download.amazongames.com

Issued by Amazon

About this certificate

This digital certificate with serial number 06:a6:5d:93:43:fb:08:2b:7c:8e:50:8a:6c:56:66:c7 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=download.amazongames.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:a6:5d:93:43:fb:08:2b:7c:8e:50:8a:6c:56:66:c7
Serial Number (int): 8839187184898280445836407414596200135
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 0c:cc:36:89:cf:8d:c3:67:8e:51:07:b3:d7:15:ab:97:f6:7b:8d:9c
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): be:fc:73:66:ab:50:43:4e:b7:5b:00:8f:68:ae:e5:27:69:fc:85:b4
Fingerprint (sha256): 07:c9:d6:e5:f6:db:b0:65:5d:bd:23:b4:c8:52:b4:28:24:a9:21:88:16:7e:7c:35:68:47:d6:a8:32:5a:cb:26

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate download.amazongames.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for download.amazongames.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

download.amazongames.com

Other certificates including the domain name amazongames.com

(limited to 100 certificates)
beta.amazongames.com
federatedaccountservice.amazongames.com
ap-northeast-1.stats-ingestion-service.amazongames.com
*.burner929327.identity-service.amazongames.com
pentest.gamma.identity-service.amazongames.com
djdawson2.identity-service.amazongames.com
burner863824.identity-service.amazongames.com
dev.jenkins.omnisdk.tools.amazongames.com
*.emavin.identity-service.amazongames.com
pentest.beta.identity-service.amazongames.com
script-test-2.identity-service.amazongames.com
beta.stats-service.amazongames.com
beta.tokenservice.amazongames.com
download.amazongames.com
us-east-1.stats-service.amazongames.com
us-west-2.beta.stats-service.amazongames.com
*.burner292763.identity-service.amazongames.com
login.amazongames.com
www.amazongames.com
internal.beta.identity-service.amazongames.com
*.beta.identity-service.amazongames.com
us-east-1.stats-service.amazongames.com
creators.amazongames.com
callensr.identity-service.amazongames.com
cloudfront.us-west-2.beta.client.stats-service.amazongames.com
*.emavin.identity-service.amazongames.com
gamma.launcher.amazongames.com
analytics.id.amazongames.com
beta.test-mono-repo.amazongames.com
us-west-2.stats-service.amazongames.com
gamma.amazongames.com
beta.client.tokenservice.amazongames.com
amazongames.com
www.amazongames.com
beta.client.stats-service.amazongames.com
beta.client.agsnotificationservice.amazongames.com
internal.beta.identity-service.amazongames.com
us-east-1.gamma.client.stats-service.amazongames.com
beta.catalogmanagementservice.amazongames.com
test-mono-repo.amazongames.com
gamma.tokenservice.amazongames.com
client.tokenservice.amazongames.com
client.entitlementservice.amazongames.com
download.amazongames.com
gamma.stats-metadata-service.amazongames.com
beta.moderationservice.amazongames.com
beta.agsnotificationservice.amazongames.com
agssocialservice.amazongames.com
amazongames.com
beta.amazongames.com
us-west-2.beta.stats-service.amazongames.com
beta.agsprivacysettingsservice.amazongames.com
*.mansamusa.identity-service.amazongames.com
client.federatedaccountservice.amazongames.com
prod.amazongames.com
*.gamma.identity-service.amazongames.com
beta.client.agsnotificationservice.amazongames.com
gamma.identity-service.amazongames.com
us-east-1.gamma.stats-ingestion-service.amazongames.com
prod.amazongames.com
amazongames.com
internal.beta.identity-service.amazongames.com
beta.amazongames.com
us-west-2.beta.stats-service.amazongames.com
us-east-1.client.stats-service.amazongames.com
beta.agsnotificationservice.amazongames.com
beta.client.agsnotificationservice.amazongames.com
id.amazongames.com
internal.beta.identity-service.amazongames.com
us-east-1.gamma.stats-service.amazongames.com
script-test-4.identity-service.amazongames.com
devo.amazongames.com
view.amazongames.com
staging.entitlementservice.amazongames.com
internal.beta.identity-service.amazongames.com
*.prod.identity-service.amazongames.com
internal.burner008300.identity-service.amazongames.com
gamma.agsprivacysettingsservice.amazongames.com
beta.agsprivacysettingsservice.amazongames.com
gamma.csconnect.amazongames.com
beta.catalogservice.amazongames.com
click.email.amazongames.com
download.amazongames.com
beta.federatedaccountservice.amazongames.com
test-mono-repo.amazongames.com
us-east-1.gamma.stats-service.amazongames.com
gamma.amazongames.com
login.amazongames.com
internal.djdawgson3.identity-service.amazongames.com
burner-681504.identity-service.amazongames.com
beta.family-service.amazongames.com
us-west-2.beta.client.stats-service.amazongames.com
beta.client.stats-service.amazongames.com
gamma.amazongames.com
amazongames.com
us-east-1.gamma.stats-service.amazongames.com
client.tokenservice.amazongames.com
gamma.moderationservice.amazongames.com
djdawson2.identity-service.amazongames.com
www.amazongames.com

Certificate

The complete raw certificate details for download.amazongames.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HdDFrgsPZzDPKM/XJpd
qwFjGVjbIsSA01j3JAA7oYH5X4U/JhtD5qt5l4m5r25zi0v6+TopPj9X5NdgTtVO
xY9m/xBDaWvUBPMD/fAsVsnUtrDoYPk5T3sxztf3lC4rSqJLh8eN1W7rdo4Hzy9T
0ENuqDiUCBjumfUTdskpEeAFn42Y3AVbJgX3viNbU1ygNbdsIh4RfVapmlm804PW
DjjWrudFD9VKRMR2BI+rQa6O46Ud6KN7WfwXbRS/Z3g8+EhDULRWAMnczv/Yz96D
6ag1ZQ6m1jbZwdLapcV3WzYYwFS00rtia54YGaqGnmMqAU2ZgZagv2poaV4eEfmq
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8839187184898280445836407414596200135
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'download.amazongames.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26821330969153988278727489361206179101267261238946600635220387053279079729961832715837972541486703457705770932837849542695542525184471891391606555394521407735471523656198618403416417963313793311453934892861839034134938079101403649195997716875590985485518568391972022170697596682320906196096025905726551546588341848058727570059814373768520053885258009313830924697129752018858771800775879323883752746350189664662853452295379263389626550381637707247959786638656272592268548906766608791355579148173480338419196656225585552985653628412979807371950789039321769216800301072564055858193178163225620325000260677695642070002287
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0ccc3689cf8dc3678e5107b3d715ab97f67b8d9c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.amazongames.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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