api.price-comparison-test.s-cloud.fi

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 05:d6:fc:ca:75:cf:87:43:aa:1e:e2:52:8b:51:2a:f1 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api.price-comparison-test.s-cloud.fi

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:d6:fc:ca:75:cf:87:43:aa:1e:e2:52:8b:51:2a:f1
Serial Number (int): 7762418714420613140790715819565853425
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: f8:ca:06:ad:08:f5:1e:60:00:9b:74:bd:2d:ce:5a:0c:21:9f:dc:22
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): c8:99:56:ae:07:a0:30:f0:89:55:9d:3a:f0:67:66:1b:c3:df:e2:51
Fingerprint (sha256): 10:33:5d:2e:86:22:7c:78:42:b5:73:c2:0e:49:0e:57:5f:2a:49:21:d9:4c:7c:ad:9a:b3:30:b2:f6:d2:4a:78

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate api.price-comparison-test.s-cloud.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.price-comparison-test.s-cloud.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.price-comparison-test.s-cloud.fi

Other certificates including the domain name s-cloud.fi

(limited to 100 certificates)
products-search.contenthub.s-cloud.fi
*.coco-dev.s-cloud.fi
splunk.logmanagement.s-cloud.fi
*.devopstools.s-cloud.fi
*.tunnistus-qa.s-cloud.fi
api.abcmobile-dev.s-cloud.fi
auth.tunnistus-test.s-cloud.fi
*.tunnistus-qa.s-cloud.fi
reo-salesforce-adapter.coco.s-cloud.fi
splunk.logmanagement.s-cloud.fi
staffapi-dev.raflaamo-test.s-cloud.fi
api.cmg-dev.s-cloud.fi
ext.eu-west-1.sokoshotelsmobile-test.s-cloud.fi
t-ext.dam-test.s-cloud.fi
splunk.logmanagement.s-cloud.fi
management.pobmanagement-dev.s-cloud.fi
data.s-cloud.fi
sinkhole-int-test.logcollector-test.s-cloud.fi
dam.s-cloud.fi
wp-multisite.sites-test.s-cloud.fi
beta.omo-test.s-cloud.fi
dia.coco-test.s-cloud.fi
ext.dam.s-cloud.fi
api.pressu.s-cloud.fi
api.skartta-qa.s-cloud.fi
lb-ext.dam.s-cloud.fi
browser-consent-front.coco.s-cloud.fi
splunk.logmanagement.s-cloud.fi
entry-dev.s-cloud.fi
dam-input.contenthub-test.s-cloud.fi
adyen-webhook-listener-dev.ssc-dev.s-cloud.fi
api-dev.sokoshotelswebsite-test.s-cloud.fi
dam-input.contenthub-dev.s-cloud.fi
ao-api.ahis-edu.s-cloud.fi
*.gluucb.tunnistus-qa.s-cloud.fi
abc-auto.sites-test.s-cloud.fi
api.emobility-qa.s-cloud.fi
aok.wp-test.s-cloud.fi
radiator-dev.sokoshotelsmobile-test.s-cloud.fi
ext.dam.s-cloud.fi
wp.sites-test.s-cloud.fi
splunk-test.logmanagement-test.s-cloud.fi
henksu-test.s-cloud.fi
sinkhole.logmanagement.s-cloud.fi
reo.coco-dev.s-cloud.fi
*.sites-test.s-cloud.fi
ahis-api.ahis-dev.s-cloud.fi
sp.s-cloud.fi
*.wp.s-cloud.fi
splunk-demo-demo.logmanagement-test.s-cloud.fi
sinkhole-int-test.logcollector-test.s-cloud.fi
sinkhole-int-test.logcollector-test.s-cloud.fi
frontend.atlassian.s-cloud.fi
int.eu-west-1.sokoshotelsmobile.s-cloud.fi
ext-qa.eu-west-1.sokoshotelsmobile-test.s-cloud.fi
tasku-osk-ui.coco.s-cloud.fi
ext.dam.s-cloud.fi
*.service.int.abcmobile.s-cloud.fi
splunk-test.logmanagement-test.s-cloud.fi
dam-input.contenthub-test.s-cloud.fi
boomi.s-cloud.fi
mastergui-test.logmanagement-test.s-cloud.fi
product-brands.contenthub-test.s-cloud.fi
event-stream.custi-dev.s-cloud.fi
lupa.coco.s-cloud.fi
*.purchase-event-stream-dev.s-cloud.fi
*.tunnistus-qa.s-cloud.fi
testrail-test.s-cloud.fi
*.test.sokos.fi
spectrum.coco-test.s-cloud.fi
sinkhole-int.logcollector.s-cloud.fi
lb-ext.dam.s-cloud.fi
vikke-osk-ui.coco.s-cloud.fi
ext-preprod.eu-west-1.sokoshotelsmobile.s-cloud.fi
raflaamo-test.s-cloud.fi
argocd-qa.s-cloud.fi
reo.coco.s-cloud.fi
api.price-comparison-test.s-cloud.fi
tos-poc.coco-test.s-cloud.fi
api.skartta.s-cloud.fi
splunk.logmanagement.s-cloud.fi
s-bonus.sites.s-cloud.fi
rekku.coco-test.s-cloud.fi
*.gitlab-pages-dev.s-cloud.fi
s-bonus.sites.s-cloud.fi
reo.coco.s-cloud.fi
*.gitlab-pages-test-spankki.s-cloud.fi
radiator-dev.sokoshotelsmobile-test.s-cloud.fi
splunk.logmanagement.s-cloud.fi
tasku-bff.coco.s-cloud.fi
shiny.paja-test.s-cloud.fi
sok-contacts-nm-bff.coco-test.s-cloud.fi
dropshipping-api.ecommerce-om-dev.s-cloud.fi
mrm-id.s-cloud.fi
admin-ui.contenthub.s-cloud.fi
t-lb-ext.dam-test.s-cloud.fi
api-ext.dam.s-cloud.fi
api-int.s-cloud.fi
splunk-test.logmanagement-test.s-cloud.fi
reo-salesforce-adapter.coco-dev.s-cloud.fi

Certificate

The complete raw certificate details for api.price-comparison-test.s-cloud.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26Jl8X9/x6wUSaYilp7o
/iF8OUeNU50B6gVUafwM0btNtG3PZ0pMOjEYrxiBKp/F69R+GHSk+290rAGD9G1F
qr5cuMngbqnUgOvoB54IyOgqirmhkG4oouaX9arYMGpUU5U7gUBLaUV2CKjZIJAI
2dxjFOQvJBWuzIlS+QPqk8MZRQ+IL3+mZdwA4HN6dr9r9aIkXyxmqaX6NSwxlcAx
nDBU3y/1DHUvBg6Y7qbra6qbRsFmkDRJAFB8n3BiVh+fKjYxhtVxcOJfVwmT8+92
JXw9Pj7zBPNVZvuzuO6GwIDQYGbHwglHFY3RnYrysw6414lM8H+CKkgonASWl9L/
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7762418714420613140790715819565853425
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.price-comparison-test.s-cloud.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27726270332663848340185482449532766403379276058824304269695306796416331706189308974222421327570844300550187588284008305044508280245960644527772158087725591129838650337618571934981121519572119144644027539202724907705126835231227503278531002296266415516716721444285475425866042094148482151902565380936796202486289239442757586878691897462388509832199925937151249769083308717488189891790309011652720533454106913411667218150908310676264997303691887801683778956713647950854219204359130772416953089217547364536576131609949423392538000033799486619215761449685396833933183598903884862130496661862733906850856544146020203953923
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f8ca06ad08f51e60009b74bd2dce5a0c219fdc22
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.price-comparison-test.s-cloud.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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