twitch.amazon.eu

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0d:d8:2e:1d:bb:3c:ca:11:8e:7c:e8:19:e1:cf:b7:53 was issued on by Amazon.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=twitch.amazon.eu

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:d8:2e:1d:bb:3c:ca:11:8e:7c:e8:19:e1:cf:b7:53
Serial Number (int): 18402435413053096633677301748859909971
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 20:9b:d4:2a:e7:29:34:2b:45:22:e2:49:a2:20:7f:42:f0:7d:3e:2d
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 85:6a:6f:bc:16:71:7c:bb:44:90:29:13:08:7a:c9:00:15:8f:5b:ae
Fingerprint (sha256): 18:f9:2c:dd:84:45:56:1f:48:1f:bb:e2:fd:28:07:79:4e:16:6e:0f:6a:40:a3:e9:5d:a8:df:c7:94:9e:b7:83

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate twitch.amazon.eu

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for twitch.amazon.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

twitch.amazon.eu
twitch.amazon.de
twitch.amazon.es
twitch.amazon.fr
twitch.amazon.it
twitch.amazon.co.uk
twitch.amazon.ae
twitch.amazon.in
twitch.amazon.nl
twitch.amazon.com.tr

Other certificates including the domain name amazon.eu

(limited to 100 certificates)
sdu.amazon.eu
pay-api.amazon.eu
sdu.amazon.eu
prime.amazon.eu
luna.amazon.eu
webservices.amazon.eu
chat.amazon.eu
freight.amazon.co.uk
vendorexpress.amazon.eu
sdu.amazon.eu
carriercentral.amazon.eu
storepickup.amazon.eu
gaming.amazon.eu
music-xray-service.amazon.eu
twitch.amazon.eu
vendorcentral.amazon.eu
vendorexpress.amazon.eu
webservices.amazon.eu
webservices.amazon.eu
www.amazon.eu
sdu.amazon.eu
twitch.amazon.eu
dolphin-preprod.amazon.eu
music-xray-service.amazon.eu
prime.amazon.eu
ab.amazon.eu
pay-api.amazon.eu
digprjsurvey.amazon.eu
digital-music-delivery.amazon.eu
vendorcentral-prod.amazon.com
vat-assist.amazon.eu
sdu.amazon.eu
relay.amazon.eu
vendorcentral-prod.amazon.com
prime.amazon.eu
mlis.amazon.eu
www.amazon.eu
music-xray-service.amazon.eu
webservices.amazon.eu
freight.amazon.eu
pay.amazon.eu
pay.amazon.eu
twitch.amazon.eu
sellercentral.amazon.eu
twitch.amazon.eu
xb-node-report.amazon.eu
webservices.amazon.eu
carriercentral.amazon.eu
chat.amazon.eu
digprjsurvey.amazon.eu
webservices.amazon.eu
vat-assist-beta.amazon.eu
vendorcentral-prod.amazon.com
sdu.amazon.eu
dcp.amazon.eu
digprjsurvey.amazon.eu
webservices.amazon.eu
carriercentral.amazon.eu
storepickup.amazon.eu
pay.amazon.eu
webservices.amazon.eu
credential-locker-service.amazon.eu
gaming.amazon.eu
www.amazon.eu
vendorcentral-prod.amazon.com
digital-music-delivery.amazon.eu
freight.amazon.co.uk
pay.amazon.eu
carriercentral.amazon.eu
vendorcentral.amazon.eu
gaming.amazon.eu
dolphin-preprod.amazon.eu
poweredby.amazon.de
push.amazon.eu
twitch.amazon.eu
twitch.amazon.eu
photos.amazon.eu
webservices.amazon.eu
storepickup.amazon.eu
prime.amazon.eu
chat.amazon.eu
www.amazon.eu
webservices.amazon.eu
webservices.amazon.eu
vendorcentral.amazon.com
dcp.amazon.eu
rtn.amazon.eu
klite-services.amazon.eu
www.amazon.eu
webservices.amazon.eu
www.amazon.eu
luna.amazon.eu
api.relay.amazon.eu
sellercentral.amazon.eu
dcp.amazon.eu
webservices.amazon.eu
www.amazon.eu
amcentral.amazon.eu
photos.amazon.eu
luna.amazon.eu

Certificate

The complete raw certificate details for twitch.amazon.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtc+GIZvDrqLJ7jMRISlg
ET+sYLYdNK6DHIB9ipXkOSobyNY1GQT4F3Hr1RpplAq1h1EwZ2L36vRMFPXQxiYA
wAIQLRrBXMDx2ORHoIE0wYOpSM/2Lb1Wi3cACixqLNeJDRQMLFfFubcNF41Cokqh
PzvJ4fGl6NnxaggUJ/lQa/T4AIyEyiXK7yQdIwuE1RzCpc/aCnyMPVny1dokJXdr
V3CmwGtIF+IF5Axu06Sja3Hp1P3OUKQ9DzwF1MBuLfeTtSIKRAwhGj3k8IREhDr4
wr3copqFyQhcjkd1f94HQjTu7A1l196QJ5o0v/w9B2Dc1eVJS4+J4Nw4FUPfqbAB
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18402435413053096633677301748859909971
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'twitch.amazon.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22951467072797246115472504501682480938037496860040478076826133649869967675390640931832300493879573069400445140148979741318827385588315827852392881476205282468264240823231984731383542189378421484919050569722652430337527744796638391033389511411960866866683120296722062741735850476523013215725988702346656620859114710272801096159082937282241331900012186649317472564604072415756463300620122212317917426153428543349693587183986186986107122015456891393420456141574646848160622004928269173906186738894771982379741573807958296521778288876174737234447858255416429894289066580899158251882997613941750524808255411892727162339731
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							209bd42ae729342b4522e249a2207f42f07d3e2d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (190 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitch.amazon.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitch.amazon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitch.amazon.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitch.amazon.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitch.amazon.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitch.amazon.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitch.amazon.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitch.amazon.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitch.amazon.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitch.amazon.com.tr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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