*.staging.irc-edge.twitch.a2z.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0c:26:4f:a3:49:0f:2d:ff:94:63:c9:47:b4:44:b5:1b was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.staging.irc-edge.twitch.a2z.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:26:4f:a3:49:0f:2d:ff:94:63:c9:47:b4:44:b5:1b
Serial Number (int): 16149658477203249057136851799001838875
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ce:e4:89:68:a1:c5:71:4c:b7:14:ec:93:40:31:f6:a2:2b:88:fe:5e
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): a2:34:e1:ba:b3:e3:62:b3:70:6b:d3:0c:f0:8a:53:02:83:70:44:a7
Fingerprint (sha256): 08:02:a5:42:94:9e:1e:3f:16:04:67:7f:ff:de:d8:e9:4a:a7:aa:11:58:88:c0:61:86:72:78:0f:30:e4:c7:b6

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.staging.irc-edge.twitch.a2z.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.staging.irc-edge.twitch.a2z.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.staging.irc-edge.twitch.a2z.com
staging.irc-edge.twitch.a2z.com
*.internal.twitch.tv

Other certificates including the domain name a2z.com

(limited to 100 certificates)
migration.symapiallegro.content-platform.a2z.com
sleiman.alpha.us-west-2.goshawk.aws.a2z.com
*.cloudcatalog.zappos.com
api.prod.pdx.data-service.backbone.networking.aws.a2z.com
b0d35.prod.ap-east-1.integtest.puller.iot.aws.a2z.com
public-writer.c-1.ap-northeast-2.cloudmap.aws.a2z.com
ap-southeast-1.prod.budgets.v1.bhvr.wheatley.aws.a2z.com
workflow.af-south-1.sso.aws.a2z.com
beta-api.us-east-1.smart-pixel.advertising.a2z.com
console.beta.zimbru.av-lr.a2z.com.beta.zimbru.av-lr.a2z.com
elb.ap-southeast-1.cs.boost.aws.a2z.com
api.eu-west-3.bifrost.beta.aura.acm.aws.a2z.com
ffsproxy.ring.devices.a2z.com
cea4b.prod.ap-northeast-1.integtest.puller.iot.aws.a2z.com
alpha.us-west-2.workteam-management.crowdscale.aws.a2z.com
roleproxy.preprod.cn-northwest-1.ml-platform.aws.a2z.com
labeling.prod.eu-central-1.ml-platform.aws.a2z.com
api.crucible-beta.apn.a2z.com
gamma.catalog-entity-relationships.video.a2z.com
*.gc-rc-sr-158.8dl6bo.c1.kafka.us-east-1.sharabhi.people.a2z.com
replication.ruimi.us-west-2.duckhawk.a2z.com
ph.preprod.jobsatamazon.hvh.a2z.com
api.integ.pi.a2z.com
mds.prod.eu-central-1.ml-platform.aws.a2z.com
dataingestionservice.spektr.a2z.com
api.todo.frontend.s3.aws.a2z.com
ec.416278730961.dp.us-east-1.device-manager.a2z.com
*.rdlp-krang.av-lr.a2z.com
www.annotation.sandbox.nanook.lab126.a2z.com
smbatch.preprod.ca-west-1.ml-platform.aws.a2z.com
beta.inbound.rodeo.aft.a2z.com
staging.momentum.twitch.a2z.com
ease.gamma.ap-east-1.ml-platform.aws.a2z.com
sd-brb.beta.discovery.security.a2z.com
service.prod.eu-north-1.ml.glue.aws.a2z.com
pub2.himanshj.desktop.us-east-1.canary.snapper.iot.aws.a2z.com
us-east-2-prod.mms.cloudtrail.aws.a2z.com
gamma.us-east-1.michigan.glue.aws.a2z.com
site.maanniss.variable-fee.video.a2z.com
api.pdxportal-beta.apn.a2z.com
*.gc-rc-sr-158.3wucrt.c1.kafka.us-east-1.sharabhi.people.a2z.com
1d0f8.beta.us-east-1.integtest.moonraker.iot.aws.a2z.com
*.d-c-ss.prod.eu-central-1.canary.identity.iot.aws.a2z.com
*.bw.peg.a2z.com
portal.beta.ocelot.outposts.aws.a2z.com
roleproxy.prod.eu-north-1.ml-platform.aws.a2z.com
mfarm-cms-presto.us-east-2c.us-east-2.athena.aws.a2z.com
*.replacementc.dpzbg8.c1.kafka.us-east-1.sharabhi.people.a2z.com
account-id.beta.passport.transportation.a2z.com
880e4.prod.ap-northeast-1.integtest.puller.iot.aws.a2z.com
saml-runtime.sa-east-1.prod.apps-auth.aws.a2z.com
tomhm.alpha.tango-graphql.imdb.a2z.com
ms.155717691546.ap-northeast-1.mercury.rds.a2z.com
allegiance.legacy-event.insights.video.a2z.com
*.developers.alexa.a2z.com
syd52.prod.tinkerbell.ebs.aws.a2z.com
api.hkg.runbmc-prod.conan.a2z.com
api.serverless-demo-webapp.kaizen.shopbop.a2z.com
*.ashtohms-dev.us-west-2.factsorchestration.spectre.aws.a2z.com
clujason-ops.gamesparks.aws.a2z.com
gojam-test.content-platform.a2z.com
api.test.us-east-1.remotecommands.rds.a2z.com
us-east-1.development.case-api.support.aws.a2z.com
test-acm.derby.dev.cloudbrowse.a2z.com
*.rw-c-ss.prod.eu-north-1.canary.identity.iot.aws.a2z.com
*.d-c-ss.prod.ap-southeast-2.canary.identity.iot.aws.a2z.com
pre.ap-southeast-3.prod.isac.access.idaho.aws.a2z.com
verification.credential.business.a2z.com
portal.us-west-2.beta.ops.codedeploy.a2z.com
us-east-2.prod.ssm.v1.bhvr.wheatley.aws.a2z.com
ca-central-1.prod.console.elb.aws.a2z.com
*.d-c-ss.prod.eu-central-1.canary.identity.iot.aws.a2z.com
*.replacementc.pmojd6.c1.kafka.us-east-1.sharabhi.people.a2z.com
primary.us-west-2.beta.twitchbeefcake.services.twitch.a2z.com
testdomain2.173480755032.brelandm.a2z.com
alpha.dev-photo.eam.aws.a2z.com
gamma.ap-southeast-4.spectrograph.cloudwatch.aws.a2z.com
*.d-c-ss.prod.sa-east-1.canary.identity.iot.aws.a2z.com
demantradev2.robotics.a2z.com
alpha.griffonquery.roparikh.people.a2z.com
livetracking.prod.ap-northeast-2.hydratest.aws.a2z.com
vccordob.idq-hawk.a2z.com
database-service.beta.caracal.proserve.aws.a2z.com
us-west-1.development.317961243480.amux.support.aws.a2z.com
1752a.prod.me-central-1.integtest.snapper.iot.aws.a2z.com
bacon-splunk-shc.public.prod.ap-northeast-2.ses.aws.a2z.com
128ca.prod.ap-south-1.integtest.puller.iot.aws.a2z.com
canary.beta.us-west-1.boost.aws.a2z.com
*.d-c-ss.prod.us-east-1.canary.identity.iot.aws.a2z.com
cn-northwest-1.prod.niffler.scooby.ebs.aws.a2z.com
datacatalogv2.alpha.spektr.a2z.com
kiatkoo.beta.images-service.uifc.catalog.a2z.com
commodore.beta.datacenter.security.aws.a2z.com
api.jarrodtb.inbound.rodeo.aft.a2z.com
prod.arcwarden.live-video.a2z.com
alpha.taasselfserveonboard.muechen.jrd.people.a2z.com
us-east-1.gamma.registry.cloudformation.aws.a2z.com
cell-0.af-south-1.gamma.tangerinebox.console.aws.a2z.com
kainin.beta.credits.business-ops.aws.a2z.com
api.alpha.cpfunctionalhealthdash.jrd.people.a2z.com

Certificate

The complete raw certificate details for *.staging.irc-edge.twitch.a2z.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi8MGQtkaUmkVh0Lpx7YH
mtlyc5T3MtnH0Tzzv/ZS+wa7oPLRLRDBUohIRYSD++1yQVr9ktp7DJ/OpR5j1g9h
WJfjgbV4P+Mz8bTi/WpmfP5HLzxGjZonp/9tD4iX4XBFUNdMiiU5UG9QYdW5emyP
aC1OGUoZ0H1oYASkAH9kNSCJ87hKxDeQBeh2yoctXkQGpTSraAR5MXBH80G/JWyH
penCZyYMtxoeWRFsEifWuqFyGe7fq0J7bRZpCWAiRWRIM/5gzOMe0sTTUA9LyhP3
gsFn6lLkAS+8XoHW0triZysS6DIUQWDcvGR1fibTcUYK2oVl1pIylhvNVi4yRqBP
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16149658477203249057136851799001838875
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.staging.irc-edge.twitch.a2z.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17643294534595829127911175598160362275406842175248264445905334875126754511279565735455777894882017981910215910164254169019197956128244548285470995892590766835967824787994708066656573865193512484648741723531248053589090037585441592354535126040459712559063493535561306369176739438790695085835507107257160778895491555146840618643063002122843721230189228429131205189014347017310176338755527387702904575273012035074180749694247184343283435363503349270457302083847923991596551201981446450452355433628093057004701922551206362466393411895934048627352647574870893378910059866694952719372625101885031149344942788916897900417007
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cee48968a1c5714cb714ec934031f6a22b88fe5e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.staging.irc-edge.twitch.a2z.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.irc-edge.twitch.a2z.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internal.twitch.tv'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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