eu-west-3.signin.aws

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0c:ab:d6:cc:b4:3d:76:6f:3d:19:9d:63:36:3f:dd:c6 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=eu-west-3.signin.aws

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:ab:d6:cc:b4:3d:76:6f:3d:19:9d:63:36:3f:dd:c6
Serial Number (int): 16842975366210385900794892100583808454
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c6:ba:b7:34:ad:b9:78:fc:b3:28:1f:bb:2d:4c:60:c0:59:4e:da:8f
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 5e:7b:f9:22:b8:b2:0d:9d:46:b1:f7:b1:9c:fc:bd:fc:b5:36:b3:0d
Fingerprint (sha256): 27:71:2f:87:97:1f:90:4d:a1:26:85:48:c7:f1:a3:d1:ed:15:66:e5:59:d2:76:a1:e1:da:33:61:29:40:f1:cd

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate eu-west-3.signin.aws

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eu-west-3.signin.aws

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eu-west-3.signin.aws
*.eu-west-3.signin.aws
signin.aws.amazon.com
*.signin.aws.amazon.com

Other certificates including the domain name signin.aws

(limited to 100 certificates)
ap-east-1.signin.aws
ap-southeast-1.signin.aws
eu-central-1.signin.aws
eu-central-2.jwk.signin.aws
ap-southeast-4.prodish.jwk.signin.aws
ca-central-1.prodish.jwk.signin.aws
us-east-2.prodish.jwk.signin.aws
ap-east-1.alpha.dev.signin.aws
us-east-1.alpha.dev.signin.aws
eu-south-2.jwk.signin.aws
af-south-1.signin.aws
eu-north-1.jwk.signin.aws
eu-north-1.jwk.signin.aws
ap-northeast-2.prodish.signin.aws
ap-northeast-2.prodish.jwk.signin.aws
eu-north-1.jwk.signin.aws
ca-west-1.jwk.signin.aws
ap-south-2.jwk.signin.aws
eu-west-2.jwk.signin.aws
sa-east-1.jwk.signin.aws
eu-west-3.signin.aws
sa-east-1.signin.aws
credentials.beta.signin.aws
ap-northeast-2.signin.aws
eu-central-1.signin.aws
ap-south-2.prodish.jwk.signin.aws
us-west-2.alpha.dev.signin.aws
eu-west-3.signin.aws
ap-southeast-2.signin.aws
eu-west-1.prodish.jwk.signin.aws
eu-west-1.jwk.signin.aws
eu-south-2.prodish.signin.aws
ap-southeast-3.prodish.jwk.signin.aws
af-south-1.signin.aws
ca-central-1.signin.aws
us-east-2.prodish.signin.aws
us-west-1.prodish.jwk.signin.aws
eu-south-1.signin.aws
me-central-1.prodish.signin.aws
ap-southeast-3.prodish.signin.aws
ap-northeast-1.signin.aws
credentials.beta.signin.aws
ap-south-2.prodish.signin.aws
ca-central-1.prodish.signin.aws
us-east-1.signin.aws
eu-central-2.signin.aws
us-east-1.jwk.signin.aws
us-west-1.prodish.signin.aws
ap-southeast-1.jwk.signin.aws
eu-south-1.prodish.jwk.signin.aws
ap-south-2.prodish.signin.aws
eu-west-1.prodish.jwk.signin.aws
ca-central-1.prodish.jwk.signin.aws
ap-east-1.prodish.jwk.signin.aws
ap-southeast-2.jwk.signin.aws
ap-southeast-2.prodish.jwk.signin.aws
eu-central-2.signin.aws
ap-northeast-1.prodish.signin.aws
ap-northeast-1.jwk.signin.aws
ap-east-1.jwk.signin.aws
ca-central-1.signin.aws
ap-southeast-2.prodish.signin.aws
af-south-1.jwk.signin.aws
eu-south-1.prodish.jwk.signin.aws
eu-south-2.prodish.jwk.signin.aws
us-west-2.alpha.dev.signin.aws
eu-central-2.prodish.signin.aws
us-west-1.prodish.signin.aws
ap-northeast-1.prodish.jwk.signin.aws
eu-central-2.signin.aws
ap-south-2.jwk.signin.aws
us-east-1.alpha.dev.signin.aws
ca-central-1.signin.aws
us-west-2.jwk.signin.aws
us-west-2.signin.aws
eu-west-3.signin.aws
ap-southeast-2.prodish.jwk.signin.aws
ap-southeast-3.prodish.jwk.signin.aws
me-south-1.jwk.signin.aws
ap-southeast-3.signin.aws
eu-west-2.jwk.signin.aws
ap-southeast-1.jwk.signin.aws
us-east-1.prodish.jwk.signin.aws
eu-west-3.prodish.jwk.signin.aws
eu-west-1.signin.aws
me-south-1.prodish.jwk.signin.aws
us-west-1.signin.aws
ap-northeast-3.prodish.signin.aws
us-west-2.jwk.signin.aws
us-east-2.signin.aws
eu-north-1.prodish.signin.aws
us-east-2.jwk.signin.aws
ap-northeast-3.prodish.jwk.signin.aws
ap-south-1.signin.aws
us-east-2.prodish.signin.aws
ca-central-1.jwk.signin.aws
eu-west-3.prodish.signin.aws
us-east-1.signin.aws
me-central-1.prodish.signin.aws
eu-south-2.prodish.signin.aws

Certificate

The complete raw certificate details for eu-west-3.signin.aws in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Zrk40qFzp32cjA2voEu
Y63v2yLLjKl9Lyrfa3sK7wkcrknKTF3wrJTDBZA1ASP8kInAUm18ADSkyefPhdqd
eWHXwIlFqFwyh9jgVyEM7liwaszJI/NbdsZQtgsElGUY+tZCgjglbjgszU8l/Tek
QCwZO1sgcw6ZXsQnS7i65P5WAdUMVLzb1uOk6z38TU4uTfTv3tH0UTFsRMpfqt/3
lq/MdHsmscRo0ACmBFd+ii/JElS4pADYD7OtRCkZ02e+tS3/zg7LxtJEFIrOkfko
wSEw3m5qDR5YozFC+rQKDbUEwrEX8nRB4TYpHNWinyJq8Duh0ut2vx5TaZNNQ/mm
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16842975366210385900794892100583808454
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eu-west-3.signin.aws'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26460186862020250256234326134983927011377452029510494581936984329215192162716171877058475473892933037485331042063143706496974126332370108513111134737195325816004781096756155532267002204402857710469860747148255526991777972487413281451239793029831752442001650368956454340736309597014580634037999491961806609606455644969291236371579958290741570462551661215054466619965769598804862257991708819084769436446557682727329980071253211284234963335495216778322879790818057496112813558037802048183948236647787005384292902841779575698463485770935267868038804425129001613560721421241403221552817068568009403528706549521686046811727
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c6bab734adb978fcb3281fbb2d4c60c0594eda8f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu-west-3.signin.aws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eu-west-3.signin.aws'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.aws.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.signin.aws.amazon.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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