api.na.prod.landing.advantage.vendors.amazon.dev

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0e:ce:7f:82:2f:c1:b0:a6:94:0f:26:4f:9b:94:44:1e was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api.na.prod.landing.advantage.vendors.amazon.dev

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:ce:7f:82:2f:c1:b0:a6:94:0f:26:4f:9b:94:44:1e
Serial Number (int): 19681391274307739682756440669115663390
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f4:7d:c3:fe:77:cd:c8:e9:c0:19:d9:38:9e:b5:d6:bf:30:e4:7c:ef
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): b9:21:cb:f3:42:98:12:34:50:e1:29:5d:c1:8c:70:46:8e:df:2d:26
Fingerprint (sha256): 09:27:e0:6c:ef:52:4b:25:dc:c0:9a:48:5b:f7:73:02:72:ab:c3:d9:08:6c:be:d7:24:63:fc:22:be:bf:3f:86

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate api.na.prod.landing.advantage.vendors.amazon.dev

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.na.prod.landing.advantage.vendors.amazon.dev

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.na.prod.landing.advantage.vendors.amazon.dev

Other certificates including the domain name amazon.dev

(limited to 100 certificates)
employees.beta.api.talent-alchemy.hr.amazon.dev
regular.us-east-1.alpha.atta.kaspian.amazon.dev
beta.content-interception-service.metrix.music.amazon.dev
air.lmaq.last-mile.amazon.dev.lmaq.last-mile.amazon.dev
sam-dev-laijonat-test.vovi.last-mile.amazon.dev
api.nhancao.alpha.nardol.business.amazon.dev
gamma.styleguides.leo.amazon.dev
sungyenl.alpha.console.materials.sustainability.amazon.dev
us-east-1.prod.wake-word-allowlisting.reaver.avs.amazon.dev
eu-west-1.beta.sblandingpageservice.advertising.amazon.dev
us-east-1.beta.messaging.ui.bsm.selling-partners.amazon.dev
cm-eu-gamma.flex-routing.last-mile.amazon.dev
*.timlawso.physical.advertising.amazon.dev
heimdall.prime-video.amazon.dev
beta.supernova.amazon.dev
prod.devices.ateambi.accounting.amazon.dev
na.prod.contextual-augmentation.last-mile.amazon.dev
alpha.hitting-bullseye.zappos.amazon.dev
prod.assets.act.legal.amazon.dev
api.us-west-2.prod-jp.shopper-gateway.subs.f3.amazon.dev
us-east-1.prod.configurable-param.mbe.last-mile.amazon.dev
us.beta.itinerary-manager.onroad-execution.last-mile.amazon.dev
dev.celestia.noc.amazon.dev
lialx.test.attribution.privacy.amazon.dev
collab.dev.eto.supply-chain.amazon.dev
coredump-parser.eink.amazon.dev
phishing.security.amazon.dev
auth.prototype.alps.music.amazon.dev
api.dev-austsilv.test.jurisdiction-planner.last-mile.amazon.dev
andrena.niksinn.icon.amazon.dev
workflow.api.chrisfll.batch.caspian.dccs.amazon.dev
metrics-rhhigg.distance-assistant.opstechit.amazon.dev
eventsinkgw.prod.gws.ring.amazon.dev
us-west-2.alpha.int.lab.dml.alexa.amazon.dev
neighborsapigw.prod.gws.ring.amazon.dev
aasthame.api.permissions.vector.advertising.amazon.dev
deeplink.prod.alps.music.amazon.dev
lifepi.timlawso.physical.advertising.amazon.dev
*.beta.psidr.payments-security.amazon.dev
beta-dub.pokey.alexa.amazon.dev
turn.ring-mobility.devices.amazon.dev
us-west-2.prod.api.3d.music.amazon.dev
*.ums.gamma.us-east-1.api.compliance.amazon.dev
dev-1.pdx.nanobots.alexa.amazon.dev
jp.datastash-prod.pacman.last-mile.amazon.dev
us-west-2.beta.cx2.mts.primeair.amazon.dev
fba-i2i-console.scot.amazon.dev
alpha-6ae1e725d9.netsparker.security.amazon.dev
components.tapestry.amazon.dev
api.looc.robotics.amazon.dev
ops.chimera-beta.mlo.advertising.amazon.dev
beta.cruzoliv.people.amazon.dev
alpha.device.1p-idp.ihm.amazon.dev
beta.eu-west-1.tax-accessor.cmp.chroma.intech.amazon.dev
central.lmaq.last-mile.amazon.dev
vinoth.test.creative-report.calltoaction.advertising.amazon.dev
portal.transportation.amazon.dev
dev.beta.ap-northeast-1.autoflow-visualizer.aft.amazon.dev
appsync.alpha.risk-assessment.whs.amazon.dev
api.na.alpha.substitution-state-service.subs.f3.amazon.dev
us-west-2.beta.messaging.ui.bsm.selling-partners.amazon.dev
api.fcmap.swanwes.people.amazon.dev
alpha.mumblecore.kep.books.amazon.dev
prod.portal.us-west-2.metastream.robotics.amazon.dev
ssa-central.cops.amazon.dev
iad-beta.aviary.audible.amazon.dev
beta.kaizer.graph.amazon.dev
beta.us-west-2.mdcs.mshop.amazon.dev
dpd-debug.devices.dev.rss.ring.amazon.dev
www.nickjmil.people.amazon.dev
trck.ahs.prod-eu.turntable.sonic.advertising.amazon.dev
ak-game-service.prod.iad.games.kids.amazon.dev
dub.beta.unicorn-phoenix.lending.payments.amazon.dev
atoz.cupid-na.idprism-auth.amazon.dev
scorecard.ads.amazon.dev
in.iew.dolphinprod.last-mile.amazon.dev
prod.eu-west-1.mdcs.mshop.amazon.dev
zhenzihu.dev.mmt-validation.people-engine.amazon.dev
bp.sdn.kuiper.amazon.dev
beta.discovery.deepsea.s3c.amazon.dev
prod.luma.workshop.mathieud.people.amazon.dev
andrena.niksinn.icon.amazon.dev
beta.vse-fixer.tools.amazon.dev
fe.beta.tiago-ops-video.alexa.amazon.dev
user.prototype.alps.music.amazon.dev
ui.fe.stagewebsite-master.last-mile.amazon.dev
api.tms.pars.amazon.dev
fpd.sumantbh.icon.amazon.dev
gamma.na.cms.physical.advertising.amazon.dev
aax.online-panel.advertising.amazon.dev
gulbt-failure-analysis.bsxqa.digital-books.amazon.dev
jp.problemsolve-gamma.dolphinprod.last-mile.amazon.dev
www.music.amazon.dev
*.app-flow.mshop.amazon.dev
ry.beta.ap-northeast-1.autoflow-cascade.aft.amazon.dev
us-east-1.prod.api.uhd.music.amazon.dev
static.alpha.luma.workshop.mathieud.people.amazon.dev
atlas.doc.kuiper.amazon.dev
na.prod.keyhole.cs.amazon.dev
deeplink.beta.alps.music.amazon.dev

Certificate

The complete raw certificate details for api.na.prod.landing.advantage.vendors.amazon.dev in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi+59Jodi1I+uwjbtOcj4
PEcZILhYhazOrzX3D/bPGQ7gk76goqCUgZ2EKHPKAGqNaDSUPJhJSrrTVsBYYUw8
Jfef2lvPIz0uOkah5ClZg3KnTFA34wKwcDw1Yf4VUwJsx5rYg6yLWepgow0zOf4P
zemaU5A1p/ITJOLN6C5BMAcz1vhK/snfIZfBWtinY1hethwiQ7kQh25O4uq1DEsI
1MQXem8xQPC1k8JOY0snJg5ME/w2isxbka8ta2vaDK4JjcXCcidY2f2WnGMJ9jPk
b2PLvGmN/JsOZy1cFUSxH1hkBZiMbzOvK07VDfINSZ5Rcx1O+7JXqdBS4LTSJEJx
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19681391274307739682756440669115663390
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.na.prod.landing.advantage.vendors.amazon.dev'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17664727634794747727891627862407367079024086441710207061968813852571600666898061917191710830760621573324046518828037791541365051210193383769840702319712445986567223173788066676055826046633966094055260993656177357420370677946164281671983910575630144318735006566908318470080152289060776986838018135220786376913960560338740553743846958811333253715961013045588756556420083194975357032959295167069874534477597087532491825671795016544948089641075279901948088293330623837130056437005244634390474673280380657073663285911320317311878223837645691969217998881923587460953123790322807150400368553547870196947686858723411393409383
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f47dc3fe77cdc8e9c019d9389eb5d6bf30e47cef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.na.prod.landing.advantage.vendors.amazon.dev'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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