prod-eu.ridra.pars.amazon.dev

Issued by Amazon

About this certificate

This digital certificate with serial number 09:49:e1:18:6a:76:db:b8:8f:c0:39:a4:1a:e1:ac:14 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod-eu.ridra.pars.amazon.dev

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:49:e1:18:6a:76:db:b8:8f:c0:39:a4:1a:e1:ac:14
Serial Number (int): 12346655109323109131802584213392305172
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d8:24:c5:1b:8e:ee:f3:25:b3:08:19:6c:1b:3f:47:18:7f:9f:de:bc
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 3d:e4:74:c1:6b:be:c2:17:1b:6f:be:63:3c:bf:26:78:66:6e:27:09
Fingerprint (sha256): 1f:06:1b:18:64:11:da:94:9a:bd:27:f0:e4:f5:87:a4:f6:38:01:c1:68:18:35:32:ea:61:48:a5:65:f6:cf:47

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate prod-eu.ridra.pars.amazon.dev

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod-eu.ridra.pars.amazon.dev

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prod-eu.ridra.pars.amazon.dev

Other certificates including the domain name amazon.dev

(limited to 100 certificates)
employees.beta.api.talent-alchemy.hr.amazon.dev
regular.us-east-1.alpha.atta.kaspian.amazon.dev
air.lmaq.last-mile.amazon.dev.lmaq.last-mile.amazon.dev
sam-dev-laijonat-test.vovi.last-mile.amazon.dev
gamma.styleguides.leo.amazon.dev
sungyenl.alpha.console.materials.sustainability.amazon.dev
eu-west-1.beta.sblandingpageservice.advertising.amazon.dev
us-east-1.beta.messaging.ui.bsm.selling-partners.amazon.dev
cm-eu-gamma.flex-routing.last-mile.amazon.dev
*.timlawso.physical.advertising.amazon.dev
beta.supernova.amazon.dev
alpha.hitting-bullseye.zappos.amazon.dev
api.us-west-2.prod-jp.shopper-gateway.subs.f3.amazon.dev
us-east-1.prod.configurable-param.mbe.last-mile.amazon.dev
us.beta.itinerary-manager.onroad-execution.last-mile.amazon.dev
dev.celestia.noc.amazon.dev
lialx.test.attribution.privacy.amazon.dev
coredump-parser.eink.amazon.dev
auth.prototype.alps.music.amazon.dev
andrena.niksinn.icon.amazon.dev
workflow.api.chrisfll.batch.caspian.dccs.amazon.dev
metrics-rhhigg.distance-assistant.opstechit.amazon.dev
us-west-2.alpha.int.lab.dml.alexa.amazon.dev
aasthame.api.permissions.vector.advertising.amazon.dev
deeplink.prod.alps.music.amazon.dev
lifepi.timlawso.physical.advertising.amazon.dev
*.beta.psidr.payments-security.amazon.dev
turn.ring-mobility.devices.amazon.dev
us-west-2.prod.api.3d.music.amazon.dev
dev-1.pdx.nanobots.alexa.amazon.dev
jp.datastash-prod.pacman.last-mile.amazon.dev
fba-i2i-console.scot.amazon.dev
alpha-6ae1e725d9.netsparker.security.amazon.dev
ops.chimera-beta.mlo.advertising.amazon.dev
beta.cruzoliv.people.amazon.dev
beta.eu-west-1.tax-accessor.cmp.chroma.intech.amazon.dev
central.lmaq.last-mile.amazon.dev
vinoth.test.creative-report.calltoaction.advertising.amazon.dev
portal.transportation.amazon.dev
api.na.alpha.substitution-state-service.subs.f3.amazon.dev
us-west-2.beta.messaging.ui.bsm.selling-partners.amazon.dev
api.fcmap.swanwes.people.amazon.dev
alpha.mumblecore.kep.books.amazon.dev
beta.kaizer.graph.amazon.dev
beta.us-west-2.mdcs.mshop.amazon.dev
dpd-debug.devices.dev.rss.ring.amazon.dev
www.nickjmil.people.amazon.dev
ak-game-service.prod.iad.games.kids.amazon.dev
dub.beta.unicorn-phoenix.lending.payments.amazon.dev
scorecard.ads.amazon.dev
zhenzihu.dev.mmt-validation.people-engine.amazon.dev
bp.sdn.kuiper.amazon.dev
prod.luma.workshop.mathieud.people.amazon.dev
andrena.niksinn.icon.amazon.dev
beta.vse-fixer.tools.amazon.dev
fe.beta.tiago-ops-video.alexa.amazon.dev
ui.fe.stagewebsite-master.last-mile.amazon.dev
fpd.sumantbh.icon.amazon.dev
gamma.na.cms.physical.advertising.amazon.dev
aax.online-panel.advertising.amazon.dev
gulbt-failure-analysis.bsxqa.digital-books.amazon.dev
jp.problemsolve-gamma.dolphinprod.last-mile.amazon.dev
us-east-1.prod.api.uhd.music.amazon.dev
static.alpha.luma.workshop.mathieud.people.amazon.dev
cf.dc-ext.us-east-1.gateway.bids.physical-stores.amazon.dev
dashboard.beta.security-health-monitor.acs.amazon.dev
igl.search.inside.amazon.dev
*.beta.psidr.payments-security.amazon.dev
cdj.invite.prototype.alps.music.amazon.dev
beta.perm.immigration.amazon.dev
us-east-1.alpha.analysis-service.afn-fcp.promise.amazon.dev
prod.us-east-1.swa.last-mile.amazon.dev
ui.pvsin.last-mile.amazon.dev
virtual.opstechit.amazon.dev
beta.step-up-tool.rbs.amazon.dev
aelden.alpha.us-east-1.heartbeat.cs.amazon.dev
matbacic.search.inside.amazon.dev
user.prototype.alps.music.amazon.dev
webapi.stage.coco.scot.amazon.dev
*.alpha.mouse.payments-security.amazon.dev
beta.supernova-selfservice.amazon.dev
gamma.us-west-2.mdcs.mshop.amazon.dev
us-west-2.alpha.shbhvya.people.amazon.dev
avus-na-onebox.upsell.video.alexa.amazon.dev
api.eu.prod.landing.advantage.vendors.amazon.dev
prod.eu.grok.resolution.mbe.last-mile.amazon.dev
cloudauth.us-east-1.prod.tsv.alps.lamps.amazon.dev
*.search.acp.selling-partners.amazon.dev
dev4.cyclone.gdq.amazon.dev
api.na.prod.landing.advantage.vendors.amazon.dev
upload-flexsimwebapp.wwde.amazon.dev
*.rongzhou.people.amazon.dev
templates.leo.amazon.dev
us-west-2.beta.api.uhd.music.amazon.dev
us-west-2.alpha.lab.dml.alexa.amazon.dev
gamma.cubeout.grokalert.last-mile.amazon.dev
placement.proxy.gamma.us-east-1.zds.arc.hit.amazon.dev
abhisaha.rpmsui.cloudtune.amazon.dev
*.beta.pdps-events.payments.amazon.dev
api.beta.supernova-selfservice.amazon.dev

Certificate

The complete raw certificate details for prod-eu.ridra.pars.amazon.dev in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvu3Vot/HlA9MkOcyEiZ
COJf4WnEEovT9cf2VnqbsXprXUgODlZdlxwfmqJPqMMDKNa/5fHzXCLhb7kgSKn2
EIQEC1sADv3kGcXUu3vGehFK+K8tmnODlQ0nWJiufJlZivD/Q1dg4IWwkuRoDmJI
gPy0wGgA53wYhvJRQhUr5BhzosFIiPhmqg7BwQJKBYs3yhsNI2nf/dWoxT7k0JDO
z0IuHUbuHfyjvspFDd9F4S/+ff3AJEUq8zQ2eelaeyAwnn58oNHwr8FlHLKX454s
UChTHKuluuxB2SVf3F17A+7Uoba79cfpJiGFbEqD+FmgK65hZZOmw4Hfw9lloUKV
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12346655109323109131802584213392305172
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod-eu.ridra.pars.amazon.dev'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26129216689868927997619935596119400077412424896576238190398272603037448466130749172400031976940142039606167985045334030561154964701666523464823844603358204401254065778775207725746645454255617900519960149059241201522052947336416053391004608830934655591437134811303514300838285040157862804398858702540223021267035485619107260101891238324749925733511763815428837204038685140627307278198272899225534616913333214601203200909102054230104694443375973871682998407207049598122939729532480137909754364681123856976742762890013718505046525248277101269497483085054998529693406535994853036484750571440682211060201290320604718863681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d824c51b8eeef325b308196c1b3f47187f9fdebc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-eu.ridra.pars.amazon.dev'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a8ff5d4d2b271a869206360ee0dadd7ce22f5cb03ca8e4170957f33e944c084c3164a66e9fc13cc387613c19f286eb319a1a0222d829ef41305b5376a28f05b39595e6cc812479aeeebcf5e53718294f38a46e4dce9adc3a39f500fb6259fdb6c0826d03689152dc3c84ca4852eb7dde767c038b9957ff1601bdccb96fd515ba87466cc7ef8f8d028deeccd1fd28e734f5e2ba6974587c16dcd3274acec6b1f1a170aa50568cbef24123c7f09a039a6d9ab952a8f8e895aaa5d644d1f2a52ffc98405e5b0a6918bcfebb4acb36aceb60b41ca95344a18d13e853b1035d017c8b14b362fdc26c0897b1688167854e1545a794f7415033362c927ac57c96620462