aax-adx.ap-southeast.3px.axp.amazon-adsystem.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 07:4e:51:99:9f:cf:ec:d9:7d:75:b8:d7:dc:21:c4:fd was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aax-adx.ap-southeast.3px.axp.amazon-adsystem.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:4e:51:99:9f:cf:ec:d9:7d:75:b8:d7:dc:21:c4:fd
Serial Number (int): 9711250172006370829827870137134466301
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 3e:03:31:78:db:13:88:a4:c4:d2:01:76:d5:fb:3d:8c:ae:60:c1:7e
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 7a:14:90:03:b5:81:07:29:86:1d:7b:77:f2:38:8a:b0:4b:35:5d:77
Fingerprint (sha256): 08:30:be:2b:be:6e:11:80:3b:c4:39:47:c0:8d:9c:ce:60:ed:e7:3f:b7:49:67:19:bf:29:b3:7d:91:41:d6:be

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate aax-adx.ap-southeast.3px.axp.amazon-adsystem.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aax-adx.ap-southeast.3px.axp.amazon-adsystem.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aax-adx.ap-southeast.3px.axp.amazon-adsystem.com
aax-fe-sin-rtb-adx.amazon-adsystem.com
aax-fe-sin-rtb.amazon-adsystem.com

Other certificates including the domain name amazon-adsystem.com

(limited to 100 certificates)
aax-us-west.amazon-adsystem.com
rcm-fe.assoc-amazon.com
aax-us-east.amazon-adsystem.com
www.assoc-amazon.fr
aax-fe-retail-direct.amazon-adsystem.com
assoc-msdk-cn.amazon-adsystem.com
wms-eu.assoc-amazon.com
aax-fe.amazon-adsystem.com
www.assoc-amazon.ca
aax-vx-fe-us-west-2.amazon-adsystem.com
aax-us-pdx-rtb-adx.amazon-adsystem.com
aax-us-pdx-rtb-adx.amazon-adsystem.com
aax-us-east-test1.amazon-adsystem.com
rcm-na.assoc-amazon.com
aax-us-iad.amazon.com
aax-us-east-test6.amazon-adsystem.com
mads-eu.amazon.com
z-eu.amazon-adsystem.com
aax-eu-retail-direct.amazon-adsystem.com
www.assoc-amazon.ca
wms-eu.assoc-amazon.com
aax-vx-us-us-east-1.amazon-adsystem.com
aax-fe-sin.amazon-adsystem.com
aax.online-panel.advertising.amazon.dev
cdn-d.amazon-adsystem.com
rcm-fe.assoc-amazon.com
www.assoc-amazon.de
rcm-eu.assoc-amazon.com
s.amazon-adsystem.com
aax-us-pdx.amazon-adsystem.com
wms-na.assoc-amazon.com
v-eu.amazon-adsystem.com
aax-adx.ap-southeast.3px.axp.amazon-adsystem.com
rcm-fe.assoc-amazon.com
cdn-c.amazon-adsystem.com
aax-apse-dtb-web.amazon-adsystem.com
fls-na.amazon-adsystem.com
aax-eu.amazon-adsystem.com
wms-na.assoc-amazon.com
at-us-east.amazon-adsystem.com
aax-us-east-rtb-adx.amazon-adsystem.com
wms-na.assoc-amazon.com
ws-eu.assoc-amazon.com
aax-us-pdx.amazon-adsystem.com
z-eu.amazon-adsystem.com
aax-us-pdx.amazon-adsystem.com
fls-cn.amazon-adsystem.com
ws-fe.assoc-amazon.com
video-player.aps.amazon-adsystem.com
aax-eu.amazon-adsystem.com
wms-na.assoc-amazon.com
vq-eu-west-1.amazon-adsystem.com
assoc-msdk-eu.amazon-adsystem.com
aax-us-pdx-rtb-adx.amazon-adsystem.com
wms-na.assoc-amazon.com
aax-us-west.amazon-adsystem.com
www.assoc-amazon.fr
ws-fe.assoc-amazon.com
vaes.dub.amazon-adsystem.com
cell8002.pdx.spp.bid-na.ads.aps.amazon-adsystem.com
?.amazon-adsystem.com
mads.amazon.com
aax-us-east.amazon-adsystem.com
www.assoc-amazon.ca
mas-sdk.amazon.com
z-eu.amazon-adsystem.com
aax-us-pdx-rtb-adx.amazon-adsystem.com
imdb.amazon-adsystem.com
imdb.amazon-adsystem.com
aax-fe-retail-direct.amazon-adsystem.com
vq-test-us-east-1.amazon-adsystem.com
aax-vx-us-us-west-2.amazon-adsystem.com
aax-us-east-test1.amazon-adsystem.com
atue.amazon-adsystem.com
rcm-na.assoc-amazon.com
c.amazon-adsystem.com
assoc-msdk-metrics-us.amazon-adsystem.com
www.assoc-amazon.es
ws-eu.assoc-amazon.com
z-na.amazon-adsystem.com
vfw-ap.amazon-adsystem.com
mas-sdk.amazon.com
mobile-associates-service.amazon.com
rcm-eu.assoc-amazon.com
v-eu.amazon-adsystem.com
ws-cn.assoc-amazon.com
aax-fe.amazon-adsystem.com
aax-fe-sin-rtb-adx.amazon-adsystem.com
*.us-east-1.prod.3p.entry.video-ads.a2z.com
www.assoc-amazon.jp
aax-vx-us-iad.amazon-adsystem.com
www.assoc-amazon.de
v.amazon-adsystem.com
aax.online-panel.advertising.amazon.dev
fls-fe.amazon-adsystem.com
www.assoc-amazon.ca
rcm-fe.assoc-amazon.com
aax-us-pdx-rtb-adx.amazon-adsystem.com
aax-us-iad.amazon.com
cell7002.pdx.stv.bid-na.ads.aps.amazon-adsystem.com

Certificate

The complete raw certificate details for aax-adx.ap-southeast.3px.axp.amazon-adsystem.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBWe42h8g65tdV4LATav
2fi0FQm68alXc/jeSsJ2blKRsrRtUcz+kdDBp3XBCYnd8vH2mM52LVcSgqvR/Rey
0L6ckYmBOpvw/JKLOVeKWvzRjKcwquL5n6cPk/JVUckooeE/1D8vhE0o52K5wPye
BaeUlSIKZ4JgU5RXXIQL/nFbRJZTmFxHmZo1CevWC4qIQ5IBaaJuJINNYdSk8s3j
A1aB+ZYxoThDpfKry/hSf+VwDUb3MVS5fGb+MswCFy1pZI3TkE/iKHIKzJTEQ6v5
Gd7f1V9TrOmf8zln1i0HW6I4zhjwuehn28LobkkF0IOIfOso+QD7WDyqkj0jvDhn
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9711250172006370829827870137134466301
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aax-adx.ap-southeast.3px.axp.amazon-adsystem.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21723649997723185112819146862180636475342823276034868555056254020317848519579413947929473261518925466081296817794647768824619400272035263827332302314213829919817105947293595990234135628289137936109366618738904021277787855409402719999224264573854445826405855882693043687453697054401450445229758773158848750996790561262905579655387031054557560503328837760656776559649898288771625109022815200909072040522457799502045821328756042937709128511906730293262982815829570724022263693891764101752617785519518517381694792949338378544657981380191294958440072479016027815935176438542607627272723256775006332154292429057195094075327
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3e033178db1388a4c4d20176d5fb3d8cae60c17e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aax-adx.ap-southeast.3px.axp.amazon-adsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aax-fe-sin-rtb-adx.amazon-adsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aax-fe-sin-rtb.amazon-adsystem.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							0165007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018752893c830000040300463044022054a211c0c02ead4c6c72cc4861111baaf36200314deff0e9a6e1ba540f4ab7b302201c726fe8705ff19626f734832e07d022126ea8f3c118799df095ef63a5a2f00700750073d99e891b4c9678a0207d479de6b2c61cd0515e71192a8c6b80107ac17772b50000018752893ccd000004030046304402201f3a10a21fe4d05dbe6170369c230a750de72258a50099fd695ce8a286ad99f302202ca9585b674f1be8655f15e7909ea006c8ec9627123955e1e77d5cc501d3671e00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018752893c9c000004030046304402203db128b964d754ef611b70ec2cdcd35eecfa1a4a62c7eef20f3fcb9e2fa006740220498255c05ee40ec62b266e354ed8d6ed126df5a944073790c7397d960ccdd3b7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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