cn-northwest-1.gamma.signer.console-api.aws-dev.amazonaws.cn

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 02:11:88:7e:71:b7:f9:40:e3:d1:6e:13:a8:e4:fb:d0 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cn-northwest-1.gamma.signer.console-api.aws-dev.amazonaws.cn

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:11:88:7e:71:b7:f9:40:e3:d1:6e:13:a8:e4:fb:d0
Serial Number (int): 2749493463813713841040174482270256080
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 02:0e:49:33:14:aa:f2:be:5a:9e:22:47:5e:ab:46:ba:76:2f:69:75
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): b3:ff:00:05:1f:f3:12:f6:99:33:0d:5c:90:48:88:c1:4a:27:10:7e
Fingerprint (sha256): 3c:79:fb:d1:2a:82:00:1f:02:d1:43:9a:cb:5d:e8:c1:da:9d:26:7f:e6:53:04:73:71:a8:ad:e1:d0:35:88:cf

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate cn-northwest-1.gamma.signer.console-api.aws-dev.amazonaws.cn

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cn-northwest-1.gamma.signer.console-api.aws-dev.amazonaws.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cn-northwest-1.gamma.signer.console-api.aws-dev.amazonaws.cn

Other certificates including the domain name amazonaws.cn

(limited to 100 certificates)
cn-northwest-1.console.amazonaws.cn
spaceneedle-beta-zhy.amazonaws.cn
s3-console-cn-north-1.console.amazonaws.cn
operatornet-preprod.cn-northwest-1.amazonaws.cn
phd.amazonaws.cn
docs.amazonaws.cn
phd.amazonaws.cn
docs.amazonaws.cn
*.signin.amazonaws.cn
aws-console-nav-integ.cn-northwest-1.amazonaws.cn
*.signin.amazonaws.cn
signup-onebox.amazonaws.cn
aws-console-nav-preprod.cn-northwest-1.amazonaws.cn
gamma.api.support.amazonaws.cn
support.amazonaws.cn
signup-gamma.amazonaws.cn
cn-north-1.certificate.amazonaws.cn
contessa-awsmarketplace.amazonaws.cn
*.signin.amazonaws.cn
api.support.amazonaws.cn
awstraining-idm-cn-prod.cn-north-1.amazonaws.cn
cn-northwest-1.console.amazonaws.cn
sg-console-cn-north-1.console.amazonaws.cn
cn-northwest-1.console.amazonaws.cn
cn-north-1.console.amazonaws.cn
support.amazonaws.cn
policysim.amazonaws.cn
signup.amazonaws.cn
callback.es-staging.cn-north-1.amazonaws.cn
signup.amazonaws.cn
support.amazonaws.cn
api.support.amazonaws.cn
docs.amazonaws.cn
*.signin.amazonaws.cn
phd.amazonaws.cn
glacier-console-cn-north-1.console.amazonaws.cn
status.amazonaws.cn
acerendering-awsmarketplace.amazonaws.cn
support.amazonaws.cn
koipond.cn-north-1.amazonaws.cn
*.signin.amazonaws.cn
cn-northwest-1.gamma.signer.console-api.aws-dev.amazonaws.cn
cn-northwest-1-onebox.quicksight.amazonaws.cn
cn-north-1.console.amazonaws.cn
console.amazonaws.cn
support.amazonaws.cn
status.amazonaws.cn
live.zhy.prod.content-server.marketing.aws.a2z.org.cn
awsmarketplace-gamma.amazonaws.cn
operatornet-preprod.cn-north-1.amazonaws.cn
live.bjs.prod.content-server.marketing.aws.a2z.org.cn
*.signin.amazonaws.cn
cn-north-1.console.amazonaws.cn
docs.amazonaws.cn
scamp-prod.cn-north-1.amazonaws.com.cn
cn-northwest-1.console.amazonaws.cn
cn-north-1.quicksight.amazonaws.cn
0.cn-northwest-1.prod.signer.console-api.aws-dev.amazonaws.cn
api.support.amazonaws.cn
prod.www.docs.aws.a2z.org.cn
operatornet-gamma.cn-north-1.amazonaws.cn
cloudfront-console-gamma.amazonaws.cn
operatornet-preprod.cn-north-1.amazonaws.cn
cn-north-1.console.amazonaws.cn
policysim.amazonaws.cn
cn-north-1.console.amazonaws.cn
cn-north-1.prod.signer.console-api.aws-dev.amazonaws.cn
signup.amazonaws.cn
awsconsole.cn-north-1.amazonaws.com.cn
policysim.amazonaws.cn
signup.amazonaws.cn
cn-northwest-1.prod.signer.console-api.aws-dev.amazonaws.cn
signup.amazonaws.cn
koipond.cn-northwest-1.amazonaws.cn
cn-northwest-1.console.amazonaws.cn
status.amazonaws.cn
prod.www.docs.aws.a2z.org.cn
phd-console.cn-north-1.amazonaws.cn
awsmarketplace-gamma.amazonaws.cn
operatornet.cn-north-1.amazonaws.cn
awsmarketplace.amazonaws.cn
console.amazonaws.cn
www.amazonaws.cn
contessa-awsmarketplace.amazonaws.cn
gamma.support.amazonaws.cn
reactions.marketplace.cn-northwest-1.amazonaws.cn
docs.amazonaws.cn
toucan.amazonaws.cn
signup.amazonaws.cn
signup-gamma.amazonaws.cn
cloudfront-console.amazonaws.cn
sdk-for-sapabap.aws.amazon.com
docs.amazonaws.cn
operatornet-preprod.cn-north-1.amazonaws.cn
operatornet.cn-northwest-1.amazonaws.cn
squidhat.amazonaws.cn
photon-portal-gamma.cn-northwest-1.aws.amazon.com.cn
policysim.amazonaws.cn
operatornet-preprod.cn-northwest-1.amazonaws.cn
operatornet-preprod.cn-northwest-1.amazonaws.cn

Certificate

The complete raw certificate details for cn-northwest-1.gamma.signer.console-api.aws-dev.amazonaws.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokrvfK6c2nfmTjU92lB/
9Es+L8EX4V/eFfmEGBd0BiOaksVLMTFdhqcX2uvmnqhuTfF+JXhmhcY/CzDhYK44
AUKlS26t55j3B4f15DTRuOqCiyxmFCJjlt7NMD9F5e8o2L6gQyzg3wYRKioheQp5
6473uuUIOfB2es1tu7qaTnnValPRyICDy8nmbKuuvmYOQsErfUnnB8T60TMLfItk
+y6eVlZhyog4miW9t0NUQaW4Krz90e4r+TgWXO8LnJLnznlKkTLKX1a4o7Htnu04
gfLZLF/AI/3DbGHuOpmx8m+X/PcxldDndaQ/vhDjSWjQ1XsS4/nCGa7DEeLXU/3h
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2749493463813713841040174482270256080
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cn-northwest-1.gamma.signer.console-api.aws-dev.amazonaws.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20487557474923699788239327462053908531046122370468964262988660999493148547699390372621779993733566165401582543528868283605362378321547538895776517591985606769155686147343748112092738554572014510276628842553886875481489929943422605273639054568317417403897070459630260033410194306291865308825019425092106916029960219176318801812580960153660922162320122990354105083568696926539929607598186827022591378445622027521902456105437351070224833977842829333002434364647964151003792692959200305377668645121694790885580456441502543330263547048279495018493098979829077930666172660467405550394555784750536669433757955301679025742181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							020e493314aaf2be5a9e22475eab46ba762f6975
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn-northwest-1.gamma.signer.console-api.aws-dev.amazonaws.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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