DV SSL/TLS Certificate for *.s3.cn-northwest-1.amazonaws.com.cn

Certificate is witin its validity period

Issued by Amazon (Amazon RSA 2048 M01)

About the *.s3.cn-northwest-1.amazonaws.com.cn DV SSL/TLS Certificate

This certificate with serial number 06:98:6f:53:22:c9:68:41:9a:34:16:32:7f:de:04:ed for *.s3.cn-northwest-1.amazonaws.com.cn was issued on by Amazon.

With 12 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for *.s3.cn-northwest-1.amazonaws.com.cn provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Amazon

Organization: Amazon
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 06:98:6f:53:22:c9:68:41:9a:34:16:32:7f:de:04:ed
Serial Number (int): 8766855031376259816248942834525013229
Serial Number Length: 123 bits, 16 octets

Subject Key Identifier: 47:15:d9:a2:b7:71:9e:a7:4f:85:c6:16:c5:79:e9:d6:1e:11:1d:de
Authority Key Identifier: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (SHA-1): 27:65:68:3e:25:13:1c:a8:25:80:7f:a9:03:03:e4:f1:1b:69:1a:92
Fingerprint (SHA-256): 05:9c:d2:08:54:6a:29:6a:06:db:10:49:e4:db:1e:fa:87:90:6d:05:17:90:ff:c6:ae:ab:8f:e2:ab:9c:7d:79

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation Information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate *.s3.cn-northwest-1.amazonaws.com.cn
12
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.s3.cn-northwest-1.amazonaws.com.cn

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

*.s3.cn-northwest-1.amazonaws.com.cn
s3.cn-northwest-1.amazonaws.com.cn
*.s3-control.cn-northwest-1.amazonaws.com.cn
s3-control.cn-northwest-1.amazonaws.com.cn
*.s3-accesspoint.cn-northwest-1.amazonaws.com.cn
*.s3-accesspoint.dualstack.cn-northwest-1.amazonaws.com.cn
*.s3.dualstack.cn-northwest-1.amazonaws.com.cn
s3.dualstack.cn-northwest-1.amazonaws.com.cn
*.s3-control.dualstack.cn-northwest-1.amazonaws.com.cn
s3-control.dualstack.cn-northwest-1.amazonaws.com.cn
*.s3-deprecated.cn-northwest-1.amazonaws.com.cn
s3-deprecated.cn-northwest-1.amazonaws.com.cn

X.509 Certificate

The complete raw X.509 certificate details for *.s3.cn-northwest-1.amazonaws.com.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivZzjr/IsyhI0mdBq3rF
rP6mXTCBFiaUdK8reEiqU0GXgBRctQHVxHergS74Ex1pwsCH2iHUV7+rnSmjgvE9
Jo2LNssRphx3mD7FDfTR7Z3lk1RDK9PQBTUaJu6ajG3hYQLcU175avI4T8d6FhX+
IYytzCjcFJ0DVd3mw3zyAi45NEpNnxAewGEHnMbzeAQ9HnrGP8OrR2DeUaWJCLxt
bcv5BUfsS0hb8ltsFH+yZER0LHskXz2nLAHY6NgkG6cOvkMPeN/OdPCNASKOhcfw
9TYdwUbY9bAUzt8tKXmJ1kKWrtkcvod+fIlpteP0FuMuzy7DPFPcV5yBZ+lqmjV7
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8766855031376259816248942834525013229
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-10-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.s3.cn-northwest-1.amazonaws.com.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17542415798616353460925134673474311189137834922845263489542888531882895359655985401670329699423230067159455848093578007663312903617137498179262632654015220021941823877505746357486792037974427231952790218837293311054236706245516738895387158260069731313097979707843425766108930596809891965828345631056365322653194044388695310407190698693897103578259336039875844660217913615357982377298190209786816496935023205618432634182572522635108069368571641769284731292269175998382389055382757350320451213243702747865618382263287668020030147896947859020072312680054298980413241697621806320735722934436098669869404515388216506153777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4715d9a2b7719ea74f85c616c579e9d61e111dde
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (578 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3.cn-northwest-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3.cn-northwest-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-control.cn-northwest-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3-control.cn-northwest-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-accesspoint.cn-northwest-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-accesspoint.dualstack.cn-northwest-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3.dualstack.cn-northwest-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3.dualstack.cn-northwest-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-control.dualstack.cn-northwest-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3-control.dualstack.cn-northwest-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-deprecated.cn-northwest-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3-deprecated.cn-northwest-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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