trn-neolane.api.services-store.awsmpsa.com

Issued by Amazon

About this certificate

This digital certificate with serial number 02:a0:9e:4b:f9:d9:e3:69:b4:d9:bd:23:b5:e4:37:38 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=trn-neolane.api.services-store.awsmpsa.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:a0:9e:4b:f9:d9:e3:69:b4:d9:bd:23:b5:e4:37:38
Serial Number (int): 3492434129090147975627487464929900344
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 92:59:c8:11:a3:85:6e:f4:70:30:da:c9:c8:97:ef:66:33:77:82:67
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 86:03:27:1f:2e:27:5e:9d:5f:a0:42:01:82:39:4e:91:82:48:a1:93
Fingerprint (sha256): 15:d2:22:88:04:d6:81:73:6b:fa:97:8d:2e:ce:9b:7b:44:1e:29:bc:cf:40:8d:7e:40:ae:03:e4:0e:a8:4d:e0

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate trn-neolane.api.services-store.awsmpsa.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for trn-neolane.api.services-store.awsmpsa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

trn-neolane.api.services-store.awsmpsa.com

Other certificates including the domain name awsmpsa.com

(limited to 100 certificates)
temp-engine.stockengine.awsmpsa.com
*.w3d.awsmpsa.com
dev-subscription.api.services-store.awsmpsa.com
pat-catalog.api.services-store.awsmpsa.com
dev-pcs.api.services-store.awsmpsa.com
dev-mynav.api.services-store.awsmpsa.com
*.awsmpsa.com
pat-cat.api.services-store.awsmpsa.com
origin-newenv-engine.stockengine.awsmpsa.com
*.cppv2.awsmpsa.com
preprod-fo.consuse.awsmpsa.com
trn-v3d.api.services-store.awsmpsa.com
*.gdpr-banner.awsmpsa.com
*.cppv2.awsmpsa.com
*.boostlev.awsmpsa.com
pprd-engine-api.stockengine.awsmpsa.com
dev-contract.api.services-store.awsmpsa.com
*.gdpr-blacklist.awsmpsa.com
api-log-incident-rp-rec.mym.awsmpsa.com
*.dev.sol.awsmpsa.com
dev-contrib.api.services-store.awsmpsa.com
origin-rec-engine-api.stockengine.awsmpsa.com
api-car-integ.mym.awsmpsa.com
*.gdpr-banner.awsmpsa.com
*.sepa.awsmpsa.com
ppr-cart.api.services-store.awsmpsa.com
pat-am.api.services-store.awsmpsa.com
integration-widget.stockengine.awsmpsa.com
ppr-corvet.api.services-store.awsmpsa.com
test-engine.stockengine.awsmpsa.com
eligibility.api.services-store.awsmpsa.com
*.lev.awsmpsa.com
ppr-mauv.api.services-store.awsmpsa.com
inf-subscription.api.services-store.awsmpsa.com
jenkins.boforms.awsmpsa.com
origin-prod-engine.gameday1.awsmpsa.com
ppr-mauv.api.services-store.awsmpsa.com
prod-engine-api.stockengine.awsmpsa.com
pat-context.api.services-store.awsmpsa.com
origin-integration-engine.stockengine.awsmpsa.com
origin-pprd-engine-api.stockengine.awsmpsa.com
dev-cat.api.services-store.awsmpsa.com
pcs.api.services-store.awsmpsa.com
fix-corvet.api.services-store.awsmpsa.com
*.savepartexchange.awsmpsa.com
trn-cart.api.services-store.awsmpsa.com
uat-catalog.api.services-store.awsmpsa.com
*.savepartexchange.awsmpsa.com
*.gdpr-banner.awsmpsa.com
neolane.api.services-store.awsmpsa.com
dev-accountreferential-2way.api.services-store.awsmpsa.com
jenkins.boforms.awsmpsa.com
pat-corvet.api.services-store.awsmpsa.com
fix-subscription.api.services-store.awsmpsa.com
generic-async-process.api.services-store.awsmpsa.com
pat-contrib.api.services-store.awsmpsa.com
generic-async-process.api.services-store.awsmpsa.com
uat-neolane.api.services-store.awsmpsa.com
ppr-neolane.api.services-store.awsmpsa.com
prod-fo.consuse.awsmpsa.com
pat-c1st.api.services-store.awsmpsa.com
ppr-cart.api.services-store.awsmpsa.com
dev-catalog.api.services-store.awsmpsa.com
*.lev.awsmpsa.com
inf-cat.api.services-store.awsmpsa.com
ppr-contract.api.services-store.awsmpsa.com
dev-accountreferential-2way.api.services-store.awsmpsa.com
api-log-incident-rp-integ.mym.awsmpsa.com
*.api.services-store.awsmpsa.com
origin-pprd-engine-api.stockengine.awsmpsa.com
*.brandbook.awsmpsa.com
uat-eligibility.api.services-store.awsmpsa.com
ppr-contrib.api.services-store.awsmpsa.com
ppr-pcs.api.services-store.awsmpsa.com
uat-eligibility.api.services-store.awsmpsa.com
uat-catalog.api.services-store.awsmpsa.com
trn-neolane.api.services-store.awsmpsa.com
prod-engine.gameday5.awsmpsa.com
pprd-engine-api.stockengine.awsmpsa.com
ppr-lead.api.services-store.awsmpsa.com
api-playin.awsmpsa.com
trn-contract.api.services-store.awsmpsa.com
api-car-integ.mym.awsmpsa.com
*.sol.awsmpsa.com
*.lev.awsmpsa.com
pat-accountreferential.api.services-store.awsmpsa.com
dev-neolane.api.services-store.awsmpsa.com
trn-cart.api.services-store.awsmpsa.com
api-log-incident-rp-integ.mym.awsmpsa.com
app-payments.api.services-store.awsmpsa.com
dev-contrib.api.services-store.awsmpsa.com
newenv-widget.stockengine.awsmpsa.com
dev-catalog.api.services-store.awsmpsa.com
ppr-subscription.api.services-store.awsmpsa.com
ppr-catalog.api.services-store.awsmpsa.com
*.gameday5.awsmpsa.com
*.lev.awsmpsa.com
inf-eligibility.api.services-store.awsmpsa.com
inf-catalog.api.services-store.awsmpsa.com
uat-pcs.api.services-store.awsmpsa.com

Certificate

The complete raw certificate details for trn-neolane.api.services-store.awsmpsa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwh+ze5FaipxZv9Y3DRU2
0m5ifCd4rPsOX1FEkRO0fKVn3exY0vBbIuIKk6WO4RiYIvuyTmlOGupc9C2MbQJV
Avzd2E2HGg5k8tvmxdEZ2GZhMtPxCz7RpeBTAYPuRW0gMYki444a5nZVfD8b2iBG
Wb/bSbYqpG00fjxB+I4LeA/ldcsXQh0W7JBxlzpRNVddq4ClJmI8riYYm6JPL1UO
U5a+FHHKEfdpvvu/qCScuA0Zgl+Ly8gdL5+TKfEMcRtETafhKkAau2qMWENiPymr
PUJ/XvH6OhD9Gwu4xX9r+TxFsgiPtuuzjIIzHM4o7tFMM3xMULKnd5uld3fUVniQ
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3492434129090147975627487464929900344
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'trn-neolane.api.services-store.awsmpsa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24505863560545907932999918574809899855446734720944537125151933186973000813965563248842328631408125700419371062656775056416485501700138694446611424582342660977757987370441550298655175964900796263321003478808081279271810097433785926229330266757902437358772321548248333149853313435549767419986356492667616466870356157082435901484603767457558764200989994289320907118431450989344616437872090717174516644106256530596816668312917317504027611361157185775772433489810428518268038587954025258834750019919275375325076904843723105092728424539611672843181985909926758531289376883351017714804741288388664123105058895401832530088071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9259c811a3856ef47030dac9c897ef6633778267
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trn-neolane.api.services-store.awsmpsa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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