*.shield.tools.ce.playstation.net

Issued by Amazon

About this certificate

This digital certificate with serial number 02:dc:77:e5:5d:60:d7:f4:5a:3e:15:7f:d2:ef:d0:66 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.shield.tools.ce.playstation.net

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:dc:77:e5:5d:60:d7:f4:5a:3e:15:7f:d2:ef:d0:66
Serial Number (int): 3803193079338726747768207259198279782
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: c7:33:50:26:56:59:1b:f9:ff:48:33:aa:eb:6d:9e:48:7f:6f:df:33
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 0d:b4:99:99:30:19:46:df:bd:ad:31:5d:6d:e5:be:ac:00:7a:f5:9b
Fingerprint (sha256): 06:e4:6c:74:c8:d9:91:e9:62:9c:11:0f:b6:de:91:ce:ad:76:70:95:b7:a0:6c:76:cc:1e:49:da:18:01:17:44

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.shield.tools.ce.playstation.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.shield.tools.ce.playstation.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.shield.tools.ce.playstation.net

Other certificates including the domain name playstation.net

(limited to 100 certificates)
q1-np.uks.lacloud.playstation.net
fbapp.ww.np.community.playstation.net
secure.api.np.ac.playstation.net
api.upro.playstation.net
poseidon.e1.dataocean.playstation.net
www-stg.upro.playstation.net
report.playstation.net
*.jp.biz.playstation.net
csapi-ext.e1-np.tools.playstation.net
*.tools.playstation.net
*.intg.pt.playstation.net
*.playstation.net
sgs2.prod.scdn.dl.playstation.net
publish.playstation.net
theia.mgmt.dl.playstation.net
*.sp-int.lacloud.playstation.net
*.pcs-nonprod.nonprod.pcs.playstation.net
presto.prod.dataocean.playstation.net
vl.api.mgmt.ac.playstation.net
cdnauth.e1-spint.scdn.dl.playstation.net
a.ad.playstation.net
*.shield.tools.ce.playstation.net
teams-s2s.playstation.net
combine.upro.playstation.net
*.jp.biz.playstation.net
pspc.np.playstation.net
email.stg.pt.playstation.net
static-resource.e1-np.community.playstation.net
*.e1-pmgt.tools.playstation.net
sessionshare.e1-np.dl.playstation.net
learn.playstation.net
galactica2.api.d1.tools.playstation.net
*.test.tools.ce.playstation.net
sgs2.e1.scdn.dl.playstation.net
email.qa.pt.playstation.net
*.dl.playstation.net
*.usw2.01.central.etc.s0.playstation.net
*.e2-np.playstation.net
*.auth.np.ac.playstation.net
*.e1-np.community.playstation.net
account.np.ac.playstation.net
gs2-sec.ww.prod.dl.playstation.net
*.dl.playstation.net
*.ace.msys.playstation.net
pc.ps5.update.playstation.net
*.uks-3929-e1np-usw2-e1z9.dev21.kcloud.playstation.net
resource.e1-np.ac.playstation.net
*.ac.playstation.net
psn-rsc.prod.dl.playstation.net
secure.api.q1-np.ac.playstation.net
*.mgmt.community.playstation.net
vulcan.dl.playstation.net
*.q1-np.tools.playstation.net
auth.np.ac.playstation.net
*.api.sp-int.playstation.net
*.prod21.kcloud.playstation.net
*.dl.playstation.net
*.sp-int.lacloud.playstation.net
tokenizer.pqa.dataocean.playstation.net
a.ad.playstation.net
*.prod-qa.rds.s0.playstation.net
*.jp.biz.playstation.net
apsnobj.prod.dl.playstation.net
*.np.ac.playstation.net
*.deep.tools.ce.playstation.net
manuals.playstation.net
*.jp.biz.playstation.net
api.upro.playstation.net
www-stg.upro.playstation.net
sgs2.e1.scdn.dl.playstation.net
*.api.e1-np.playstation.net
*.shield.tools.ce.playstation.net
docserver.jp.biz.playstation.net
e1-np.str.us-west-2.dev.kcloud.playstation.net
email.dev.pt.playstation.net
*.e1-spint.lacloud.playstation.net
sgs2.e1.scdn.dl.playstation.net
develop.playstation.net
*.prod-qa.tools.playstation.net
kiki-stage.biz.playstation.net
*.dev.dl.playstation.net
tokenizer.pqa.dataocean.playstation.net
*.ww.np.community.playstation.net
psapp.updptl.np.community.playstation.net
sbahn-subscribe.pqa.dataocean.playstation.net
codes-internal.playstation.net
web.mgmt.playstation.net
reg.api.km.playstation.net
psn-rsc.e1.dl.playstation.net
nsx.sec.np.dl.playstation.net
psn-rsc.prod.dl.playstation.net
www-dev.upro.playstation.net
sgst.prod.dl.playstation.net
secure.api.q1-np.ac.playstation.net
recorder-clust02-lb.crs.playstation.net
*.kcnchoudhary.raptor-alpha-usw2-01.h.km.playstation.net
trident-token.prod.dataocean.playstation.net
web.prod-qa.playstation.net
*.np.communication.playstation.net
*.kcnchoudhary.raptor-alpha-usw2-01.h.km.playstation.net

Certificate

The complete raw certificate details for *.shield.tools.ce.playstation.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKSRRz+ZQcPe+aX/uxlw
oF91fZcNfqGHoPRsQw7KMlBxzKLgRKfm1uVlWNejYQDGNEbzvFaDZT6YmB5KqR4i
hkm8H21Y8nV3o2CdiiPbTuo3Epn199lbv0CsjhlI4L+0hujjJoeyHk1F7sTsX3TO
5T8lMTsujSl/ILX2KrAXA3AUMJjxFoed6vNIs4i43kUGvb0Iy1JYdkiiwJlQR5sp
67QpIJYPLpjV3+k5XU6IQ/DMW6Vf0YTKGIMEZb0DtUY/KmNI8IDExHNmnWgwGTKJ
WSC/jb9fiL52Z/XEunTzIPGHnAZy+N+tdprmwEX5VcbgtfdINBtNW/szUgl/pVJx
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3803193079338726747768207259198279782
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.shield.tools.ce.playstation.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19774326830256696773685178366646534077889960841851437104329961654931695871247170860898404188092744163332301640369364642883531892912691634115053632878525576127633953634015269225592412825555727197031284263051897885373972975764222365822454654800812073100621308755797668042770357816882816329845111971307638559482825295229201057030800548515776225781501297868561140500917739065975695610829992872173631103021299655989045894638002589370805405005129316976539682840425614292510239480561862723336679664757223382459482998034421528079415917123978743929469532444474057243056510442423196903755930749416891642446174941309732052431309
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c733502656591bf9ff4833aaeb6d9e487f6fdf33
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.shield.tools.ce.playstation.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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