanimation.com
beansandlogs.disneyanimation.com
felix.disneyanimation.com
f5.disneyanimation.com
threepio.disneyanimation.com
teradici-mc.disneyanimation.com
www.disneyanimation.com
caricatures.fas.fa.disney.com
wdas-gp.disneyanimation.com
daweb.disneyanimation.com
filemaker.disneyanimation.com
assets.disneyanimation.com
dmzloghost.fas.fa.disney.com
testevents.disneyanimation.com
emailinfo.disneyanimation.com
technology.disneyanimation.com
datasets.disneyanimation.com
wdas-elastic.fas.fa.disney.com
disneyanimation.com
technology.disneyanimation.com
vrlcm.disneyanimation.com
holodeck.disneyanimation.com
wordpress-test.disneyanimation.com
superset.disneyanimation.com
ohana.disneyanimation.com
datasets.disneyanimation.com
mailgate.disneyanimation.com
noteworthy.fas.fa.disney.com
parsec-monitor.disneyanimation.com
staging.disneyanimation.com
element-service.disneyanimation.com
daweb.disneyanimation.com
lighthouse.disneyanimation.com
coda-stage.disneyanimation.com
*.disneyanimation.com
mailgate.disneyanimation.com
gogo.disneyanimation.com
dwing.disneyanimation.com
awconsole.disneyanimation.com
techweb.disneyanimation.com
ohana.disneyanimation.com
daweb.disneyanimation.com
prodman.disneyanimation.com
daweb.disneyanimation.com
gitlab.fas.fa.disney.com
portal.disneyanimation.com
pure01.fas.fa.disney.com
icoda.disneyanimation.com
wdas-elastic.fas.fa.disney.com
assets.disneyanimation.com
techweb.disneyanimation.com
wsoneaccess.disneyanimation.com
prin.fas.fa.disney.com
disneyanimation.com
holodeck.disneyanimation.com
starfish.disneyanimation.com
prin.fas.fa.disney.com
mobilereviewserver.disneyanimation.com
code.disneyanimation.com
mediacopyserver.disneyanimation.com
daweb.disneyanimation.com
datasets.disneyanimation.com
caricatures.fas.fa.disney.com
www.disneyanimation.com
dwing.disneyanimation.com
sidecar.fas.fa.disney.com
arl-sidecar.disneyanimation.com
staging.disneyanimation.com
filemaker.disneyanimation.com
teradicicac.disneyanimation.com
wdasldap.disneyanimation.com
wayfinder.fas.fa.disney.com
*.wdas.dev
shotguntools.disneyanimation.com
daweb.disneyanimation.com
awconsole.disneyanimation.com
infoblox.fas.fa.disney.com
portal.disneyanimation.com
postweb.disneyanimation.com
*.artifactory.disneyanimation.com
playbook.disneyanimation.com
*.wdas.dev
portal.disneyanimation.com
noteworthy.fas.fa.disney.com
storyserver.disneyanimation.com
daweb.disneyanimation.com
starfish.disneyanimation.com
vrlcm.disneyanimation.com
darts.disneyanimation.com
dpix-storage.disneyanimation.com
roll.fas.fa.disney.com
f5.disneyanimation.com
daweb.disneyanimation.com
mailgate.disneyanimation.com
mirror.fas.fa.disney.com
ohana.disneyanimation.com
teradicivan.disneyanimation.com
lighthouse.disneyanimation.com
cdn.disneyanimation.com

Certificate

The complete raw certificate details for technology.disneyanimation.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuFPHj3wV8mmbnVF5jNXv
kjnkN68N0Fg1sBpBXPis8MbU296fpCup8SnZ0rhUGEBowMeaMMhDpHcGhdEm+adk
akytT3t97T1sDsmr1mPPQSXu23+vLwy+u3DKDrhUilF9r2ipm5t4h2/180r902US
Qe8wT4sJBum86ijBbVmCS13BNti8A1u4OBGosjMfG/mNW+OYEx87X4QbxJNKsFwC
cwxLYy6lpa9FfaFabSeZalQSyGPasTJVGRPBd2XjnTzPYFd+F54kW2vs1XFqdmxe
bGF+C0K5FhFcx2+KWqrauDg7Xc1HPESqZgcn714JsfivDXtqpck13aG3VS1ylgY4
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12992403946020635891753203792153452065
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'technology.disneyanimation.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23269161341317569941981965248989053308694251287804955652887600589694305952778221628068944774976647041600228028289403591678851647497422873341004847104451706695722557562013184456494666557253783191098854271264563996338365785843018890024788293200449442085581524193255611936030260525291856208268573418729976276024480991626662982862106886148533331209449110029407928122767017951968913858323681554072803416629291765029316553593166075411475790414692539105434814804243793217448150414760547996668991913500971517477177382695673752707555434551189426388880460317540780895473172157892322644292551120388405612705483653031819053775019
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							29b7119820de2dae0e0aa095526fc2f95c684618
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technology.disneyanimation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.technology.disneyanimation.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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