prod.eu.grok.resolution.mbe.last-mile.amazon.dev

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0e:6e:dc:33:bc:a5:08:3c:1e:0f:d5:80:b3:ab:bd:12 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.eu.grok.resolution.mbe.last-mile.amazon.dev

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:6e:dc:33:bc:a5:08:3c:1e:0f:d5:80:b3:ab:bd:12
Serial Number (int): 19184810824559438349318117914518994194
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: fc:5b:51:b1:25:fa:21:ff:11:be:8c:8d:8b:fe:da:44:bb:cf:45:d9
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 0c:e9:5f:70:98:4c:4a:a3:29:35:99:99:bc:ce:e9:1b:f6:5f:1e:7c
Fingerprint (sha256): 08:fe:db:e0:f7:65:31:74:3f:ea:7a:1c:bc:df:95:2f:e5:93:84:e1:86:2b:a5:8b:ea:f3:f1:51:29:7a:53:44

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate prod.eu.grok.resolution.mbe.last-mile.amazon.dev

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.eu.grok.resolution.mbe.last-mile.amazon.dev

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prod.eu.grok.resolution.mbe.last-mile.amazon.dev

Other certificates including the domain name amazon.dev

(limited to 100 certificates)
employees.beta.api.talent-alchemy.hr.amazon.dev
regular.us-east-1.alpha.atta.kaspian.amazon.dev
beta.content-interception-service.metrix.music.amazon.dev
air.lmaq.last-mile.amazon.dev.lmaq.last-mile.amazon.dev
sam-dev-laijonat-test.vovi.last-mile.amazon.dev
api.nhancao.alpha.nardol.business.amazon.dev
gamma.styleguides.leo.amazon.dev
sungyenl.alpha.console.materials.sustainability.amazon.dev
us-east-1.prod.wake-word-allowlisting.reaver.avs.amazon.dev
eu-west-1.beta.sblandingpageservice.advertising.amazon.dev
us-east-1.beta.messaging.ui.bsm.selling-partners.amazon.dev
cm-eu-gamma.flex-routing.last-mile.amazon.dev
*.timlawso.physical.advertising.amazon.dev
heimdall.prime-video.amazon.dev
beta.supernova.amazon.dev
prod.devices.ateambi.accounting.amazon.dev
na.prod.contextual-augmentation.last-mile.amazon.dev
alpha.hitting-bullseye.zappos.amazon.dev
prod.assets.act.legal.amazon.dev
api.us-west-2.prod-jp.shopper-gateway.subs.f3.amazon.dev
us-east-1.prod.configurable-param.mbe.last-mile.amazon.dev
us.beta.itinerary-manager.onroad-execution.last-mile.amazon.dev
dev.celestia.noc.amazon.dev
lialx.test.attribution.privacy.amazon.dev
collab.dev.eto.supply-chain.amazon.dev
coredump-parser.eink.amazon.dev
phishing.security.amazon.dev
auth.prototype.alps.music.amazon.dev
api.dev-austsilv.test.jurisdiction-planner.last-mile.amazon.dev
andrena.niksinn.icon.amazon.dev
workflow.api.chrisfll.batch.caspian.dccs.amazon.dev
metrics-rhhigg.distance-assistant.opstechit.amazon.dev
eventsinkgw.prod.gws.ring.amazon.dev
us-west-2.alpha.int.lab.dml.alexa.amazon.dev
neighborsapigw.prod.gws.ring.amazon.dev
aasthame.api.permissions.vector.advertising.amazon.dev
deeplink.prod.alps.music.amazon.dev
lifepi.timlawso.physical.advertising.amazon.dev
*.beta.psidr.payments-security.amazon.dev
beta-dub.pokey.alexa.amazon.dev
turn.ring-mobility.devices.amazon.dev
us-west-2.prod.api.3d.music.amazon.dev
*.ums.gamma.us-east-1.api.compliance.amazon.dev
dev-1.pdx.nanobots.alexa.amazon.dev
jp.datastash-prod.pacman.last-mile.amazon.dev
us-west-2.beta.cx2.mts.primeair.amazon.dev
fba-i2i-console.scot.amazon.dev
alpha-6ae1e725d9.netsparker.security.amazon.dev
components.tapestry.amazon.dev
api.looc.robotics.amazon.dev
ops.chimera-beta.mlo.advertising.amazon.dev
beta.cruzoliv.people.amazon.dev
alpha.device.1p-idp.ihm.amazon.dev
beta.eu-west-1.tax-accessor.cmp.chroma.intech.amazon.dev
central.lmaq.last-mile.amazon.dev
vinoth.test.creative-report.calltoaction.advertising.amazon.dev
portal.transportation.amazon.dev
dev.beta.ap-northeast-1.autoflow-visualizer.aft.amazon.dev
appsync.alpha.risk-assessment.whs.amazon.dev
api.na.alpha.substitution-state-service.subs.f3.amazon.dev
us-west-2.beta.messaging.ui.bsm.selling-partners.amazon.dev
api.fcmap.swanwes.people.amazon.dev
alpha.mumblecore.kep.books.amazon.dev
prod.portal.us-west-2.metastream.robotics.amazon.dev
ssa-central.cops.amazon.dev
iad-beta.aviary.audible.amazon.dev
beta.kaizer.graph.amazon.dev
beta.us-west-2.mdcs.mshop.amazon.dev
dpd-debug.devices.dev.rss.ring.amazon.dev
www.nickjmil.people.amazon.dev
trck.ahs.prod-eu.turntable.sonic.advertising.amazon.dev
ak-game-service.prod.iad.games.kids.amazon.dev
dub.beta.unicorn-phoenix.lending.payments.amazon.dev
atoz.cupid-na.idprism-auth.amazon.dev
scorecard.ads.amazon.dev
in.iew.dolphinprod.last-mile.amazon.dev
prod.eu-west-1.mdcs.mshop.amazon.dev
zhenzihu.dev.mmt-validation.people-engine.amazon.dev
bp.sdn.kuiper.amazon.dev
beta.discovery.deepsea.s3c.amazon.dev
prod.luma.workshop.mathieud.people.amazon.dev
andrena.niksinn.icon.amazon.dev
beta.vse-fixer.tools.amazon.dev
fe.beta.tiago-ops-video.alexa.amazon.dev
user.prototype.alps.music.amazon.dev
ui.fe.stagewebsite-master.last-mile.amazon.dev
api.tms.pars.amazon.dev
fpd.sumantbh.icon.amazon.dev
gamma.na.cms.physical.advertising.amazon.dev
aax.online-panel.advertising.amazon.dev
gulbt-failure-analysis.bsxqa.digital-books.amazon.dev
jp.problemsolve-gamma.dolphinprod.last-mile.amazon.dev
www.music.amazon.dev
*.app-flow.mshop.amazon.dev
ry.beta.ap-northeast-1.autoflow-cascade.aft.amazon.dev
us-east-1.prod.api.uhd.music.amazon.dev
static.alpha.luma.workshop.mathieud.people.amazon.dev
atlas.doc.kuiper.amazon.dev
na.prod.keyhole.cs.amazon.dev
deeplink.beta.alps.music.amazon.dev

Certificate

The complete raw certificate details for prod.eu.grok.resolution.mbe.last-mile.amazon.dev in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFtRYiSr42fY6og+T/fW
oc544Nz9ZFmaTl8vFj3PvneBpocfnzTJY4pwZ8kZ4L6YvcYn+sNOdKu5/mREHGBr
YmXjlh4WEAzMkIVe1lrLnUJ7LAyWfW7C7c0PVaIrcLeqCkAPV5BNK5GD75AFdZHu
GCqoIcutfEhUYC2Ult3ZI5kpUHmAuUoNRyh6aMlaA0lymuZSVHd9euZ7K9bC2b2L
Kf7MeTYBi/uup4j+0y/AIR1BA99TIPU5+18gMcGN7NsnRwSc7zT+xpwJ+YyVe6Hv
Qe6o6iWeukI+8bx0t8YNajOpjX+5OIU/gEYQ/FdLSlx57vHCPRUuu0CdXRIQl2u9
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19184810824559438349318117914518994194
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.eu.grok.resolution.mbe.last-mile.amazon.dev'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25292691529885168038305031659351261061626487167401195315565586147149839061742366633382314880246509422142081693286951032013005491268554436090358524766751818574201731526290590568108234592869348128706080025435394860542995520109372767180135640726699003055837702444518666419232118851755243426643736629048820880217734617289295864058687245718641002431281326312553761739303274374627207116182730670384130329377735796045318048154389976150355493525831368051746805862814974446221219300851132590938705274657162390972041288934871734092790445572775982684988797744847388708744943072083217903040698747017777826594610855843269431770557
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc5b51b125fa21ff11be8c8d8bfeda44bbcf45d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.eu.grok.resolution.mbe.last-mile.amazon.dev'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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