sps-internal.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 08:0c:dc:68:d1:4e:41:db:96:87:04:e9:50:98:ab:d8 was issued on by Amazon.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sps-internal.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:0c:dc:68:d1:4e:41:db:96:87:04:e9:50:98:ab:d8
Serial Number (int): 10700601963200424036853243298155375576
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b2:74:3e:a6:eb:70:0b:14:3f:46:64:22:bb:ed:7c:72:6e:cf:a3:c3
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 24:dc:88:b0:78:b3:b1:a3:6f:7e:6e:75:5e:fa:96:2f:84:fa:7a:96
Fingerprint (sha256): 0f:08:c8:41:6c:c7:24:57:ab:58:7d:e0:74:ab:be:56:01:5e:25:00:dd:8c:6a:56:f5:10:6a:5c:e5:8a:25:3b

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate sps-internal.com

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sps-internal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sps-internal.com
integration.platform.sps-internal.com
grafana.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com
zipkin.integration.platform.sps-internal.com
nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com
kube-dashboard.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com
kiali.integration.platform.sps-internal.com
zipkin.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com
alertmanager.integration.platform.sps-internal.com
pushgateway.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com
jaeger.integration.platform.sps-internal.com
kiali.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com
prometheus.integration.platform.sps-internal.com
gotjwt.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com
jaeger.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com
alertmanager.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com
prometheus.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com
kubecost-dashboard.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com
kube-dashboard.integration.platform.sps-internal.com
gotjwt.integration.platform.sps-internal.com
pushgateway.integration.platform.sps-internal.com
kube-oidc-proxy.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com
grafana.integration.platform.sps-internal.com

Other certificates including the domain name sps-internal.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for sps-internal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnR4UugIvlURtYlJYGXKW
PkL0hyIjWAyzC1N0MtMoa7NDr0f5f5ZORNPuC7BMBrLS3dA3cgtIjnsaLGk10OAJ
+AwoE0f92STHeG6hxgo/FL+Ii4Sq+dZlIu5YLUV1oEbhJISonI/faFCkZVecFID4
M/CFyjJr4A3DNXQoDqmaqDEPtQlmUDApyDA9fnxL3Wzxu9e9EGuQVXUWdKWovAZa
Edv1uzN3nhpVSEXZ2uQ+rJCRl7jcUV0oN8dy0SOgO2DrAV7dguQV6yxbo5njuw3J
69P1Pi97nqCVCac0/GTj+Pshdcm2xjxM6ritEmXw00SlKMuVG7azITlfL5a96ZZK
wQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10700601963200424036853243298155375576
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sps-internal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19834247355508417200351871556618407879150323534484683206458915229344584534723887383925475363296131400149181428605276631118681214302756642705967268162081029030095731940762514646119382915199439888066014719366095612175139164736784446310115397016578678256760674261631225783300553261422391886760721248413778865020262572569221172876552895895948402719815320127071741679042365385455493743951770948360739068236222314387919315624738267690998818256019864527177472737257627427096676521344681461213289484350033544759584635453376874549518116375327533147819917723631486087596033134495666840582523897598938791025614408312669571795649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b2743ea6eb700b143f466422bbed7c726ecfa3c3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1459 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grafana.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zipkin.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kube-dashboard.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiali.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zipkin.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alertmanager.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pushgateway.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaeger.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiali.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prometheus.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotjwt.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaeger.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alertmanager.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prometheus.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kubecost-dashboard.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kube-dashboard.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotjwt.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pushgateway.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kube-oidc-proxy.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grafana.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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