arcus-www.amazon.com.au

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 07:64:55:95:35:43:56:e9:54:d5:23:73:05:f0:35:40 was issued on by DigiCert Inc.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=arcus-www.amazon.com.au

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:64:55:95:35:43:56:e9:54:d5:23:73:05:f0:35:40
Serial Number (int): 9825561482644532868719231816378103104
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ea:ec:e5:64:64:7a:e5:5e:03:fb:42:ad:41:88:e5:96:86:36:3b:3e
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): 13:2a:54:01:c2:bc:99:70:c9:15:60:85:5a:97:aa:44:0a:a3:7c:64
Fingerprint (sha256): 08:1e:04:dc:47:6a:3a:76:c6:d0:9b:25:ee:62:8b:4d:ac:a1:e6:d8:66:04:82:c8:b0:f4:cd:eb:a2:22:84:98

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate arcus-www.amazon.com.au

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for arcus-www.amazon.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arcus-www.amazon.com.au
www.amazon.com.au
p-nt-www-amazon-com-au-kalias.amazon.com.au
p-yo-www-amazon-com-au-kalias.amazon.com.au
p-y3-www-amazon-com-au-kalias.amazon.com.au

Other certificates including the domain name amazon.com.au

(limited to 100 certificates)
alexa-skills.amazon.com.au
completion.amazon.co.jp
cde-ta-g7g.amazon.com
identity.browserapps.amazon.co.jp
dcp.amazon.co.jp
skills-store-eu.amazon.com
dp-gw-na.amazon.com
dl.amazon.co.jp
aax-fe-retail-direct.amazon-adsystem.com
logistics.amazon.com
argileto.amazon.com
pitangui.amazon.com
*.peg.a2z.com
fls-fe-opf.amazon.com
sellercentral.amazon.com.au
www.amazon.com.au
kindlestore-sha-proxy.amazon.com
brandservices.amazon.com
alexa-skills-beta.amazon.com.au
kep.amazon.com
dp-gw-na.amazon.com
fls-fe.amazon.com
identity.browserapps.amazon.co.jp
pitangui.amazon.com
thumbnails-photos.amazon.co.jp
advertising-api-fe.amazon.com
kep-eu.amazon.com
api.amazon.com.au
ramp.amazon.com
affiliate-program.amazon.com.au
www.amazon.com.au
cde-ta-g7g.amazon.com
kindle.amazon.com
account-p2k.amazon.com
lwa.amazon.com.au
webservices.amazon.co.jp
kindle-store-proxy-endpoint-na.amazon.com
affiliate-program.amazon.com.au
skills-store-eu.amazon.com
skills-store-eu.amazon.com
akamai-renew-cert-digicert-arcus-www.amazon.com
dcp.amazon.co.jp
brandservices.amazon.com
cde-ta-g7g-preprod.amazon.com
www.amazon.com.au
rental-account.partnercentral-na.amazon.com
ddee-preprod.amazon.com
aax.online-panel.advertising.amazon.dev
twitch.amazon.co.jp
cde-ta-g7g.amazon.com
sellercentral.amazon.com.au
*.peg.a2z.com
brandservices.amazon.com
arcus-www.amazon.com.au
completion.amazon.co.jp
dpreview.in
sellercentral.amazon.com.au
sellercentral.amazon.com
*.peg.a2z.com
brandservices.amazon.com
completion.amazon.co.jp
cde-ta-g7g-preprod.amazon.com
*.peg.a2z.com
sellercentral.amazon.com
vendorcentral.amazon.com.au
argileto.amazon.com
*.peg.a2z.com
bob-dispatch-prod-na.amazon.com
argileto.amazon.com
ramp.amazon.com
logistics.amazon.com
ara-fe.amazon.com
puptrack-fe.amazon.com
kindle-store-proxy-endpoint-na.amazon.com
kindle.amazon.com
msh-tablet.amazon.com.au
www22.amazon.com.au
skills-store-eu.amazon.com
ramp.amazon.com
completion.amazon.co.jp
*.peg.a2z.com
ramp.amazon.com
www.amazon.com.au
advertising-fe.amazon.com
brandservices.amazon.com
alexa-skills.amazon.com
aax-fe.amazon.com
read.amazon.com.au
documents.amazon.com.au
aax-fe-retail-direct.amazon-adsystem.com
rental-account.partnercentral-na.amazon.com
bob-dispatch-prod-na.amazon.com
kindle.amazon.com
alexa-comms-mobile-service.amazon.com
dropship.amazon.com
kindle-store-proxy-endpoint-na.amazon.com
cde-ta-g7g.amazon.com
vendorcentral-prod.amazon.com
www.amazon.com.au
dropship.amazon.com

Certificate

The complete raw certificate details for arcus-www.amazon.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr15juXIjjWHCQZXTRCUW
KxnhsIKCyNMy7qokN1catcnuYF8e0HfiOdIQnwSfTrjC6Ly7cH1lts9Jn/N3dgBc
v39fx4lf4AXXDQZFoQxNO6V7RPleHO8vlUP4qaGG0KLf7PthTs8fo6bYUSKvu/SQ
wW6iI2e0dyQuzctHQgwTlkfrkq5Y6N4D08U2hPp1llZ6VwZjGUeu/NRRXphoABkj
ETuoFSnWWY/gdtLnmdxQTiltkpo6KTeMzjYx3Nm6ks334qeKx5bwBTxAn6Ueu2af
m1U4xqTTg8q1nO+Mk9a6Wr+ejL1DzMT00sq3dBJeAw7TbvM/CnBgX3PnG7lnFuVH
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9825561482644532868719231816378103104
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'arcus-www.amazon.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22138248590154836454479281134775287367858947096966500787575773827834554105343614731892392473491233979079796671330492684714616295070442313867867387016961143247553815106083578092205438572339030406087405014703229283666711015951635142361152911655150283229631535435743927757988933602780542719293998027685788520766313177196496302070930631789729820338544421515208080242028129902179504998932746437566669172034182755509936947884843772922755602523263028636617388038213581808455291045200575103508288558258007727357724671144964240495042972456094493654179465089550327598794599773223885390836938539457698103000544540214375653656341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eaece564647ae55e03fb42ad4188e59686363b3e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (182 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arcus-www.amazon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p-nt-www-amazon-com-au-kalias.amazon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p-yo-www-amazon-com-au-kalias.amazon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p-y3-www-amazon-com-au-kalias.amazon.com.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a71bf646f615a0cc24bfb21152158ae897e2b83d22930633450b58915791c40a72fd0a2c34279818180368f1905239b840f7464e1cbff289aab99aad4390bf634a43ba14e6720ec670840a596776954dddb2d9dad70c99ff9d5160ad4be63f1bb8104d96837249009f2d0f7d621032e4f7b3c2beef4118eae521b6032e656208684904c4e632ce612f12114f61b061c5a5c4b288c2985bc8dbb3105e1aa34f1fde7d95c0806544733597feea74c444ca232232d93a24490d57fcae59770c9fe6d58ad0e52d37c8be40b812fb546054ae899f2075545d11c583b3f437ca22d364c85cfc14d3b8053a372bce4b2b74faedb361933a7a7830d8a400b73008f197ba