signup.amazonaws.cn

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 06:7d:44:73:f4:1d:0c:65:6a:ae:00:0f:bf:dd:54:b6 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=signup.amazonaws.cn

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:7d:44:73:f4:1d:0c:65:6a:ae:00:0f:bf:dd:54:b6
Serial Number (int): 8625793472667545929359854650408129718
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 80:c4:c8:bf:ed:dd:24:61:31:2e:23:49:96:c0:19:37:40:7f:4b:07
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 22:ed:fc:55:c5:2e:16:ed:63:16:d6:27:d6:ac:b4:62:42:0a:5c:36
Fingerprint (sha256): 2f:2a:96:02:9a:cd:93:81:bb:e1:5b:52:9b:f0:fb:25:91:8d:1c:cb:58:26:a9:5c:ef:ba:07:6f:02:49:d3:e0

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate signup.amazonaws.cn

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for signup.amazonaws.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

signup.amazonaws.cn
signup-onebox.amazonaws.cn

Other certificates including the domain name amazonaws.cn

(limited to 100 certificates)
cn-northwest-1.console.amazonaws.cn
spaceneedle-beta-zhy.amazonaws.cn
s3-console-cn-north-1.console.amazonaws.cn
operatornet-preprod.cn-northwest-1.amazonaws.cn
phd.amazonaws.cn
docs.amazonaws.cn
phd.amazonaws.cn
docs.amazonaws.cn
*.signin.amazonaws.cn
aws-console-nav-integ.cn-northwest-1.amazonaws.cn
*.signin.amazonaws.cn
signup-onebox.amazonaws.cn
aws-console-nav-preprod.cn-northwest-1.amazonaws.cn
gamma.api.support.amazonaws.cn
support.amazonaws.cn
signup-gamma.amazonaws.cn
cn-north-1.certificate.amazonaws.cn
contessa-awsmarketplace.amazonaws.cn
*.signin.amazonaws.cn
api.support.amazonaws.cn
awstraining-idm-cn-prod.cn-north-1.amazonaws.cn
cn-northwest-1.console.amazonaws.cn
sg-console-cn-north-1.console.amazonaws.cn
cn-northwest-1.console.amazonaws.cn
cn-north-1.console.amazonaws.cn
support.amazonaws.cn
policysim.amazonaws.cn
signup.amazonaws.cn
callback.es-staging.cn-north-1.amazonaws.cn
signup.amazonaws.cn
support.amazonaws.cn
api.support.amazonaws.cn
docs.amazonaws.cn
*.signin.amazonaws.cn
phd.amazonaws.cn
glacier-console-cn-north-1.console.amazonaws.cn
status.amazonaws.cn
acerendering-awsmarketplace.amazonaws.cn
support.amazonaws.cn
koipond.cn-north-1.amazonaws.cn
*.signin.amazonaws.cn
cn-northwest-1.gamma.signer.console-api.aws-dev.amazonaws.cn
cn-northwest-1-onebox.quicksight.amazonaws.cn
cn-north-1.console.amazonaws.cn
console.amazonaws.cn
support.amazonaws.cn
status.amazonaws.cn
live.zhy.prod.content-server.marketing.aws.a2z.org.cn
awsmarketplace-gamma.amazonaws.cn
operatornet-preprod.cn-north-1.amazonaws.cn
live.bjs.prod.content-server.marketing.aws.a2z.org.cn
*.signin.amazonaws.cn
cn-north-1.console.amazonaws.cn
docs.amazonaws.cn
scamp-prod.cn-north-1.amazonaws.com.cn
cn-northwest-1.console.amazonaws.cn
cn-north-1.quicksight.amazonaws.cn
0.cn-northwest-1.prod.signer.console-api.aws-dev.amazonaws.cn
api.support.amazonaws.cn
prod.www.docs.aws.a2z.org.cn
operatornet-gamma.cn-north-1.amazonaws.cn
cloudfront-console-gamma.amazonaws.cn
operatornet-preprod.cn-north-1.amazonaws.cn
cn-north-1.console.amazonaws.cn
policysim.amazonaws.cn
cn-north-1.console.amazonaws.cn
cn-north-1.prod.signer.console-api.aws-dev.amazonaws.cn
signup.amazonaws.cn
awsconsole.cn-north-1.amazonaws.com.cn
policysim.amazonaws.cn
signup.amazonaws.cn
cn-northwest-1.prod.signer.console-api.aws-dev.amazonaws.cn
signup.amazonaws.cn
koipond.cn-northwest-1.amazonaws.cn
cn-northwest-1.console.amazonaws.cn
status.amazonaws.cn
prod.www.docs.aws.a2z.org.cn
phd-console.cn-north-1.amazonaws.cn
awsmarketplace-gamma.amazonaws.cn
operatornet.cn-north-1.amazonaws.cn
awsmarketplace.amazonaws.cn
console.amazonaws.cn
www.amazonaws.cn
contessa-awsmarketplace.amazonaws.cn
gamma.support.amazonaws.cn
reactions.marketplace.cn-northwest-1.amazonaws.cn
docs.amazonaws.cn
toucan.amazonaws.cn
signup.amazonaws.cn
signup-gamma.amazonaws.cn
cloudfront-console.amazonaws.cn
sdk-for-sapabap.aws.amazon.com
docs.amazonaws.cn
operatornet-preprod.cn-north-1.amazonaws.cn
operatornet.cn-northwest-1.amazonaws.cn
squidhat.amazonaws.cn
photon-portal-gamma.cn-northwest-1.aws.amazon.com.cn
policysim.amazonaws.cn
operatornet-preprod.cn-northwest-1.amazonaws.cn
operatornet-preprod.cn-northwest-1.amazonaws.cn

Certificate

The complete raw certificate details for signup.amazonaws.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPACRhX0W5+GGvpOYW9Y
hTvpHxXoi/Ic1EQnRJSm0qPLABZkWGhL4iNGzOUoJI6EbEzNJmWfUALtreREso9v
fx/CGPQP3TGJ7yV4UqBOd8mZ/LtAix04j138l/KHp7bQeQ0kviOzLMBukcMh9ONh
/dhX7ZKrDRWmVYkCHXI7dUd3y3l5jUCh3DNtMygEDjlp8VEidieINtl7+tufo07Z
4srkNSyHX1essFQlMX7NU6WegrHcU+5zkFLm+cNrHSYMvUCgW5psGqi30Dta1QmC
N3PZmE2uw8G1ktqhjYX1TvA3rtesSRFc7/nepR/r6RWp0HrfvfOZ9LYk8gK/qZaz
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8625793472667545929359854650408129718
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'signup.amazonaws.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19811528365450702462647671747057750732547440785033354712607425340677532587900698557828607453374485720453837333431705024506832048517265477378032556191847293729136509432127465875752827177779721479055536535879445781823128401238460850791972837606886178975600141481482972494872124994688752040258608972181109478439280599570492427456745982724941586127899750472492973594610632098796408350934360331352592003364318738382440287149591611619279139205147970937131171016125145437669103657169961756110897758650698343638189094647975885751401999666108570395066729991462714738957993777550591198131693882429749160514037508485605527827277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							80c4c8bfeddd2461312e234996c01937407f4b07
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signup.amazonaws.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signup-onebox.amazonaws.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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