sps-internal.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0e:40:81:7b:74:a5:28:34:09:b9:18:a3:02:cc:8e:55 was issued on by Amazon.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sps-internal.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:40:81:7b:74:a5:28:34:09:b9:18:a3:02:cc:8e:55
Serial Number (int): 18944125151937835262980530520361569877
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 05:72:ba:ad:03:d4:c4:99:03:07:47:d2:35:f4:8c:d9:49:66:1d:67
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): af:55:29:af:df:ca:6c:68:23:1e:91:cc:3d:02:1e:e1:d8:1e:45:92
Fingerprint (sha256): 0e:3f:ab:53:8b:05:1c:c6:d1:c1:f1:4b:c7:d1:6d:0d:da:91:06:04:a5:10:31:2d:84:ff:32:55:f3:69:b0:b8

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate sps-internal.com

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sps-internal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sps-internal.com
jaeger.sandbox.integration.platform.sps-internal.com
nonprod-us-east-1-sandbox-1a2b.sandbox.integration.platform.sps-internal.com
gotjwt.nonprod-us-east-1-sandbox-1a2b.sandbox.integration.platform.sps-internal.com
gotjwt.sandbox.integration.platform.sps-internal.com
prometheus.sandbox.integration.platform.sps-internal.com
alertmanager.nonprod-us-east-1-sandbox-1a2b.sandbox.integration.platform.sps-internal.com
pushgateway.sandbox.integration.platform.sps-internal.com
kiali.nonprod-us-east-1-sandbox-1a2b.sandbox.integration.platform.sps-internal.com
zipkin.sandbox.integration.platform.sps-internal.com
kiali.sandbox.integration.platform.sps-internal.com
grafana.nonprod-us-east-1-sandbox-1a2b.sandbox.integration.platform.sps-internal.com
prometheus.nonprod-us-east-1-sandbox-1a2b.sandbox.integration.platform.sps-internal.com
sandbox.integration.platform.sps-internal.com
kube-dashboard.sandbox.integration.platform.sps-internal.com
zipkin.nonprod-us-east-1-sandbox-1a2b.sandbox.integration.platform.sps-internal.com
kube-dashboard.nonprod-us-east-1-sandbox-1a2b.sandbox.integration.platform.sps-internal.com
pushgateway.nonprod-us-east-1-sandbox-1a2b.sandbox.integration.platform.sps-internal.com
kubecost-dashboard.nonprod-us-east-1-sandbox-1a2b.sandbox.integration.platform.sps-internal.com
alertmanager.sandbox.integration.platform.sps-internal.com
jaeger.nonprod-us-east-1-sandbox-1a2b.sandbox.integration.platform.sps-internal.com
grafana.sandbox.integration.platform.sps-internal.com

Other certificates including the domain name sps-internal.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for sps-internal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg8xeWjqcP2FdIyhsKazO
0fIUCzxXLzD9kLgGC8kftb3lKOnoJDvlj/PwpnROWpO3+GnCy+NvNQOjsFudTPM1
tL3O8mDlC/DZ6cHllaOY8ebPhaUTwtx7QwZ9w6+ir5yVxQ6QDIxwy6Q3946SHekN
Cakzo3FP/PJZEqgy17e47QZnWPCmSWwmTLFE9NfGv5/0DX2AtWZ/B5Lhipq/Ep3t
O4ZLVrWQ1Ww3NP2oQ/dc61KDLAo2qb7ky9/02GJk6/fU32NVIbeVmcbHKxj14m5M
b1BYk1kwW6MgPerySnZdhNMWDwoBfq2b9X4ffacC6PLMuls9HFF5F4oNmkRRr651
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18944125151937835262980530520361569877
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sps-internal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16637995845645936367431033133570432215514734499897958774716563808166478322655920295995932401603299048602558544690422671908315232189708058495508736628429147308019398445854052016226944827865101874462075386535945723038874934570927573424254801645979079958316586039405188460865863583639225250651664060569521565284791123545664760158294352072432010778407731458917057884821525698340517315535982760841950379536377141267458872188883282989785681847263853909527472987284032641718265849226926834114273633578796974610402510907070759045519171613883523794571906718538038466181166081885544627048332292949850484453502351153083913762227
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0572baad03d4c499030747d235f48cd949661d67
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1541 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaeger.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprod-us-east-1-sandbox-1a2b.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotjwt.nonprod-us-east-1-sandbox-1a2b.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotjwt.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prometheus.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alertmanager.nonprod-us-east-1-sandbox-1a2b.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pushgateway.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiali.nonprod-us-east-1-sandbox-1a2b.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zipkin.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiali.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grafana.nonprod-us-east-1-sandbox-1a2b.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prometheus.nonprod-us-east-1-sandbox-1a2b.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kube-dashboard.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zipkin.nonprod-us-east-1-sandbox-1a2b.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kube-dashboard.nonprod-us-east-1-sandbox-1a2b.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pushgateway.nonprod-us-east-1-sandbox-1a2b.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kubecost-dashboard.nonprod-us-east-1-sandbox-1a2b.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alertmanager.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaeger.nonprod-us-east-1-sandbox-1a2b.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grafana.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00124a9497a91451c5c569a1d02bd4b1a565729a4cef2bc423121553f95498fb983ad23c3cf04421ac1a80aeef80f13429d526619c3bfff18053c18b5517c3fab542c8ae12e0e56ba86c67f77f7459e2779a401bb0b3c44ce80a88fa35e37707fc9dbefe1f52c99fe7b62d9875f035675f6c928dbab30f0c90ce4cd99516c0edfc597ec9839bda23b71cff90e8264e29eefe915e59670241809c8f7e0ab71447d770103b92e26e5f906e9088da030ec17c6e91aaba48a9ff0b4e6490eccc313a7de6d31a14b96164cec74caa59177b4b43b4268d8086335e113a2b1d5997178377edefbb852fe84f3a0e8e627104f6770df29fbf0dfdafe37072d40dd2432c2cbe