www.amazon.co.jp

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 07:ad:f3:e0:80:b5:32:0d:6c:bf:0b:ef:b4:81:48:0a was issued on by DigiCert Inc.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.amazon.co.jp

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:ad:f3:e0:80:b5:32:0d:6c:bf:0b:ef:b4:81:48:0a
Serial Number (int): 10207809739496160037637293541504927754
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 1e:4c:ef:45:df:ce:0f:ea:4f:ee:0f:a0:2a:61:5c:dc:e7:1b:9a:00
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): ac:89:af:fe:00:10:a1:c4:08:e7:12:19:06:33:cb:be:69:87:9b:10
Fingerprint (sha256): 22:93:e3:ca:49:5d:5b:6d:f5:e6:c9:7a:0a:5e:e5:e5:0a:46:4f:21:6a:15:51:cd:68:f8:82:20:4b:30:20:b1

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate www.amazon.co.jp

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.amazon.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amazon.co.jp
amazon.jp
www.amazon.jp
www.amazon.co.jp
origin-www.amazon.co.jp
p-nt-www-amazon-co-jp-kalias.amazon.co.jp
p-yo-www-amazon-co-jp-kalias.amazon.co.jp
p-y3-www-amazon-co-jp-kalias.amazon.co.jp

Other certificates including the domain name amazon.co.jp

(limited to 100 certificates)
alexa-skills.amazon.com.au
*.peg.a2z.com
completion.amazon.co.jp
authorcentral.amazon.co.jp
cde-ta-g7g.amazon.com
identity.browserapps.amazon.co.jp
primenow.amazon.co.jp
dcp.amazon.co.jp
skills-store-eu.amazon.com
dl.amazon.co.jp
dp-gw-na.amazon.com
nonprofitcentral.amazon.com
rcm-fe.assoc-amazon.com
dl.amazon.co.jp
ssofaast-aftx.amazon.co.jp
aeswidget.amazon.jp
aax-fe-retail-direct.amazon-adsystem.com
aan.amazon.co.jp
logistics.amazon.com
kdp.amazon.co.jp
argileto.amazon.com
payments-sandbox.amazon.co.jp
pitangui.amazon.com
*.peg.a2z.com
primenow.amazon.co.jp
fls-fe-opf.amazon.com
amazonux.com
ssofaast.amazon.co.jp
shm.amazon.co.jp
mt.amazon.co.jp
kindlestore-sha-proxy.amazon.com
brandservices.amazon.com
aftlite-portal-nrt.amazon.co.jp
kep.amazon.com
alexa-skills-beta.amazon.com.au
widgets.amazon.co.jp
kep.amazon.com
dp-gw-na.amazon.com
kdp.amazon.co.jp
www.amazon.co.jp
transportation.amazon.co.uk
stage-business.amazon.co.jp
fls-fe.amazon.com
chat.amazon.co.jp
r.amazon.co.jp
dropship.amazon.co.jp
identity.browserapps.amazon.co.jp
www22.amazon.co.jp
pitangui.amazon.com
thumbnails-photos.amazon.co.jp
advertising-api-fe.amazon.com
kep-eu.amazon.com
ramp.amazon.com
cde-ta-g7g-sha-proxy-preprod.amazon.com
cde-ta-g7g.amazon.com
manga.amazon.co.jp
account-p2k.amazon.com
aeswidget.amazon.jp
vdp.amazon.com
t200fe.api.cer.amazonvideo.com
webservices.amazon.co.jp
kindle-store-proxy-endpoint-na.amazon.com
aan.amazon.co.jp
*.peg.a2z.com
pay.amazon.co.jp
skills-store-eu.amazon.com
kdp.amazon.co.jp
kdp-eu.amazon.co.jp
skills-store-eu.amazon.com
documents.amazon.co.jp
akamai-renew-cert-digicert-arcus-www.amazon.com
dcp.amazon.co.jp
brandservices.amazon.com
cde-ta-g7g-preprod.amazon.com
api-sandbox.amazon.co.jp
ab.amazon.co.jp
ddee-preprod-jp.amazon.co.jp
rental-account.partnercentral-na.amazon.com
ddee-preprod.amazon.com
aax.online-panel.advertising.amazon.dev
hh2.amazon.co.jp
twitch.amazon.co.jp
cde-ta-g7g.amazon.com
kdp-eu.amazon.co.jp
www.amazon.co.jp
vdp.amazon.com
*.peg.a2z.com
transportation.amazon.co.jp
artistcentral.amazon.co.jp
kuato.amazon.co.jp
chat.amazon.co.jp
rcm-fe.assoc-amazon.com
msh.amazon.co.jp
brandservices.amazon.com
digprjsurvey.amazon.co.jp
sha256.webservices.amazon.co.jp
music-xray-service.amazon.co.jp
twitch.amazon.co.jp
transportation.amazon.co.uk
seller-central-pilot.amazon.co.jp

Certificate

The complete raw certificate details for www.amazon.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVk+A7SB8q56Owmkukdk
Dh8YvNWd4gluXsAQo5JXLWuWGjPnx9I2CpB6LZ3yGromdBEtLyEnf8cFdR0W5tih
1ArQb5vNyQKL39GKhudYBK/SfZVmFJTe/i4/Ou8wPUae+JxKlTg6c7J/IJp3OR1h
rtOLDGUWKF+orlSR6e+2FoC3kc/5dLw9RoR4ktpKB4rSIGBSJcie9vYFzb2xz37Q
tyFQEZygiuOV4X/+sterUaLGDU3QM9k2u0I2nvhGcJ6OY9pGqhhY6nIpJKODnNNc
0Nz3qZKNf5wfpPi4Qc5JUKyCvjH3TO4Bb9fHC91MyOqOFNQt5XWyOynO0hh0CZNj
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10207809739496160037637293541504927754
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.amazon.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20368374090232327693806239560987234316740935505822179042974906118928199211729320775084557210083393972209355353142676355915294244301911780896231143254694516236297404776322731776404196648548268766873928157166469983658054782702474085488567333496676347849273584587195346848352989861096406824934029574407461220817273362290304729915534196743643669703238911046568814983209991276516329937923296709893063085831676825596956551662594324345991717773834702469998658810346765254093115131826755721354161652866025510043301488948482896316460021682241298306749446048103059231770469175189860804188689076677068977737004002933957396226877
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e4cef45dfce0fea4fee0fa02a615cdce71b9a00
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (215 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazon.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amazon.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazon.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amazon.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-www.amazon.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p-nt-www-amazon-co-jp-kalias.amazon.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p-yo-www-amazon-co-jp-kalias.amazon.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p-y3-www-amazon-co-jp-kalias.amazon.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000183f1cbf5580000040300473045022100fc8f6d78895bfe8831ba8d6a06d367ca39f2ce0473d43e33e4120b3d71a26a2e02207e3daebfc74344f4a2a86c3e3b889689c66cc55383e4d5cb42bdc2846a8568f6007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000183f1cbf5ce0000040300473045022026fd5690c69239d851a71f0dc76109cd63cb018e748c5b9226c7127988c9105d022100b3d6f0ebf80d4accdbeca70f946eea0951b202a81d22bc33a234709598cb6f84007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000183f1cbf5780000040300473045022019487dcf48ac1f78295b49df761b94a5992200d1c33a26a351b814d42a3f80ef022100da1aac40e03d0aebba7092dd773847eaff1ad684c8d5b39a39ca32190dfbdc5f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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