apidocs.int.aws.businesswire.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0d:4e:8e:22:ae:75:3e:85:c6:30:a2:fa:ad:7c:58:c4 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=apidocs.int.aws.businesswire.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:4e:8e:22:ae:75:3e:85:c6:30:a2:fa:ad:7c:58:c4
Serial Number (int): 17687845950082998209191496096354687172
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: da:9d:3e:e7:62:73:72:f5:a3:5c:b1:be:ad:32:81:f9:89:6b:77:d2
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 26:c7:75:a9:92:2b:82:ec:9e:94:e8:73:a2:63:66:87:f1:22:cf:4f
Fingerprint (sha256): 1f:d9:79:2f:43:73:8f:f6:ce:82:0b:bb:d8:d7:58:84:db:21:5f:a7:29:3b:71:96:af:84:7b:1f:5a:ab:3a:22

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate apidocs.int.aws.businesswire.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apidocs.int.aws.businesswire.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apidocs.int.aws.businesswire.com
green.apidocs.int.aws.businesswire.com
green.apidocs.int.businesswire.com
apidocs.int.businesswire.com

Other certificates including the domain name businesswire.com

(limited to 100 certificates)
bw-webproxy-v1.dev.aws.businesswire.com
apidocs.int.aws.businesswire.com
platform.int.aws.businesswire.com
acsc2.businesswire.com
platform-internal.int.aws.businesswire.com
membership.businesswire.com
*.test.businesswire.com
careers.businesswire.com
platform-internal.int.aws.businesswire.com
platform-internal.test.aws.businesswire.com
pr.businesswire.com
platform-internal.int.aws.businesswire.com
platform-internal.int.aws.businesswire.com
careers.businesswire.com
platform-internal.int.aws.businesswire.com
api-docs-web-v2r1.int.aws.businesswire.com
platform-internal.int.aws.businesswire.com
ir.businesswire.com
bw-webproxy-v1.int.aws.businesswire.com
platform-internal.test.aws.businesswire.com
news-search.aws.businesswire.com
platform.dev.aws.businesswire.com
mtadmz2.nyprod.businesswire.com
platform-internal.dev.aws.businesswire.com
interactive.businesswire.com
apidocs.int.aws.businesswire.com
*.businesswire.com
newstrak-testing.dev.aws.businesswire.com
*.hqprod.businesswire.com
pr.businesswire.com
platform-internal.int.aws.businesswire.com
*.businesswire.com
platform-duffytest.sandbox.aws.businesswire.com
*.test.newshq.businesswire.com
www-origin.staging.aws.businesswire.com
platform-internal.int.aws.businesswire.com
yahoo-feed.aws.businesswire.com
apidocs.int.aws.businesswire.com
api.dev.aws.businesswire.com
platform-internal.int.aws.businesswire.com
bw-kuleana-text-extraction-apis.test.aws.businesswire.com
platform-internal.int.aws.businesswire.com
snrtrak.sandbox.aws.businesswire.com
connect.businesswire.com
resources.businesswire.com
platform-internal.int.aws.businesswire.com
es.dev.aws.businesswire.com
apidocs.int.aws.businesswire.com
platform-internal.int.aws.businesswire.com
apidocs.int.aws.businesswire.com
platform-v2.dev.aws.businesswire.com
platform-internal.int.aws.businesswire.com
platform-internal.int.aws.businesswire.com
platform-internal.int.aws.businesswire.com
etools.osimail3.us
snrtrak.aws.businesswire.com
platform-internal.int.aws.businesswire.com
platform-internal.int.aws.businesswire.com
www.businesswire.com
membership.businesswire.com
secure.businesswire.com
newsroom.businesswire.com
api-docs-web-v2r1.dev.aws.businesswire.com
platform-internal.dev.aws.businesswire.com
www-origin.dev.aws.businesswire.com
platform.aws.businesswire.com
platform-internal.int.aws.businesswire.com
*.newshq.businesswire.com
platform-internal.int.aws.businesswire.com
www.businesswire.com
apidocs.int.aws.businesswire.com
careers.businesswire.com
*.investorhq.businesswire.com
blog.businesswire.com
apidocs.test.aws.businesswire.com
etools.osimail3.us
akamai-logs.int.aws.businesswire.com
platform.prod.aws.businesswire.com
platform-internal.int.aws.businesswire.com
platform-internal.int.aws.businesswire.com
apidocs.int.aws.businesswire.com
*.newshq.businesswire.com
apidocs.test.aws.businesswire.com
services.businesswire.com
snrtrak-proxy-v1.dev.aws.businesswire.com
platform-internal.int.aws.businesswire.com
mtadmz1.nyprod.businesswire.com
access.businesswire.com
www.test.businesswire.com
platform-internal.int.aws.businesswire.com
platform-internal.int.aws.businesswire.com
platform-internal.int.aws.businesswire.com
apidocs.int.aws.businesswire.com
apidocs.int.aws.businesswire.com
platform-internal.int.aws.businesswire.com
bw-webproxy-v1.int.aws.businesswire.com
platform-internal.int.aws.businesswire.com
*.investorhq.businesswire.com
apidocs.int.aws.businesswire.com
apidocs.int.aws.businesswire.com

Certificate

The complete raw certificate details for apidocs.int.aws.businesswire.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xczEeT+iaevIK7WrMxi
hSiUkxnMMlIoEGo+4+7oDI1KfSCJjag7dqjH02Ww+Tf6rxwh2i6DDvJapa3h4Qvv
QdpCIuXArUXixyLVQ1X0wTqAkGnTJBgVUZcB+A3sCyFm5sTSL8MSCU7YMOuvcZH5
9yFhsio/bKQ5dslXiWN/RHEY/s63RRrW1u7CH5Vv3Lr1leWE++CXqgM6HBH2+vxM
z5NPrirmE+dpQtUtTGoJinqeZCYKMHzZN6S5518Gysinc4QT3fMJMRW8o+2ot+Xx
dcFaGZDs/6+s8fatZsE7FEGwa/ww8EflM1sT0cagCDB6ln4Ye399PwNOInX1jFjs
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17687845950082998209191496096354687172
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apidocs.int.aws.businesswire.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28667535323079374916521568579394735363295864674703388055352498016944092690854217822313264730240880706052713688441330024649676258909097730228885011884538497496961085851088022081305797409606930753964558404075287084883370022232082155772682483144128395114332565160698797083153289866193672075463356222165512000519089766674406985352023454243424686438063247644171703423051812664162676636557552747752246698150120283485326567994300307393754157304140711237555916843924352597177379066215741900943814793000389140348724228902942621201572129774304116085624291998980812773017018201709103710845640756435956914669261062913811220589823
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							da9d3ee7627372f5a35cb1bead3281f9896b77d2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (143 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apidocs.int.aws.businesswire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'green.apidocs.int.aws.businesswire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'green.apidocs.int.businesswire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apidocs.int.businesswire.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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