docserver.jp.biz.playstation.net

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0f:6e:69:3e:c4:6a:b7:aa:f2:cb:05:e6:c2:7f:35:1b was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=docserver.jp.biz.playstation.net

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:6e:69:3e:c4:6a:b7:aa:f2:cb:05:e6:c2:7f:35:1b
Serial Number (int): 20511707217155103850849631265917711643
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0a:e3:9d:e8:c9:61:7c:4d:66:af:27:73:2b:b9:c4:08:ba:4f:a9:b1
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): ae:df:3c:2d:0a:07:7d:d8:a9:74:52:0b:ce:3b:2d:9f:01:6c:68:62
Fingerprint (sha256): 06:e8:ad:d6:56:4a:f9:79:fb:b3:6a:6c:75:22:9a:e8:4d:e5:25:64:15:d9:a2:94:29:d5:33:36:a8:0f:04:55

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate docserver.jp.biz.playstation.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for docserver.jp.biz.playstation.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

docserver.jp.biz.playstation.net

Other certificates including the domain name playstation.net

(limited to 100 certificates)
q1-np.uks.lacloud.playstation.net
fbapp.ww.np.community.playstation.net
secure.api.np.ac.playstation.net
api.upro.playstation.net
poseidon.e1.dataocean.playstation.net
www-stg.upro.playstation.net
report.playstation.net
*.jp.biz.playstation.net
csapi-ext.e1-np.tools.playstation.net
*.tools.playstation.net
*.intg.pt.playstation.net
*.playstation.net
sgs2.prod.scdn.dl.playstation.net
publish.playstation.net
theia.mgmt.dl.playstation.net
*.sp-int.lacloud.playstation.net
*.pcs-nonprod.nonprod.pcs.playstation.net
presto.prod.dataocean.playstation.net
vl.api.mgmt.ac.playstation.net
cdnauth.e1-spint.scdn.dl.playstation.net
a.ad.playstation.net
*.shield.tools.ce.playstation.net
teams-s2s.playstation.net
combine.upro.playstation.net
*.jp.biz.playstation.net
pspc.np.playstation.net
email.stg.pt.playstation.net
static-resource.e1-np.community.playstation.net
*.e1-pmgt.tools.playstation.net
sessionshare.e1-np.dl.playstation.net
learn.playstation.net
galactica2.api.d1.tools.playstation.net
*.test.tools.ce.playstation.net
sgs2.e1.scdn.dl.playstation.net
email.qa.pt.playstation.net
*.dl.playstation.net
*.usw2.01.central.etc.s0.playstation.net
*.e2-np.playstation.net
*.auth.np.ac.playstation.net
*.e1-np.community.playstation.net
account.np.ac.playstation.net
gs2-sec.ww.prod.dl.playstation.net
*.dl.playstation.net
*.ace.msys.playstation.net
pc.ps5.update.playstation.net
*.uks-3929-e1np-usw2-e1z9.dev21.kcloud.playstation.net
resource.e1-np.ac.playstation.net
*.ac.playstation.net
psn-rsc.prod.dl.playstation.net
secure.api.q1-np.ac.playstation.net
*.mgmt.community.playstation.net
vulcan.dl.playstation.net
*.q1-np.tools.playstation.net
auth.np.ac.playstation.net
*.api.sp-int.playstation.net
*.prod21.kcloud.playstation.net
*.dl.playstation.net
*.sp-int.lacloud.playstation.net
tokenizer.pqa.dataocean.playstation.net
a.ad.playstation.net
*.prod-qa.rds.s0.playstation.net
*.jp.biz.playstation.net
apsnobj.prod.dl.playstation.net
*.np.ac.playstation.net
*.deep.tools.ce.playstation.net
manuals.playstation.net
*.jp.biz.playstation.net
api.upro.playstation.net
www-stg.upro.playstation.net
sgs2.e1.scdn.dl.playstation.net
*.api.e1-np.playstation.net
*.shield.tools.ce.playstation.net
docserver.jp.biz.playstation.net
e1-np.str.us-west-2.dev.kcloud.playstation.net
email.dev.pt.playstation.net
*.e1-spint.lacloud.playstation.net
sgs2.e1.scdn.dl.playstation.net
develop.playstation.net
*.prod-qa.tools.playstation.net
kiki-stage.biz.playstation.net
*.dev.dl.playstation.net
tokenizer.pqa.dataocean.playstation.net
*.ww.np.community.playstation.net
psapp.updptl.np.community.playstation.net
sbahn-subscribe.pqa.dataocean.playstation.net
codes-internal.playstation.net
web.mgmt.playstation.net
reg.api.km.playstation.net
psn-rsc.e1.dl.playstation.net
nsx.sec.np.dl.playstation.net
psn-rsc.prod.dl.playstation.net
www-dev.upro.playstation.net
sgst.prod.dl.playstation.net
secure.api.q1-np.ac.playstation.net
recorder-clust02-lb.crs.playstation.net
*.kcnchoudhary.raptor-alpha-usw2-01.h.km.playstation.net
trident-token.prod.dataocean.playstation.net
web.prod-qa.playstation.net
*.np.communication.playstation.net
*.kcnchoudhary.raptor-alpha-usw2-01.h.km.playstation.net

Certificate

The complete raw certificate details for docserver.jp.biz.playstation.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu5AUellTk1nst4tdo97
ynrp+uFT/XNudaGleS1Wr6B2NnRJsL9CYX9stSoRj62EcfFbH5jn+MoUYbj+xmzv
X6WkGVajqnGCytnnnhUmFcaxvLpFSnzIqzuLb+JgIo9wxqK8aA5ydhUjiMhmWxrY
XbQ3jtJqgh2kH5yP//rU/Dq0aPRwzY0fIMADJGQR3hyrwwnHs+vVDHqv9etK55lV
yyV/22BNDlsapPM+3GnET4oi93Eu1eFiSNg5iMzXXfe29LMqd7YNFRfSOLrRiwfM
0G4+mUAf8nswu48azq5G+syPZIcQFNKAPiEV0MBLtYhoaGtpkV8DajM8REDMUPoH
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20511707217155103850849631265917711643
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'docserver.jp.biz.playstation.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23597810793765266281344704853213500685393354854033846478128763507918300965744651784172996207442040591337951631834055997028004885253838778787206487750007705901432520877236184053645158223741151286199843506683934957120599903661170798061575470142693866177686432069128922754884212451372098071193729897333103602099308379240997831498690642972248861610616510647752443343973217407161516012336848406213049450690381917121092832443827269916914562015844297290869089660848547759033173523490959931624668917366671330230553978047298358996199465239559335412345454872636028429665892058801594863722378216522166710335033273079603930990543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0ae39de8c9617c4d66af27732bb9c408ba4fa9b1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docserver.jp.biz.playstation.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b157a647ba748e6e31c99b11c42c5ef42b46d8f63170f4884d2081732107d78c5b9412f561558f61094f3831dc8a2d4f3439c79d039eb0a0922541eaf4d36bee8406ccbac62240a0f9e6bfb34bd7d8a8ffc70815d3f14b8e69faa3afdd0347f1b8a825decb54b69a0eb10d52e185399cf91c53b5ee1b75d02034a4b76c9ca774c1ad8d84118d8964adfbcdf08e1a58bb8d172d7fb7b12b266b9b9c8530f6bd986e4e228497e3839a2e2f33113b9a0e099f6dae650180099cfd6d45b4f3ede44ed188d29b60c12ad62f7815b6ae677430d939d943c6b656d3a68eac94d66bbe6714db6798b78fff6c0086c75fc1f567d8e272610cba500433fd366b08e23fc08b