eligibility.api.services-store.awsmpsa.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0e:f8:91:ca:fc:ba:ef:5c:ba:e7:6b:dc:08:f7:9c:c8 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=eligibility.api.services-store.awsmpsa.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:f8:91:ca:fc:ba:ef:5c:ba:e7:6b:dc:08:f7:9c:c8
Serial Number (int): 19899838593603029879721518955973024968
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 01:4a:a9:36:a1:59:6e:bb:fe:4d:8a:d7:ac:73:71:ea:a1:e0:aa:81
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 15:cf:7b:31:ea:32:79:9b:1a:0e:7e:22:e2:de:91:b2:8b:0c:e1:1e
Fingerprint (sha256): 0a:d0:eb:7c:8c:18:fd:3d:a1:ca:25:ce:3e:f6:08:7e:0b:0c:c3:38:e1:a3:b3:ad:0a:78:b5:f9:cc:e9:7f:a3

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate eligibility.api.services-store.awsmpsa.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eligibility.api.services-store.awsmpsa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eligibility.api.services-store.awsmpsa.com

Other certificates including the domain name awsmpsa.com

(limited to 100 certificates)
temp-engine.stockengine.awsmpsa.com
*.w3d.awsmpsa.com
dev-subscription.api.services-store.awsmpsa.com
pat-catalog.api.services-store.awsmpsa.com
dev-pcs.api.services-store.awsmpsa.com
dev-mynav.api.services-store.awsmpsa.com
*.awsmpsa.com
pat-cat.api.services-store.awsmpsa.com
origin-newenv-engine.stockengine.awsmpsa.com
*.cppv2.awsmpsa.com
preprod-fo.consuse.awsmpsa.com
trn-v3d.api.services-store.awsmpsa.com
*.gdpr-banner.awsmpsa.com
*.cppv2.awsmpsa.com
*.boostlev.awsmpsa.com
pprd-engine-api.stockengine.awsmpsa.com
dev-contract.api.services-store.awsmpsa.com
*.gdpr-blacklist.awsmpsa.com
api-log-incident-rp-rec.mym.awsmpsa.com
*.dev.sol.awsmpsa.com
dev-contrib.api.services-store.awsmpsa.com
origin-rec-engine-api.stockengine.awsmpsa.com
api-car-integ.mym.awsmpsa.com
*.gdpr-banner.awsmpsa.com
*.sepa.awsmpsa.com
ppr-cart.api.services-store.awsmpsa.com
pat-am.api.services-store.awsmpsa.com
integration-widget.stockengine.awsmpsa.com
ppr-corvet.api.services-store.awsmpsa.com
test-engine.stockengine.awsmpsa.com
eligibility.api.services-store.awsmpsa.com
*.lev.awsmpsa.com
ppr-mauv.api.services-store.awsmpsa.com
inf-subscription.api.services-store.awsmpsa.com
jenkins.boforms.awsmpsa.com
origin-prod-engine.gameday1.awsmpsa.com
ppr-mauv.api.services-store.awsmpsa.com
prod-engine-api.stockengine.awsmpsa.com
pat-context.api.services-store.awsmpsa.com
origin-integration-engine.stockengine.awsmpsa.com
origin-pprd-engine-api.stockengine.awsmpsa.com
dev-cat.api.services-store.awsmpsa.com
pcs.api.services-store.awsmpsa.com
fix-corvet.api.services-store.awsmpsa.com
*.savepartexchange.awsmpsa.com
trn-cart.api.services-store.awsmpsa.com
uat-catalog.api.services-store.awsmpsa.com
*.savepartexchange.awsmpsa.com
*.gdpr-banner.awsmpsa.com
neolane.api.services-store.awsmpsa.com
dev-accountreferential-2way.api.services-store.awsmpsa.com
jenkins.boforms.awsmpsa.com
pat-corvet.api.services-store.awsmpsa.com
fix-subscription.api.services-store.awsmpsa.com
generic-async-process.api.services-store.awsmpsa.com
pat-contrib.api.services-store.awsmpsa.com
generic-async-process.api.services-store.awsmpsa.com
uat-neolane.api.services-store.awsmpsa.com
ppr-neolane.api.services-store.awsmpsa.com
prod-fo.consuse.awsmpsa.com
pat-c1st.api.services-store.awsmpsa.com
ppr-cart.api.services-store.awsmpsa.com
dev-catalog.api.services-store.awsmpsa.com
*.lev.awsmpsa.com
inf-cat.api.services-store.awsmpsa.com
ppr-contract.api.services-store.awsmpsa.com
dev-accountreferential-2way.api.services-store.awsmpsa.com
api-log-incident-rp-integ.mym.awsmpsa.com
*.api.services-store.awsmpsa.com
origin-pprd-engine-api.stockengine.awsmpsa.com
*.brandbook.awsmpsa.com
uat-eligibility.api.services-store.awsmpsa.com
ppr-contrib.api.services-store.awsmpsa.com
ppr-pcs.api.services-store.awsmpsa.com
uat-eligibility.api.services-store.awsmpsa.com
uat-catalog.api.services-store.awsmpsa.com
trn-neolane.api.services-store.awsmpsa.com
prod-engine.gameday5.awsmpsa.com
pprd-engine-api.stockengine.awsmpsa.com
ppr-lead.api.services-store.awsmpsa.com
api-playin.awsmpsa.com
trn-contract.api.services-store.awsmpsa.com
api-car-integ.mym.awsmpsa.com
*.sol.awsmpsa.com
*.lev.awsmpsa.com
pat-accountreferential.api.services-store.awsmpsa.com
dev-neolane.api.services-store.awsmpsa.com
trn-cart.api.services-store.awsmpsa.com
api-log-incident-rp-integ.mym.awsmpsa.com
app-payments.api.services-store.awsmpsa.com
dev-contrib.api.services-store.awsmpsa.com
newenv-widget.stockengine.awsmpsa.com
dev-catalog.api.services-store.awsmpsa.com
ppr-subscription.api.services-store.awsmpsa.com
ppr-catalog.api.services-store.awsmpsa.com
*.gameday5.awsmpsa.com
*.lev.awsmpsa.com
inf-eligibility.api.services-store.awsmpsa.com
inf-catalog.api.services-store.awsmpsa.com
uat-pcs.api.services-store.awsmpsa.com

Certificate

The complete raw certificate details for eligibility.api.services-store.awsmpsa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3X4d9HLWLJ6YrJVr+KJx
gIyKPatOGvli9yjkPrKE8S0HwAEKX1wfc0XZdIuQr/45y4grpH7ByO5y2NZJQnxS
xDMVStwRlSaPE3Cdx9YcavDwpkuC9AqNH4LcOQF6rSuIFat2+/QH7lHa+KIebVtS
EAxgGtRnHckXKYNA1c5ee/2r+36675m3QZlwLzWXljm3lHVo2IG8AkAuyGO6IOUB
T3N7K7pYbKDz/4a2+OP9stjThnS3Kk20gZZv7JhoWFBpcz2I9zIIK9YU2DTwGVqC
BH39ACTWiigw5ofdetdzO7IZrrOIvwVNn30c8rTATASW5jBDyerhgFv4+ku0R3oo
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19899838593603029879721518955973024968
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eligibility.api.services-store.awsmpsa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27960856013617072773227840376259805720217623068626480800524617220117794897675038900485111566804059527691732532360103812552655375297187437011866048526671063519635015979591934181579365053705914732951027394366747451315721606580875167340879399450165441941714160519190241056155106987565218990818843163756020731665645334656707711355126215622982083873659902664011238065677444062663372544449538598655632756450320544179548603778645478737927490360963771351856569738640624927455806113491933603959789184454060508139597937767873517756373477029959922534979519143993162962771221604398494977871816448903223487670158340149947414489323
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							014aa936a1596ebbfe4d8ad7ac7371eaa1e0aa81
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eligibility.api.services-store.awsmpsa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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