aeswidget.amazon.jp

Issued by Amazon

About this certificate

This digital certificate with serial number 02:f2:76:9a:9f:66:99:17:ea:b9:1c:16:df:06:e2:72 was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aeswidget.amazon.jp

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:f2:76:9a:9f:66:99:17:ea:b9:1c:16:df:06:e2:72
Serial Number (int): 3917397406137668084185141027872891506
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 82:55:5d:28:00:61:e1:93:4d:f4:13:48:f9:49:df:26:d4:18:7a:cc
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 2b:cd:14:5c:78:ae:a9:61:7e:3d:26:91:c2:a7:d1:e3:ca:38:18:18
Fingerprint (sha256): 1f:41:6e:aa:c7:80:27:e8:48:4d:90:39:a2:20:99:6c:aa:b3:4d:0e:c4:f7:47:7d:c1:6b:c7:11:5e:5d:c6:7d

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate aeswidget.amazon.jp

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aeswidget.amazon.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aeswidget.amazon.jp
aeswidget.amazon.co.jp
aeswidget.amazon.sg

Other certificates including the domain name amazon.jp

(limited to 100 certificates)
*.peg.a2z.com
nonprofitcentral.amazon.com
dl.amazon.co.jp
aeswidget.amazon.jp
*.peg.a2z.com
amazonux.com
membership.amazon.com
www.amazon.co.jp
aeswidget.amazon.jp
*.peg.a2z.com
www.amazon.co.jp
*.peg.a2z.com
dpreview.in
www.amazon.co.jp
*.peg.a2z.com
membership.amazon.com
*.peg.a2z.com
amazonux.com
*.peg.a2z.com
www.amazon.co.jp
payments.amazon.co.jp
*.peg.a2z.com
pay-api.amazon.jp
dl.amazon.co.jp
credential-locker-service.amazon.jp
*.peg.a2z.com
www.amazonmusic.com
photos.amazon.jp
physicalstoretech.amazon.jp
jobfinder.amazon.com
relay.amazon.jp
*.peg.a2z.com
www.amazon.co.jp
www.amazonmusic.com
aeswidget.amazon.jp
api.relay.amazon.jp
forecasting-fe.amazon.com
dl.amazon.co.jp
photos.amazon.jp
aeswidget.amazon.jp
dl.amazon.co.jp
membership.amazon.com
www.amazon.co.jp
sdu.amazon.jp
www.amazon.co.jp
dl.amazon.co.jp
payments.amazon.co.jp
data-exchange.amazon.com
amazonux.com
regions-beta.corp.amazon.com
www.amazon.co.jp
photos.amazon.jp
www.amazon.co.jp
dl.amazon.co.jp
xb-node-report.amazon.jp
www.amazon.co.jp
membership.amazon.com
*.peg.a2z.com
www.amazonmusic.com
data-exchange.amazon.com
*.peg.a2z.com
aeswidget.amazon.jp
www.amazon.co.jp
www.amazon.co.jp
dl.amazon.co.jp
sdu.amazon.jp
edgeflow-dp.aero.4d5ad1d2b-frontier.amazon.co.jp
*.peg.a2z.com
payments.amazon.co.jp
nonprofitcentral.amazon.com
static.prime-apis.amazon.jp
aeswidgets.amazon.jp
www.amazon.co.jp
www.amazon.co.jp
aeswidget.amazon.jp
payments.amazon.co.jp
www.amazon.co.jp
www.amazon.co.jp
aeswidgets.amazon.jp
dl.amazon.co.jp
dl.amazon.co.jp
pay-api.amazon.jp
aeswidget.amazon.jp
dl.amazon.co.jp
sdu.amazon.jp
dl.amazon.co.jp
prime-apis.amazon.jp
www.amazon.co.jp
www.amazon.co.jp
nonprofitcentral.amazon.com
payments.amazon.co.jp
dl.amazon.co.jp
jobfinder.amazon.com
s1.amazon.co.jp
payments.amazon.co.jp
payments.amazon.co.jp
www.amazon.co.jp
edgeflow-dp.aero.4d5ad1d2b-frontier.amazon.co.jp
*.peg.a2z.com
*.peg.a2z.com

Certificate

The complete raw certificate details for aeswidget.amazon.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAng9q6UI3C9yBjl487t0o
YHMjA1fwKdAlPKodMDJXsrPtuGETbgZ/RdGuxRhk0nGT0yzcsveQAsSfn8EOSMaP
lbbaC/ZhMRYapIte3B+4QAtzWQbjB7xvEC3NW524LhzK2w/f5WmRn51GHS7bl4sV
2eSkhioVYFPTooI2/3S7Hul4/MpwZ2y2JgCpkse0dNT23JdOHs/9Drp1jWQKZkn8
LPOZANMOne1aqjR1p2hZfdlaEQXTeFty/9ULXj5SEIrfw4k50KWfTwRO7O733KWx
2KqKFSfqmLW62U9cu7b/OTOvsq1T2z2g7H9GiVPzMnnT3ESrIGquhKR7ZoCrdWw6
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3917397406137668084185141027872891506
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aeswidget.amazon.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19953254897276492568330369010328779787253049270904474172007964295084707636631117778498193784894145610951865779727142597389496366881984345431121224091480244159763991221735583816631609650773638703963067188374098416374089183090121480171300903397445113329947080744772382762342708640377746161757806728015979584692957559632801834152393323539755757734094759144002244275001810440978405198742321743954654013747516222151503468170923273741181721664369396241968346531190590270210876493960823225152658151380193674071458844396364008297615601436971551698392617333452864458351500168493904306629156528154601763780831811843749621545511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							82555d280061e1934df41348f949df26d4187acc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeswidget.amazon.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeswidget.amazon.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeswidget.amazon.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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