uat-eligibility.api.services-store.awsmpsa.com

Issued by Amazon

About this certificate

This digital certificate with serial number 02:04:56:37:b4:87:ca:44:7d:28:e5:3f:39:ce:97:5a was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=uat-eligibility.api.services-store.awsmpsa.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:04:56:37:b4:87:ca:44:7d:28:e5:3f:39:ce:97:5a
Serial Number (int): 2680973879650285319433697517558994778
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: bd:7f:48:56:a3:b1:19:86:5b:c4:93:4f:eb:05:35:9b:aa:8c:c3:21
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 38:bf:d6:b8:9a:e4:fc:76:d6:10:53:ba:9a:21:86:66:a6:40:8c:80
Fingerprint (sha256): 15:48:13:23:3a:e0:7e:d1:4d:6a:1a:cd:2d:97:eb:f9:12:8c:eb:ed:60:b1:86:51:62:2b:87:fe:d2:f0:1b:e1

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate uat-eligibility.api.services-store.awsmpsa.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uat-eligibility.api.services-store.awsmpsa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uat-eligibility.api.services-store.awsmpsa.com

Other certificates including the domain name awsmpsa.com

(limited to 100 certificates)
temp-engine.stockengine.awsmpsa.com
*.w3d.awsmpsa.com
dev-subscription.api.services-store.awsmpsa.com
pat-catalog.api.services-store.awsmpsa.com
dev-pcs.api.services-store.awsmpsa.com
dev-mynav.api.services-store.awsmpsa.com
*.awsmpsa.com
pat-cat.api.services-store.awsmpsa.com
origin-newenv-engine.stockengine.awsmpsa.com
*.cppv2.awsmpsa.com
preprod-fo.consuse.awsmpsa.com
trn-v3d.api.services-store.awsmpsa.com
*.gdpr-banner.awsmpsa.com
*.cppv2.awsmpsa.com
*.boostlev.awsmpsa.com
pprd-engine-api.stockengine.awsmpsa.com
dev-contract.api.services-store.awsmpsa.com
*.gdpr-blacklist.awsmpsa.com
api-log-incident-rp-rec.mym.awsmpsa.com
*.dev.sol.awsmpsa.com
dev-contrib.api.services-store.awsmpsa.com
origin-rec-engine-api.stockengine.awsmpsa.com
api-car-integ.mym.awsmpsa.com
*.gdpr-banner.awsmpsa.com
*.sepa.awsmpsa.com
ppr-cart.api.services-store.awsmpsa.com
pat-am.api.services-store.awsmpsa.com
integration-widget.stockengine.awsmpsa.com
ppr-corvet.api.services-store.awsmpsa.com
test-engine.stockengine.awsmpsa.com
eligibility.api.services-store.awsmpsa.com
*.lev.awsmpsa.com
ppr-mauv.api.services-store.awsmpsa.com
inf-subscription.api.services-store.awsmpsa.com
jenkins.boforms.awsmpsa.com
origin-prod-engine.gameday1.awsmpsa.com
ppr-mauv.api.services-store.awsmpsa.com
prod-engine-api.stockengine.awsmpsa.com
pat-context.api.services-store.awsmpsa.com
origin-integration-engine.stockengine.awsmpsa.com
origin-pprd-engine-api.stockengine.awsmpsa.com
dev-cat.api.services-store.awsmpsa.com
pcs.api.services-store.awsmpsa.com
fix-corvet.api.services-store.awsmpsa.com
*.savepartexchange.awsmpsa.com
trn-cart.api.services-store.awsmpsa.com
uat-catalog.api.services-store.awsmpsa.com
*.savepartexchange.awsmpsa.com
*.gdpr-banner.awsmpsa.com
neolane.api.services-store.awsmpsa.com
dev-accountreferential-2way.api.services-store.awsmpsa.com
jenkins.boforms.awsmpsa.com
pat-corvet.api.services-store.awsmpsa.com
fix-subscription.api.services-store.awsmpsa.com
generic-async-process.api.services-store.awsmpsa.com
pat-contrib.api.services-store.awsmpsa.com
generic-async-process.api.services-store.awsmpsa.com
uat-neolane.api.services-store.awsmpsa.com
ppr-neolane.api.services-store.awsmpsa.com
prod-fo.consuse.awsmpsa.com
pat-c1st.api.services-store.awsmpsa.com
ppr-cart.api.services-store.awsmpsa.com
dev-catalog.api.services-store.awsmpsa.com
*.lev.awsmpsa.com
inf-cat.api.services-store.awsmpsa.com
ppr-contract.api.services-store.awsmpsa.com
dev-accountreferential-2way.api.services-store.awsmpsa.com
api-log-incident-rp-integ.mym.awsmpsa.com
*.api.services-store.awsmpsa.com
origin-pprd-engine-api.stockengine.awsmpsa.com
*.brandbook.awsmpsa.com
uat-eligibility.api.services-store.awsmpsa.com
ppr-contrib.api.services-store.awsmpsa.com
ppr-pcs.api.services-store.awsmpsa.com
uat-eligibility.api.services-store.awsmpsa.com
uat-catalog.api.services-store.awsmpsa.com
trn-neolane.api.services-store.awsmpsa.com
prod-engine.gameday5.awsmpsa.com
pprd-engine-api.stockengine.awsmpsa.com
ppr-lead.api.services-store.awsmpsa.com
api-playin.awsmpsa.com
trn-contract.api.services-store.awsmpsa.com
api-car-integ.mym.awsmpsa.com
*.sol.awsmpsa.com
*.lev.awsmpsa.com
pat-accountreferential.api.services-store.awsmpsa.com
dev-neolane.api.services-store.awsmpsa.com
trn-cart.api.services-store.awsmpsa.com
api-log-incident-rp-integ.mym.awsmpsa.com
app-payments.api.services-store.awsmpsa.com
dev-contrib.api.services-store.awsmpsa.com
newenv-widget.stockengine.awsmpsa.com
dev-catalog.api.services-store.awsmpsa.com
ppr-subscription.api.services-store.awsmpsa.com
ppr-catalog.api.services-store.awsmpsa.com
*.gameday5.awsmpsa.com
*.lev.awsmpsa.com
inf-eligibility.api.services-store.awsmpsa.com
inf-catalog.api.services-store.awsmpsa.com
uat-pcs.api.services-store.awsmpsa.com

Certificate

The complete raw certificate details for uat-eligibility.api.services-store.awsmpsa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5FaL/YCBNKNN6AMbOUHR
jcxCivP5L4qhAJ5/XDjuN9rlS/NheSpGgpy6E1dlPPT8U18thsnqHnawzTN7WotI
+wcLc48OEC0lMsuZkRFZFeRh2VfbwH3QtX2afu+quf87ChBecTG/HoA1T7SdRyAM
0/c6Qk2zAy81h1nZXR0lZVLskuhqkejzDL95d/JHDVYp9Id3iMb7adkW3klML5uk
zRaWbULnYljdXA3ih04E10WWm9/NZwDgaZdj3JZPcdoQo8unRmq7JFCWMI2iSMkp
7nO83cTOwNehnbdPdZbuVFq9yZDys7CNC3MgpAtQzMId04PSnqXHFBrZDlxE0U7W
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2680973879650285319433697517558994778
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uat-eligibility.api.services-store.awsmpsa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28825011368153154226575585612143540950264151123238399530894327001358877940818441067502504358329869806382876368318581411027250823795436856641684415634350778837135542896752036151948616951202953257397226226668482603540957343507925278827873264989852024513147420964292114019108337685813681466717115234395818532485202602377592874909770869473686430661806940806766990781586411753040297954583111029152672680424062556295720627935684247298905279469536926263765636618156682615727142510172161283155190103592180092027908883724535618095681541084047814199151489936092657691319260391185664089263745118039843632611704333195337800799921
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bd7f4856a3b119865bc4934feb05359baa8cc321
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-eligibility.api.services-store.awsmpsa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016dae09a1f40000040300483046022100e36118cb38e212848dcd013b0c233127c85d3288c5f0df0c02289032e1df145f0221008d84ce03c0acbc78f74b4e9e9a3bdccdc421bd4c4331cfc390445c9605d19d670077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016dae09a26f0000040300483046022100a55e6a435c50c13cae9c50e96c0c21e94b1bc309d364c839a585688fbb463716022100f5742cd3c1b9b726cab864b8f003e8b29a580e4fc8594e77125a79079629c609
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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