*.data-engine-transformation.stage.spsapps.net

Issued by Amazon

About this certificate

This digital certificate with serial number 04:23:bd:44:8e:29:02:b0:4c:e4:35:20:99:e3:97:5f was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.data-engine-transformation.stage.spsapps.net

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:23:bd:44:8e:29:02:b0:4c:e4:35:20:99:e3:97:5f
Serial Number (int): 5502481180114973644434612127088744287
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 9e:c5:c4:36:2f:1e:07:5d:b5:fd:17:c4:da:4f:64:f7:d4:e8:59:ea
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 86:de:22:89:21:7c:b3:41:0d:3c:16:13:8f:74:38:1d:5f:de:57:a7
Fingerprint (sha256): 10:cc:dc:a5:68:c6:03:fb:20:ae:63:f5:17:de:e1:0b:f1:0e:43:2e:e4:71:ff:fc:71:b1:14:16:5f:cb:a2:bf

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.data-engine-transformation.stage.spsapps.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.data-engine-transformation.stage.spsapps.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.data-engine-transformation.stage.spsapps.net

Other certificates including the domain name spsapps.net

(limited to 100 certificates)
sps-tech-registry-api.internal.sharedservicesdev.spsapps.net
api.dc4-proxy-pull-service.preprod.spsapps.net
api.pa-supplier-configuration.spsapps.net
sps-tech-registry-api.internal.sharedservices.spsapps.net
*.analytics-portal.test.spsapps.net
*.dev.spsapps.net
nonprod-us-east-2-jarocki-4r5t.integration.api.sps-internal.com
*.1screen.spsapps.net
api.dc4-proxy-pull-service.spsapps.net
*.mna.spsapps.net
*.swp.dev.spsapps.net
*.analytics.stage.spsapps.net
*.swp.spsapps.net
*.messaging-service.stage.spsapps.net
api.dc4-proxy-pull-service.test.spsapps.net
*.data-engine-transformation.stage.spsapps.net
transaction-tracker-api.service.prod.spsapps.net
catalog-gateway.service.test.spsapps.net
*.stage.spsapps.net
cdk-hackathon-api.service.test.spsapps.net
api.dc4-proxy-pull-service.preprod.spsapps.net
*.analytics.dev.spsapps.net
*.analytics.spsapps.net
*.1screen.spsapps.net
api.data-engine-command-center.spsapps.net
*.paca-interaction.preprod.spsapps.net
nonprod-us-east-2-jarocki-4r5t.integration.api.spscommerce.com
weekend.internal.sharedservices.spsapps.net
bus.fulfillment.spsapps.net
*.service.preprod.spsapps.net
1screen-prospace-converter.service.prod.spsapps.net
api.template.test.spsapps.net
*.api.dev.spsapps.net
parcel-service-heartbeat.service.preprod.spsapps.net
*.1screen.dev.spsapps.net
api.dc4-proxy-receiver.dev.spsapps.net
api.dc4-proxy-pull-service.preprod.spsapps.net
fulfillment-edi-automation.test.spsapps.net
as2-admin-api.service.prod.spsapps.net
*.stage.spsapps.net
1screen-prospace-converter.service.prod.spsapps.net
fi-top.service.prod.spsapps.net
*.analytics-portal.preprod.spsapps.net
api.messaging-service.spsapps.net
*.stage.spsapps.net
opal.prod.spsc.io
bus.fulfillment.spsapps.net
bus.fulfillment.spsapps.net
fi-top.service.test.spsapps.net
fi-top.service.prod.spsapps.net
nexus-graphql.service.test.spsapps.net
fulfillment-edi-automation.test.spsapps.net
*.mna.test.spsapps.net
api.messaging-service.spsapps.net
*.template.test.spsapps.net
*.devcenter.spsapps.net
*.spsapps.net
analytics-portal-api.service.preprod.spsapps.net
svram.spsapps.net
api.dc4-proxy-receiver.spsapps.net
transaction-tracker-api.service.test.spsapps.net
*.swp.dev.spsapps.net
*.paca-interaction.preprod.spsapps.net
*.swp.spsapps.net
*.messaging-service.spsapps.net
*.mna.stage.spsapps.net
api.pa-supplier-configuration.spsapps.net
setup-migrator-2-api.service.test.spsapps.net
analytics-snowflake-api.service.test.spsapps.net
*.swp.spsapps.net
api.profile-service.prod.spsc.io
*.messaging-service.stage.spsapps.net
opal.prod.spsc.io
*.devcenter.spsapps.net
auth.test.spsapps.net
api.messaging-service.spsapps.net
analytics-snowflake-api.service.prod.spsapps.net
1screen-prospace-converter.service.prod.spsapps.net
bus.fulfillment.spsapps.net
api.data-engine-command-center.test.spsapps.net
transaction-tracker-api.service.test.spsapps.net
analytics-snowflake-api.service.test.spsapps.net
api.fulfillment.spsc.io
*.paca-interaction.dev.spsapps.net
api.template.test.spsapps.net
*.data-engine-transformation.test.spsapps.net
acknowledgement-service-api.service.prod.spsapps.net
parcel-timeout-service.service.test.spsapps.net
api.pa-supplier-configuration.spsapps.net
*.analytics.preprod.spsapps.net
holodeck-api.service.prod.spsapps.net
api.mna.test.spsapps.net
analytics-portal-api.service.preprod.spsapps.net
api.dc4-proxy-receiver.preprod.spsapps.net
api.data-engine-ecs-adapter.stage.spsapps.net
api.data-engine-file-collection.spsapps.net
*.paca-interaction.dev.spsapps.net
*.messaging-service.stage.spsapps.net
*.api.spsapps.net
*.analytics-portal.preprod.spsapps.net

Certificate

The complete raw certificate details for *.data-engine-transformation.stage.spsapps.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ucDO16gSoZmfRlEexFO
q3Y1bnhFWpdGBmfX4YUzKxYbWMR4cwCPKQiYTWPY122FcGRTyaWfsWpMdMGOKwIS
XpHThQWFlML9oLkwskYC28IssGKT/zUfRsuSYjsCzqEGuTs/aLk6N3YiiXvLc4rF
ZOVLeKRTSu9ssSuWwSuXZZJMTvTL7I5TiqJt9IiC2Gbw8JSvGzbdlm3ota4yVnSc
zU5vJQEdqQhbDtziO/t08oz8ve0nL7uH0qaUgMjA442lJj+3MHBKVU0BK8sFrgS1
DrxJAn9ih9yoG/HamkNiyecxCk27ljWriPv65XfP5OQeE3JHYuD1MDltOzjN6WFT
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5502481180114973644434612127088744287
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.data-engine-transformation.stage.spsapps.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29653679933005671192905700929661697533219574849831681476850148626231846242982096387289157790706692366082492662699811648982324016376087695164457580229888743787367841227599070353832831240198328875451379933528481411108266961934516376812244064495010112985533592025101796969374235179240736978407048613176569733772712498486370786934631875621880626223592629538057313967661843349878165244028748441096825715078109018856034985914085315890210736607115382637681165904282815007106211776311316933395153075829584815932474942168097913963168748771343420041602509338553017336867659454610515394698189232552956312605471068170396176044831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9ec5c4362f1e075db5fd17c4da4f64f7d4e859ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.data-engine-transformation.stage.spsapps.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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