dl.amazon.co.jp

Issued by Amazon

About this certificate

This digital certificate with serial number 0a:de:1e:9e:fb:df:50:8e:b3:66:85:28:10:7c:07:24 was issued on by Amazon.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dl.amazon.co.jp

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:de:1e:9e:fb:df:50:8e:b3:66:85:28:10:7c:07:24
Serial Number (int): 14445590928732385611065027767161325348
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 1e:81:42:09:09:65:1a:4b:3e:4c:c6:d0:11:a9:cd:67:80:56:57:ca
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 0b:4a:5c:d2:3d:e7:3e:e9:5d:a5:06:e1:ef:a3:87:f3:8a:5c:60:ef
Fingerprint (sha256): 22:93:f4:59:e2:18:49:9a:af:3f:ff:a9:a6:fe:03:6f:64:eb:5e:28:95:ce:48:82:5a:33:5a:d5:fb:41:91:f2

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate dl.amazon.co.jp

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dl.amazon.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dl.amazon.co.jp
dl.amazon.jp
dl-prod.pdx.amazon.com
dl.amazon.com.au
origin-dl.amazon.co.jp
origin-dl.amazon.jp
origin-dl-prod.pdx.amazon.com
origin-dl.amazon.com.au
dl.amazon.sg
origin-dl.amazon.sg

Other certificates including the domain name amazon.co.jp

(limited to 100 certificates)
alexa-skills.amazon.com.au
*.peg.a2z.com
completion.amazon.co.jp
authorcentral.amazon.co.jp
cde-ta-g7g.amazon.com
identity.browserapps.amazon.co.jp
primenow.amazon.co.jp
dcp.amazon.co.jp
skills-store-eu.amazon.com
dl.amazon.co.jp
dp-gw-na.amazon.com
nonprofitcentral.amazon.com
rcm-fe.assoc-amazon.com
dl.amazon.co.jp
ssofaast-aftx.amazon.co.jp
aeswidget.amazon.jp
aax-fe-retail-direct.amazon-adsystem.com
aan.amazon.co.jp
logistics.amazon.com
kdp.amazon.co.jp
argileto.amazon.com
payments-sandbox.amazon.co.jp
pitangui.amazon.com
*.peg.a2z.com
primenow.amazon.co.jp
fls-fe-opf.amazon.com
amazonux.com
ssofaast.amazon.co.jp
shm.amazon.co.jp
mt.amazon.co.jp
kindlestore-sha-proxy.amazon.com
brandservices.amazon.com
aftlite-portal-nrt.amazon.co.jp
kep.amazon.com
alexa-skills-beta.amazon.com.au
widgets.amazon.co.jp
kep.amazon.com
dp-gw-na.amazon.com
kdp.amazon.co.jp
www.amazon.co.jp
transportation.amazon.co.uk
stage-business.amazon.co.jp
fls-fe.amazon.com
chat.amazon.co.jp
r.amazon.co.jp
dropship.amazon.co.jp
identity.browserapps.amazon.co.jp
www22.amazon.co.jp
pitangui.amazon.com
thumbnails-photos.amazon.co.jp
advertising-api-fe.amazon.com
kep-eu.amazon.com
ramp.amazon.com
cde-ta-g7g-sha-proxy-preprod.amazon.com
cde-ta-g7g.amazon.com
manga.amazon.co.jp
account-p2k.amazon.com
aeswidget.amazon.jp
vdp.amazon.com
t200fe.api.cer.amazonvideo.com
webservices.amazon.co.jp
kindle-store-proxy-endpoint-na.amazon.com
aan.amazon.co.jp
*.peg.a2z.com
pay.amazon.co.jp
skills-store-eu.amazon.com
kdp.amazon.co.jp
kdp-eu.amazon.co.jp
skills-store-eu.amazon.com
documents.amazon.co.jp
akamai-renew-cert-digicert-arcus-www.amazon.com
dcp.amazon.co.jp
brandservices.amazon.com
cde-ta-g7g-preprod.amazon.com
api-sandbox.amazon.co.jp
ab.amazon.co.jp
ddee-preprod-jp.amazon.co.jp
rental-account.partnercentral-na.amazon.com
ddee-preprod.amazon.com
aax.online-panel.advertising.amazon.dev
hh2.amazon.co.jp
twitch.amazon.co.jp
cde-ta-g7g.amazon.com
kdp-eu.amazon.co.jp
www.amazon.co.jp
vdp.amazon.com
*.peg.a2z.com
transportation.amazon.co.jp
artistcentral.amazon.co.jp
kuato.amazon.co.jp
chat.amazon.co.jp
rcm-fe.assoc-amazon.com
msh.amazon.co.jp
brandservices.amazon.com
digprjsurvey.amazon.co.jp
sha256.webservices.amazon.co.jp
music-xray-service.amazon.co.jp
twitch.amazon.co.jp
transportation.amazon.co.uk
seller-central-pilot.amazon.co.jp

Certificate

The complete raw certificate details for dl.amazon.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/d1JGYVkEaowP89YlGX
ICaHDjTLeVuMF9TcI+C5uuMch+VJ+tSmwWZDWSJ8kvE49yhPfrJOvW8ennl3XZKI
7XUFdnP40nuMkfy+QRWov9JA9e9fs8dGxXm4cEq6HdGCkIQdb/wKGVrN1zoP96L+
cxiVetowOxlKMmwW0I5odYgmPseNdz+5FZFSKtqMvtrGWlqAmhev0H9irl1J2Be5
Tw4tgMzBxzdc4tuiA3Z/ltPtHUEwcUzDk1O9rPQuaBi3k03je85pCeh8AXX3MoWa
+z4kNcpLY8tun0k+VJ748xEoZA88rq4jxkmj4bvpXLpoENO2nGMklNt5yNVKlGfG
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14445590928732385611065027767161325348
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-16 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dl.amazon.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18679056713955252335428167285218750682156941155200527597364454219134490276473130292946890864148839617663682756190354845658902269753080357922071229912527198134295648873151132148837366594302548954623681327705087798533297086099756211907551781625464989065483744184879158191856080626071270495527158012976767405647939487273706038586977395441662877904995138162921564876701818593529629354183329444431509385576676229924658908929637327875172502745793626868111146386503483146908564966108987811575496070935812477741870034561612151143144828898349525554115222153341877675685864384060767154916052645427452812127963658191726864483987
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e81420909651a4b3e4cc6d011a9cd67805657ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (212 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl.amazon.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl.amazon.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl-prod.pdx.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl.amazon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-dl.amazon.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-dl.amazon.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-dl-prod.pdx.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-dl.amazon.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dl.amazon.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-dl.amazon.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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