s3.cn-north-1.amazonaws.com.cn

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0a:88:e3:8b:fb:5b:fb:0b:c4:a3:c8:86:ea:87:f0:0b was issued on by Amazon.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=s3.cn-north-1.amazonaws.com.cn

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:88:e3:8b:fb:5b:fb:0b:c4:a3:c8:86:ea:87:f0:0b
Serial Number (int): 14003047528096448944260697563224076299
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 97:5c:64:98:0d:48:14:bb:fa:5e:24:de:d8:8a:97:11:ac:9a:1a:0d
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 8a:03:56:e5:2d:98:eb:c0:eb:06:83:ce:d5:be:26:aa:25:f5:a5:97
Fingerprint (sha256): 48:07:76:df:d6:85:c8:cb:cb:d9:13:be:36:ec:a1:c0:37:29:be:c8:e4:6a:07:15:53:4e:1f:74:4d:f7:33:8b

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate s3.cn-north-1.amazonaws.com.cn

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for s3.cn-north-1.amazonaws.com.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

s3.cn-north-1.amazonaws.com.cn
bucket.vpce-037bd0b72d2ef539d-frvau6r4.s3.cn-north-1.vpce.amazonaws.com.cn
*.control.vpce-037bd0b72d2ef539d-frvau6r4-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn
*.s3.cn-north-1.amazonaws.com.cn
*.accesspoint.vpce-037bd0b72d2ef539d-frvau6r4-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn
bucket.vpce-037bd0b72d2ef539d-frvau6r4-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn
*.s3-control.cn-north-1.amazonaws.com.cn
*.accesspoint.vpce-037bd0b72d2ef539d-frvau6r4.s3.cn-north-1.vpce.amazonaws.com.cn
*.bucket.vpce-037bd0b72d2ef539d-frvau6r4-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn
*.accesspoint.vpce-037bd0b72d2ef539d-frvau6r4-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn
bucket.vpce-037bd0b72d2ef539d-frvau6r4-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn
*.bucket.vpce-037bd0b72d2ef539d-frvau6r4-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn
*.s3-accesspoint.cn-north-1.amazonaws.com.cn
*.control.vpce-037bd0b72d2ef539d-frvau6r4-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn
*.control.vpce-037bd0b72d2ef539d-frvau6r4-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn
*.bucket.vpce-037bd0b72d2ef539d-frvau6r4-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn
*.bucket.vpce-037bd0b72d2ef539d-frvau6r4.s3.cn-north-1.vpce.amazonaws.com.cn
*.accesspoint.vpce-037bd0b72d2ef539d-frvau6r4-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn
bucket.vpce-037bd0b72d2ef539d-frvau6r4-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn
*.control.vpce-037bd0b72d2ef539d-frvau6r4.s3.cn-north-1.vpce.amazonaws.com.cn

Certificate

The complete raw certificate details for s3.cn-north-1.amazonaws.com.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0v7cGhAqyRT7GYalGiRh
SBYptEHayjZ6MotYwEti55F0KZlyYqmkc6y69e9uqZYPgWC7db5Sqau/Z7CEaI8C
vho3omkLh9dLu5gJPCtuhQkw9e6I1pXCthFGlKVgLNSFItocoq/qotkZU6jXms/M
I0aPS4zJjaSYyNVtdSg0WRIjum292hTUjGV4FfYtHSOjzT+1H+NJq95S+7NV5hIp
olYLS2vUO5m2QYCSLZ8KR63KenHyum2ayMISB5KFvo7c5M0/t42WMLTeF7KTI22h
AA94jOGlZA5irCYGtCLSVwkEYYHfvI4v7v9NuUXrKyjk5OiO1zbQzxaMgVjUDJa8
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14003047528096448944260697563224076299
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 's3.cn-north-1.amazonaws.com.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26635720080796889688235607815756048337596761831627114730030913465355248280100882049203252063523553725975715602064026815574537302755065136339234147181047503778098988102911362156292493166148768337410905306671632614307851279666922870595781793327225098926170593908863541174879814933721949783180589889437864681541803148535709223508289250569016809481912610319314871157786961785582259117029654461011298176491058037025942419817726177726922931694735999136654298270990444601238226523540850441178161784403182449064152087677192509540886677524689191431755109467588532701965117756694364716033008459939171848438852074954141558291623
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							975c64980d4814bbfa5e24ded88a9711ac9a1a0d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1566 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-037bd0b72d2ef539d-frvau6r4.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-037bd0b72d2ef539d-frvau6r4-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-037bd0b72d2ef539d-frvau6r4-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-037bd0b72d2ef539d-frvau6r4-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-control.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-037bd0b72d2ef539d-frvau6r4.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-037bd0b72d2ef539d-frvau6r4-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-037bd0b72d2ef539d-frvau6r4-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-037bd0b72d2ef539d-frvau6r4-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-037bd0b72d2ef539d-frvau6r4-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-accesspoint.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-037bd0b72d2ef539d-frvau6r4-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-037bd0b72d2ef539d-frvau6r4-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-037bd0b72d2ef539d-frvau6r4-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-037bd0b72d2ef539d-frvau6r4.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-037bd0b72d2ef539d-frvau6r4-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-037bd0b72d2ef539d-frvau6r4-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-037bd0b72d2ef539d-frvau6r4.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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