bus.fulfillment.spsapps.net

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 04:13:a5:eb:92:34:42:65:9a:b7:aa:7b:0a:22:7f:7f was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bus.fulfillment.spsapps.net

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:13:a5:eb:92:34:42:65:9a:b7:aa:7b:0a:22:7f:7f
Serial Number (int): 5418930884902607721290521890825338751
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 52:e4:f4:c5:8a:86:f2:52:4e:01:04:51:24:66:27:25:50:a7:73:5e
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 94:53:b8:82:ae:bb:73:b6:01:0d:89:dd:04:f6:8d:1c:b4:7b:4a:2c
Fingerprint (sha256): 1b:40:95:1a:86:9e:f2:c9:2f:f3:73:03:01:a4:80:6c:cc:ac:ef:13:5b:4f:5c:a2:55:ca:00:9a:73:33:25:a2

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate bus.fulfillment.spsapps.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bus.fulfillment.spsapps.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bus.fulfillment.spsapps.net

Other certificates including the domain name spsapps.net

(limited to 100 certificates)
sps-tech-registry-api.internal.sharedservicesdev.spsapps.net
api.dc4-proxy-pull-service.preprod.spsapps.net
api.pa-supplier-configuration.spsapps.net
sps-tech-registry-api.internal.sharedservices.spsapps.net
*.analytics-portal.test.spsapps.net
*.dev.spsapps.net
nonprod-us-east-2-jarocki-4r5t.integration.api.sps-internal.com
*.1screen.spsapps.net
api.dc4-proxy-pull-service.spsapps.net
*.mna.spsapps.net
*.swp.dev.spsapps.net
*.analytics.stage.spsapps.net
*.swp.spsapps.net
*.messaging-service.stage.spsapps.net
api.dc4-proxy-pull-service.test.spsapps.net
*.data-engine-transformation.stage.spsapps.net
transaction-tracker-api.service.prod.spsapps.net
catalog-gateway.service.test.spsapps.net
*.stage.spsapps.net
cdk-hackathon-api.service.test.spsapps.net
api.dc4-proxy-pull-service.preprod.spsapps.net
*.analytics.dev.spsapps.net
*.analytics.spsapps.net
*.1screen.spsapps.net
api.data-engine-command-center.spsapps.net
*.paca-interaction.preprod.spsapps.net
nonprod-us-east-2-jarocki-4r5t.integration.api.spscommerce.com
weekend.internal.sharedservices.spsapps.net
bus.fulfillment.spsapps.net
*.service.preprod.spsapps.net
1screen-prospace-converter.service.prod.spsapps.net
api.template.test.spsapps.net
*.api.dev.spsapps.net
parcel-service-heartbeat.service.preprod.spsapps.net
*.1screen.dev.spsapps.net
api.dc4-proxy-receiver.dev.spsapps.net
api.dc4-proxy-pull-service.preprod.spsapps.net
fulfillment-edi-automation.test.spsapps.net
as2-admin-api.service.prod.spsapps.net
*.stage.spsapps.net
1screen-prospace-converter.service.prod.spsapps.net
fi-top.service.prod.spsapps.net
*.analytics-portal.preprod.spsapps.net
api.messaging-service.spsapps.net
*.stage.spsapps.net
opal.prod.spsc.io
bus.fulfillment.spsapps.net
bus.fulfillment.spsapps.net
fi-top.service.test.spsapps.net
fi-top.service.prod.spsapps.net
nexus-graphql.service.test.spsapps.net
fulfillment-edi-automation.test.spsapps.net
*.mna.test.spsapps.net
api.messaging-service.spsapps.net
*.template.test.spsapps.net
*.devcenter.spsapps.net
*.spsapps.net
analytics-portal-api.service.preprod.spsapps.net
svram.spsapps.net
api.dc4-proxy-receiver.spsapps.net
transaction-tracker-api.service.test.spsapps.net
*.swp.dev.spsapps.net
*.paca-interaction.preprod.spsapps.net
*.swp.spsapps.net
*.messaging-service.spsapps.net
*.mna.stage.spsapps.net
api.pa-supplier-configuration.spsapps.net
setup-migrator-2-api.service.test.spsapps.net
analytics-snowflake-api.service.test.spsapps.net
*.swp.spsapps.net
api.profile-service.prod.spsc.io
*.messaging-service.stage.spsapps.net
opal.prod.spsc.io
*.devcenter.spsapps.net
auth.test.spsapps.net
api.messaging-service.spsapps.net
analytics-snowflake-api.service.prod.spsapps.net
1screen-prospace-converter.service.prod.spsapps.net
bus.fulfillment.spsapps.net
api.data-engine-command-center.test.spsapps.net
transaction-tracker-api.service.test.spsapps.net
analytics-snowflake-api.service.test.spsapps.net
api.fulfillment.spsc.io
*.paca-interaction.dev.spsapps.net
api.template.test.spsapps.net
*.data-engine-transformation.test.spsapps.net
acknowledgement-service-api.service.prod.spsapps.net
parcel-timeout-service.service.test.spsapps.net
api.pa-supplier-configuration.spsapps.net
*.analytics.preprod.spsapps.net
holodeck-api.service.prod.spsapps.net
api.mna.test.spsapps.net
analytics-portal-api.service.preprod.spsapps.net
api.dc4-proxy-receiver.preprod.spsapps.net
api.data-engine-ecs-adapter.stage.spsapps.net
api.data-engine-file-collection.spsapps.net
*.paca-interaction.dev.spsapps.net
*.messaging-service.stage.spsapps.net
*.api.spsapps.net
*.analytics-portal.preprod.spsapps.net

Certificate

The complete raw certificate details for bus.fulfillment.spsapps.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwp7RcBp+iIpC63Lk6aO
h1baOLifIKm8VVOtW7VjD5Wljv6Nd+HMhONfysbMzTR5xsnqy31lh8mcqCYtFNOb
ScWzqKtSj/EJ9PmK46n9Q1g2konxCkIQ/s1g7XoUWeAKbESfnzLIzsRDNitCu1eJ
G5uC9AHD6N/0AasUiQjRIeDFyLoW434IpkllLqqkxVGjIVACrNK1R/kJnDbt0HoR
DF12X4mWM6U2cO+/fw0d7haPloLx/my9P70WmMAdd7IGL6NtXJ7CzjZl1BCiSDUN
9Pha/4kMjkh/O9VEcXaW6dR8m7ADvx0INT2a0OG6d04yRhxg2pNic5vaVhl0fXfe
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5418930884902607721290521890825338751
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bus.fulfillment.spsapps.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23611731665250073380801192269222354674907084771601062373874735463473048109502900576837809706790315728970886118080524196628882468664723412208817270739863611122226260193264801949918286888325869950670702511602989943752319436216700645536290612812204725665045924298941805623559111596689154828298495001087116183516969548469773492734613480750282505078978854647426222530070816383164143138845745422950667253756249051341495461826719388405344302165492347644968991762258274376636123647296797911406065523487495008514501915776272171466431875672139725035576652844764301215451141037304926671696135094027190089872300601153911298448987
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							52e4f4c58a86f2524e0104512466272550a7735e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bus.fulfillment.spsapps.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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