origin-pprd-engine-api.stockengine.awsmpsa.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0a:7d:97:4c:f7:8d:aa:5b:35:a7:0a:d3:43:31:cd:5b was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=origin-pprd-engine-api.stockengine.awsmpsa.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:7d:97:4c:f7:8d:aa:5b:35:a7:0a:d3:43:31:cd:5b
Serial Number (int): 13944385806970575120187819731752963419
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e8:d6:4c:0c:7b:89:ce:28:b9:b7:34:19:e4:12:3b:31:69:1b:82:a4
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 19:14:96:73:a2:7f:d8:a6:a1:ce:74:17:19:98:31:8f:81:0e:d4:f6
Fingerprint (sha256): 14:b5:77:62:01:97:6c:8b:96:3f:fa:d1:27:21:65:bd:73:d4:e7:20:f6:b9:25:bc:5b:ea:42:2c:ed:89:e8:5f

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate origin-pprd-engine-api.stockengine.awsmpsa.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for origin-pprd-engine-api.stockengine.awsmpsa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

origin-pprd-engine-api.stockengine.awsmpsa.com

Other certificates including the domain name awsmpsa.com

(limited to 100 certificates)
temp-engine.stockengine.awsmpsa.com
*.w3d.awsmpsa.com
dev-subscription.api.services-store.awsmpsa.com
pat-catalog.api.services-store.awsmpsa.com
dev-pcs.api.services-store.awsmpsa.com
dev-mynav.api.services-store.awsmpsa.com
*.awsmpsa.com
pat-cat.api.services-store.awsmpsa.com
origin-newenv-engine.stockengine.awsmpsa.com
*.cppv2.awsmpsa.com
preprod-fo.consuse.awsmpsa.com
trn-v3d.api.services-store.awsmpsa.com
*.gdpr-banner.awsmpsa.com
*.cppv2.awsmpsa.com
*.boostlev.awsmpsa.com
pprd-engine-api.stockengine.awsmpsa.com
dev-contract.api.services-store.awsmpsa.com
*.gdpr-blacklist.awsmpsa.com
api-log-incident-rp-rec.mym.awsmpsa.com
*.dev.sol.awsmpsa.com
dev-contrib.api.services-store.awsmpsa.com
origin-rec-engine-api.stockengine.awsmpsa.com
api-car-integ.mym.awsmpsa.com
*.gdpr-banner.awsmpsa.com
*.sepa.awsmpsa.com
ppr-cart.api.services-store.awsmpsa.com
pat-am.api.services-store.awsmpsa.com
integration-widget.stockengine.awsmpsa.com
ppr-corvet.api.services-store.awsmpsa.com
test-engine.stockengine.awsmpsa.com
eligibility.api.services-store.awsmpsa.com
*.lev.awsmpsa.com
ppr-mauv.api.services-store.awsmpsa.com
inf-subscription.api.services-store.awsmpsa.com
jenkins.boforms.awsmpsa.com
origin-prod-engine.gameday1.awsmpsa.com
ppr-mauv.api.services-store.awsmpsa.com
prod-engine-api.stockengine.awsmpsa.com
pat-context.api.services-store.awsmpsa.com
origin-integration-engine.stockengine.awsmpsa.com
origin-pprd-engine-api.stockengine.awsmpsa.com
dev-cat.api.services-store.awsmpsa.com
pcs.api.services-store.awsmpsa.com
fix-corvet.api.services-store.awsmpsa.com
*.savepartexchange.awsmpsa.com
trn-cart.api.services-store.awsmpsa.com
uat-catalog.api.services-store.awsmpsa.com
*.savepartexchange.awsmpsa.com
*.gdpr-banner.awsmpsa.com
neolane.api.services-store.awsmpsa.com
dev-accountreferential-2way.api.services-store.awsmpsa.com
jenkins.boforms.awsmpsa.com
pat-corvet.api.services-store.awsmpsa.com
fix-subscription.api.services-store.awsmpsa.com
generic-async-process.api.services-store.awsmpsa.com
pat-contrib.api.services-store.awsmpsa.com
generic-async-process.api.services-store.awsmpsa.com
uat-neolane.api.services-store.awsmpsa.com
ppr-neolane.api.services-store.awsmpsa.com
prod-fo.consuse.awsmpsa.com
pat-c1st.api.services-store.awsmpsa.com
ppr-cart.api.services-store.awsmpsa.com
dev-catalog.api.services-store.awsmpsa.com
*.lev.awsmpsa.com
inf-cat.api.services-store.awsmpsa.com
ppr-contract.api.services-store.awsmpsa.com
dev-accountreferential-2way.api.services-store.awsmpsa.com
api-log-incident-rp-integ.mym.awsmpsa.com
*.api.services-store.awsmpsa.com
origin-pprd-engine-api.stockengine.awsmpsa.com
*.brandbook.awsmpsa.com
uat-eligibility.api.services-store.awsmpsa.com
ppr-contrib.api.services-store.awsmpsa.com
ppr-pcs.api.services-store.awsmpsa.com
uat-eligibility.api.services-store.awsmpsa.com
uat-catalog.api.services-store.awsmpsa.com
trn-neolane.api.services-store.awsmpsa.com
prod-engine.gameday5.awsmpsa.com
pprd-engine-api.stockengine.awsmpsa.com
ppr-lead.api.services-store.awsmpsa.com
api-playin.awsmpsa.com
trn-contract.api.services-store.awsmpsa.com
api-car-integ.mym.awsmpsa.com
*.sol.awsmpsa.com
*.lev.awsmpsa.com
pat-accountreferential.api.services-store.awsmpsa.com
dev-neolane.api.services-store.awsmpsa.com
trn-cart.api.services-store.awsmpsa.com
api-log-incident-rp-integ.mym.awsmpsa.com
app-payments.api.services-store.awsmpsa.com
dev-contrib.api.services-store.awsmpsa.com
newenv-widget.stockengine.awsmpsa.com
dev-catalog.api.services-store.awsmpsa.com
ppr-subscription.api.services-store.awsmpsa.com
ppr-catalog.api.services-store.awsmpsa.com
*.gameday5.awsmpsa.com
*.lev.awsmpsa.com
inf-eligibility.api.services-store.awsmpsa.com
inf-catalog.api.services-store.awsmpsa.com
uat-pcs.api.services-store.awsmpsa.com

Certificate

The complete raw certificate details for origin-pprd-engine-api.stockengine.awsmpsa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte0B8jrvf46G61E6okpR
wVwEu0yQMZKJnNseRZRdG4ZG9nYTcuoEFmXQIJ60xMt+hAeD9ciq5Lvz/vKPqR8F
whynfeKUKlmn7zIii0G7BjNrgWZT03LHKciB0P9r30I/NhH4BiENHhled1gc0PET
hYFJQhrqRm8E4DunVaX7kef4UcO5Ilzzw0WO2ZHGna+oa6K4IgPNl/upLxvKXCiB
ZF5C6tsTDOmISTkto7s3nO/mk4pLd+hUMdHO3OHT1G6ocXUwGXeaco6vzumMIUGu
DTWh03wQo2Vne9i3+HI7Ag+g9/M7hZ4JF9FdqeGBtlgGI5irVOL4Lunnr7XEH1kC
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13944385806970575120187819731752963419
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'origin-pprd-engine-api.stockengine.awsmpsa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22966006003504095202759792528221943891175681038529653081192578285224628746493488975777601276615994068462249903186778890370139667848535687718817890324398831592489824145062686725823380464940868045016423598158494196903580427799707966626507586176262210016356642340323584707338066914143586261553658736419862750110617604678160448573899396362712643926016466339115155663211419702642486480309368698014507588078063901773411558760133547695174651741804478676078361703074378552581163992123578233292795588575356783989049542639465305428262714347739067216285972661164122285077635453859026658876691632239524817725102352069346280931983
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8d64c0c7b89ce28b9b73419e4123b31691b82a4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-pprd-engine-api.stockengine.awsmpsa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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