storefront-api.beta.sokos.fi

Issued by Amazon

About this certificate

This digital certificate with serial number 0f:cd:90:25:3b:5a:1a:5a:bf:72:d0:ad:7b:bc:69:d5 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=storefront-api.beta.sokos.fi

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:cd:90:25:3b:5a:1a:5a:bf:72:d0:ad:7b:bc:69:d5
Serial Number (int): 21005764409566859984482911994240592341
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 5b:66:fd:26:a6:29:95:bd:08:18:37:c6:d9:95:86:1f:cc:13:18:1f
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 5e:4b:8c:33:d7:ef:60:f3:e4:64:b2:45:f3:95:24:c6:61:92:81:f1
Fingerprint (sha256): 38:5a:d3:74:4f:21:fa:fe:bd:8c:b6:1b:d8:28:1b:d8:a7:fb:5f:5a:c5:65:f6:39:af:8b:c5:87:d9:97:73:ee

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate storefront-api.beta.sokos.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for storefront-api.beta.sokos.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

storefront-api.beta.sokos.fi

Other certificates including the domain name sokos.fi

(limited to 100 certificates)
varnish.test.sokos.fi
www.sokos.fi
backend.beta.sokos.fi
www.qa.sokos.fi
www.sokos.fi
varnish.test.sokos.fi
*.test.sokos.fi
*.test.sokos.fi
go.sokos.fi
varnish.qa.sokos.fi
test.sokos.fi
storefront-api.beta.sokos.fi
test.sokos.fi
api-storefront.beta.sokos.fi
backend.beta.sokos.fi
varnish.test.sokos.fi
varnish-perf.test.sokos.fi
www.sokos.fi
varnish-perf.test.sokos.fi
sokos.fi
*.test.sokos.fi
palautus.prisma.fi
*.sokos.fi
storefront-api.beta.sokos.fi
*.sokos.fi
www.sokos.fi
test.sokos.fi
test.sokos.fi
www.sokos.fi
api-reo.beta.sokos.fi
go.sokos.fi
sokos.fi
*.test.sokos.fi
inspiroidu.sokos.fi
www.sokos.fi
sokos.fi
palautus.prisma.fi
varnish.sokos.fi
varnish-perf.test.sokos.fi
test.sokos.fi
www.sokos.fi
*.qa.sokos.fi
www.test.sokos.fi
*.test.sokos.fi
*.test.sokos.fi
sokos.fi
beta.sokos.fi
beta.sokos.fi
www.sokos.fi
qa.sokos.fi
backend.beta.sokos.fi
varnish.test.sokos.fi
*.qa.sokos.fi
reo-api.beta.sokos.fi
varnish.sokos.fi
*.sokos.fi
go.sokos.fi
varnish.qa.sokos.fi
sokos.fi
go.sokos.fi
varnish.test.sokos.fi
www.sokos.fi
www.sokos.fi
varnish.qa.sokos.fi
palautus.prisma.fi
www.test.sokos.fi
test.sokos.fi
www.sokos.fi
varnish-perf.test.sokos.fi
varnish.test.sokos.fi
*.sokos.fi
www.sokos.fi
go.sokos.fi
varnish-perf.test.sokos.fi
palautus.prisma.fi
varnish.qa.sokos.fi
origin.backend.beta.sokos.fi
go.sokos.fi
www.sokos.fi
qa.sokos.fi
sokos.fi
open-lauri-alternate.test.sokos.fi
*.test.sokos.fi
qa.sokos.fi
*.test.sokos.fi
palautus.prisma.fi

Certificate

The complete raw certificate details for storefront-api.beta.sokos.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEgzCCA2ugAwIBAgIQD82QJTtaGlq/ctCte7xp1TANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjA5MDgwMDAwMDBaFw0yMzEwMDgy
MzU5NTlaMCcxJTAjBgNVBAMTHHN0b3JlZnJvbnQtYXBpLmJldGEuc29rb3MuZmkw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+E6LdTNcsWpa9gZR1VRtw
xLAtLtRM0kAb4DwIKfUwFroAvT1ZRn7eW0DDyPu3+JI7nQm2c3AhLZP9IpivUKBb
jwuWgey48NGzZAPC0uksEQ4DPzBlEd/rRkxKrsXgvU1yNaHrLnObxtrvdkR/aw5y
Cm6ixFC8u0RLofIH/8maKM3GQHBmtNX8GN6xJik0FCzQfbOmV9kYclf0Xw/zSbt1
iSkMHVb9HvleXv41UcAXkK+auaSx5LJstSpkFfLNME3367L92fDmTDDmW4sp6M4y
KrSSiXAQjc9hoJTUKMqzkpgiO60vfq2JS60hgyCPzVROY6CfzQpbTjl8S8h7TQsV
AgMBAAGjggGKMIIBhjAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAd
BgNVHQ4EFgQUW2b9JqYplb0IGDfG2ZWGH8wTGB8wJwYDVR0RBCAwHoIcc3RvcmVm
cm9udC1hcGkuYmV0YS5zb2tvcy5maTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMD0GA1UdHwQ2MDQwMqAwoC6GLGh0dHA6Ly9j
cmwuc2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLTEuY3JsMBMGA1UdIAQMMAow
CAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29j
c3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0
LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADAT
BgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAif7oQeSg3hlu
+eF8Jc9IJbHT00r+m401BMt407S4ws0cwSgrLsXkivEkuwCK1e7BRElfANCuvf6w
TFjpLlGDa+/8SLS0eko0cfU1WE6Y+2F9gwTZ9aeW4OL8WQCUcfQuiQ3IFmcw3J0f
zbWIANaMsyQCoSkRZDE3Vu2hCJzwiPth6WS9aK4Zh3HVCe6gpNW86uqjbV6W2DBp
XyqfY30kK+F9AkqC95eADsSiQVu1rmnKzf9p6Tidhp0KkSeb0PusXQOOLY7tWA9I
7oM8Fi8ZKFWDZSEbph1WE/2vpVvRUnZhogDzDuaBLrq7KR6XcFgx0pYoUF2h6fV9
HZ4Jrhnsyw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhOi3UzXLFqWvYGUdVUb
cMSwLS7UTNJAG+A8CCn1MBa6AL09WUZ+3ltAw8j7t/iSO50JtnNwIS2T/SKYr1Cg
W48LloHsuPDRs2QDwtLpLBEOAz8wZRHf60ZMSq7F4L1NcjWh6y5zm8ba73ZEf2sO
cgpuosRQvLtES6HyB//JmijNxkBwZrTV/BjesSYpNBQs0H2zplfZGHJX9F8P80m7
dYkpDB1W/R75Xl7+NVHAF5CvmrmkseSybLUqZBXyzTBN9+uy/dnw5kww5luLKejO
Miq0kolwEI3PYaCU1CjKs5KYIjutL36tiUutIYMgj81UTmOgn80KW045fEvIe00L
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21005764409566859984482911994240592341
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'storefront-api.beta.sokos.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23994960909370454113479533687450740750593399252003591135780250092194579608573134114660877443085929431267399750794239808510866028705490231918850635480526429629472813531476575259470635475583937642069626044888929519868101746856609135797011072314937424768663595894924279950952654827631821613437672113601269537813474530342835846568585078759399206275236362800634657947407607411181397903848644998697852781593444993283780810686120730670938117544117257444731706631971637231682541566173752696601651732265213632275316860158502381798849422931123615423845338636625341427971991401175010799721858221437275325854844933097983495179029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5b66fd26a62995bd081837c6d995861fcc13181f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storefront-api.beta.sokos.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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