*.int.api.discomax.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0e:e4:82:29:22:64:6b:34:1f:2f:e3:a2:42:0b:b4:a0 was issued on by Amazon.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.int.api.discomax.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:e4:82:29:22:64:6b:34:1f:2f:e3:a2:42:0b:b4:a0
Serial Number (int): 19795675596981789892530025649117312160
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 30:ed:0f:92:c5:9f:d7:c6:4e:47:c9:2f:58:4d:96:65:e3:e1:0b:7a
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): e3:9e:1f:80:a9:95:2f:22:19:02:79:44:5e:ab:f9:fb:d5:a6:ad:a6
Fingerprint (sha256): 08:42:e0:af:bf:37:1e:cc:e5:9b:e9:8b:8a:84:06:d7:9c:66:d9:65:af:04:7f:4c:f0:f6:50:2d:79:bc:4e:c1

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate *.int.api.discomax.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.int.api.discomax.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.int.api.discomax.com
*.o11y.int.disco-api.com
*.int.discomax.discoveryplus.com
*.int.o11y.discomax.com
*.use1.int.api.discomax.com

Other certificates including the domain name discomax.com

(limited to 100 certificates)
x1-experimental.ctv.prd.beam.discomax.com
*.beam-amer.euw1.stg.api.discomax.com
*.prd.api.discomax.com
*.prd.api.discomax.com
*.int.api.discomax.com
*.prd.api.discomax.com
int.api.discomax.com
webos.ctv.play-hbo.stg.beam.discomax.com
*.stg.api.discomax.com
*.br-amer.usw2.stg.api.discomax.com
*.prd.api.discomax.com
stg.api.discomax.com
*.stg.api.discomax.com
*.int.api.discomax.com
*.dev.api.discomax.com
*.prd.api.discomax.com
*.br-latam.stg.api.discomax.com
*.any-latam.prd.api.discomax.com
auth.stg.beam.discomax.com
*.prd.api.discomax.com
play-rc.stg.beam.discomax.com
*.stg.api.discomax.com
images.cdn.prd.api.discomax.com
*.private.euw1.stg.api.discomax.com
webos.ctv.play-hbo.dev.beam.discomax.com
*.stg.api.discomax.com
*.dev.api.discomax.com
*.stg.api.discomax.com
stg.api.discomax.com
xbox.ctv.dev.beam.discomax.com
*.any-amer.dev.api.discomax.com
*.any-amer.int.api.discomax.com
*.prod.api.discomax.com
*.any-amer.apne1.prd.api.discomax.com
stg.api.discomax.com
telenor.ctv.stg.beam.discomax.com
telia.ctv.prd.beam.discomax.com
stg.api.discomax.com
default.private-vpce.eun1.prd.api.discomax.com
*.prd.api.discomax.com
*.int.api.discomax.com
*.prd.api.discomax.com
prd.api.discomax.com
ps5.ctv.dev.beam.discomax.com
int.api.discomax.com
*.beam-apac.euw1.stg.api.discomax.com
*.any-amer.aps1.stg.api.discomax.com
*.prd.api.discomax.com
*.prd.api.discomax.com
*.any-amer.int.api.discomax.com
*.dev.api.discomax.com
*.prd.api.discomax.com
int.api.discomax.com
*.prd.api.discomax.com
*.prod.api.discomax.com
*.vodafonestb.sagemcom.ctv.dev.beam.discomax.com
ps4.ctv.prd.beam.discomax.com
*.beam-apac.euw1.stg.api.discomax.com
*.any-amer.dev.api.discomax.com
wbd-beam-typescript.dev.beam.discomax.com
prd.api.discomax.com
webos.ctv.play-hbo.int.beam.discomax.com
*.prod.api.discomax.com
*.prd.api.discomax.com
*.stg.api.discomax.com
*.private.eu.stg.api.discomax.com
webos.ctv.prd.beam.discomax.com
stg.api.discomax.com
cast.ctv.int.beam.discomax.com
*.dev.api.discomax.com
prd.api.discomax.com
int.discomax.discoveryplus.com
ziggo.ctv.prd.beam.discomax.com
memento.int.infra.api.discomax.com
*.stg.api.discomax.com
x1.ctv.stg.beam.discomax.com
*.ci-reports.dev.beam.discomax.com
*.int.api.discomax.com
vizio.ctv.dev.beam.discomax.com
int.api.discomax.com
*.any-amer.euc1.stg.api.discomax.com
*.int.api.discomax.com
webos.ctv.dev.beam.discomax.com
*.int.api.discomax.com
*.stg.api.discomax.com
tizen.ctv.dev.beam.discomax.com
int.api.discomax.com
*.any-amer.euc1.prd.api.discomax.com
*.use.dev.api.discomax.com
*.int.api.discomax.com
x1.ctv.prd.beam.discomax.com
dev.api.discomax.com
tizen.ctv.int.beam.discomax.com
*.dev.api.discomax.com
*.any-latam.prd.api.discomax.com
dev.api.discomax.com
*.prd.api.discomax.com
telenor-rc.ctv.stg.beam.discomax.com
*.prd.api.discomax.com
*.prd.api.discomax.com

Certificate

The complete raw certificate details for *.int.api.discomax.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYdsVxq8YXC2cs2IxHuM
iz2qBG85l3MO41op+6+rPbAtfZAeSu7EyMKqHulu9c5TUIaY3+m2+LyReoXTwvbp
8H7FQZxwDZXOEjXCarmibOfIdLPF+1hKgO06T4zTqvntkkqt9ztrTz8bm3S1PJ2i
eFTHfA9wRBX+YHRyNy4loxNZW2UzdlfDuZTJW5gOVv6PJWXjOTXaJWYs9hHIuZa9
Nu3VuuCxdDA0afnQdWoFkTbqx3LEYD0hVb+gU/GRw/GPg615GRLie7I5kT4QOYyb
9ozddl0rdqTFEybeu7sCIOayNudCHLRCLrwAq09y7U5D4Gd64Ro/uRV558pBsyB5
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19795675596981789892530025649117312160
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.int.api.discomax.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21401053210122092864992720775091271799783394478404129835925752025913061295218624713091721105374998885430873099952575145018814192166383263174700093392425291000443776909265128388958222098071979043290504531701066193508641393487608595055952944363554644780358765162217260870196288204695954038274110025282451886012986687098160906505788526732452182147917981476645187835866191408794184497937971821585187988179311379112055773133327716996353017356019248156218502089924629293375366763823099268869549082689913624020714495298249674468649735322796381869698661633748801682239093624582770017387255094927743264287931008016428633717201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							30ed0f92c59fd7c64e47c92f584d9665e3e10b7a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.int.api.discomax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.o11y.int.disco-api.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.int.discomax.discoveryplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.int.o11y.discomax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.use1.int.api.discomax.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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