push.gamingservices.sbgservices.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 05:89:14:89:cb:27:f7:4b:93:9f:c6:01:45:11:4d:bf was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=push.gamingservices.sbgservices.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:89:14:89:cb:27:f7:4b:93:9f:c6:01:45:11:4d:bf
Serial Number (int): 7357901213867961156612974932208471487
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: d6:f2:3f:06:91:99:50:2f:4d:46:66:55:55:15:68:ae:f7:ce:bb:c7
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 89:84:b3:a2:96:b4:22:59:87:16:4a:a1:0c:54:97:94:51:3d:a0:53
Fingerprint (sha256): 13:fe:92:a3:d8:d9:ad:5e:c6:27:a8:f1:b9:31:24:89:0b:30:f2:be:8a:07:71:5e:8d:d5:db:94:d3:9d:6d:88

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate push.gamingservices.sbgservices.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for push.gamingservices.sbgservices.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

push.gamingservices.sbgservices.com

Other certificates including the domain name sbgservices.com

(limited to 100 certificates)
ui.browser-test.leahyc-2.dev.messaging.sbgservices.com
ui.browser-test.ama04-1.dev.messaging.sbgservices.com
ui.leahyc-2.dev.messaging.sbgservices.com
oauth.test.sweeps.sbgservices.com
ui.browser-test.asi11-1.dev.messaging.sbgservices.com
ui.browser-test.dev.messaging.sbgservices.com
oauth.sweeps.sbgservices.com
*.test.ff.sbgservices.com
ui.browser-test.cbe01-1.dev.messaging.sbgservices.com
assetstore.test.gs.sbgservices.com
ui.asi11-1.dev.messaging.sbgservices.com
publicgateway.test.gs.sbgservices.com
promotions-spin-service.promotions.sbgservices.com
*.ff.sbgservices.com
oauth.autotest.sweeps.sbgservices.com
api.messaging.sbgservices.com
test.feedback.s6.sbgservices.com
ui.browser-test.preenn-1.dev.messaging.sbgservices.com
rcs.sbgservices.com
ui.ama04-1.dev.messaging.sbgservices.com
rc.ges.sbgservices.com
*.dev.ff.sbgservices.com
push.staging.gamingservices.sbgservices.com
push.gs.sbgservices.com
ui.preenn1.dev.messaging.sbgservices.com
ui.ama04-1.dev.messaging.sbgservices.com
oauth.autotest.sweeps.sbgservices.com
ui.preenn-1.dev.messaging.sbgservices.com
ui.test.messaging.sbgservices.com
ui.jamesr-1.dev.messaging.sbgservices.com
api.messaging.sbgservices.com
push.gamingservices.sbgservices.com
ui.leahyc-1.dev.messaging.sbgservices.com
minigames.ges.sbgservices.com
clearpass.skybettingandgaming.com
feedback.s6.sbgservices.com
ui.am04-1.dev.messaging.sbgservices.com
ui.messaging.sbgservices.com
ui.browser-test.ama04-1.dev.messaging.sbgservices.com
*.test.sweeps.sbgservices.com
ui.browser-test.leahyc-1.dev.messaging.sbgservices.com
demo-portal.test.ges.sbgservices.com
ui.leahyc-2.dev.messaging.sbgservices.com
rcs.sbgservices.com
push.gamingservices.sbgservices.com
ui.browser-test.leahyc-2.dev.messaging.sbgservices.com
ui.leahyc-1.dev.messaging.sbgservices.com
ui.ama04-1.dev.messaging.sbgservices.com
demo-portal.test.ges.sbgservices.com
push.test.gamingservices.sbgservices.com
demo-portal.test.ges.sbgservices.com
promotions-spin-service.promotions.sbgservices.com
ui.browser-test.asi11-1.dev.messaging.sbgservices.com
api.test.s6.sbgservices.com
promotions-spin-service.promotions.stage.sbgservices.com
ci.api.ff.sbgservices.com
ui.leahyc-2.dev.messaging.sbgservices.com
*.staging.sbgservices.com
*.loadtest.sweeps.sbgservices.com
rcs.ges.sbgservices.com
ui.jamesr-1.dev.messaging.sbgservices.com
ui.browser-test.asi11-1.dev.messaging.sbgservices.com
chris.test.s6.sbgservices.com
ui.ama04-1.dev.messaging.sbgservices.com
ui.messaging.sbgservices.com
oauth.test.sweeps.sbgservices.com
ui.browser-test.ama04-1.dev.messaging.sbgservices.com
*.prod.sweeps.sbgservices.com
push.gs.sbgservices.com
rc.ges.sbgservices.com
gate.sbgservices.com
ui.iba01-2.dev.messaging.sbgservices.com
api.staging.skysportsquiz.com
*.staging.sbgservices.com
ui.leahyc-2.dev.messaging.sbgservices.com
ui.asi11-1.dev.messaging.sbgservices.com
ui.test.messaging.sbgservices.com
*.test.s6.sbgservices.com
promotions-spin-service.promotions.stage.sbgservices.com
*.prod.itv7.sbgservices.com
oauth.autotest.sweeps.sbgservices.com
oauth.loadtest.sweeps.sbgservices.com
ui.ama04-1.dev.messaging.sbgservices.com
skyvegas.com
ui.iba01-1.dev.messaging.sbgservices.com
oauth.sweeps.sbgservices.com
promotions-spin-service.promotions.sbgservices.com
*.ff.sbgservices.com
api.s6.sbgservices.com
ui.browser-test.iba01-1.dev.messaging.sbgservices.com
promotions-spin-service.promotions.sbgservices.com
rcs.sbgservices.com
demo-portal.test.ges.sbgservices.com
ui.preenn1.dev.messaging.sbgservices.com
promotions-spin-service.promotions.stage.sbgservices.com
sbgservices.com
*.staging.ff.sbgservices.com
ui.leahyc-1.dev.messaging.sbgservices.com
publicgateway.gs.sbgservices.com
ui.messaging.sbgservices.com

Certificate

The complete raw certificate details for push.gamingservices.sbgservices.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKh2vGlKaXn1o6Mwlec6
1CnR7y0nZ9TXYaAFTT9SjeUgZWkyGb2Fpuvi1N8jJbr25QzuXi1OxZkwEMNyCEly
NUSNyXIibbHmQ7ZFwsP4ugEfDEP+J12u/ZmLOKkvXlyPYhb2cA6yeeMQyKzSSyxw
bmcKt4yFXZLjd2E/zLBNW9Jghm5yuJ4qhWZOKPc+PTXz2xbrka+CeZUNsP8bWQ2B
BUZvhAIJamNcSU9c+YTaScnnrBFlyUG12gC12ZRa59/f0q1bNJJTVYIrLpB4zQ6A
9WxABKXVPtGizNbDM1r0am7aYtYiQE8aHEO5KXUqleYKy5C5C8QjH3XLsz9Kop0H
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7357901213867961156612974932208471487
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'push.gamingservices.sbgservices.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20281201396635983316990506488542192498554937943620684906193695491183386256511690930390774809011551231017678092891401265735092874646891767638905748478858450269146017257909281359265472004139701698375928465518154414079849634007377076205415255018133252309578897276518690475064104031634642523822446107943906905560478897770806062927557746406222994587714816336359805679047618151721024184839127640460917599695064209260887189308886510929143255917776382490426874498079986526361906119542676201708275667933151211726105518590917094452641380103114705206294274923158018303111672911136766653234433956412810665244997584537366373926827
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d6f23f069199502f4d466655551568aef7cebbc7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'push.gamingservices.sbgservices.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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