DV SSL/TLS Certificate for *.s3.cn-north-1.amazonaws.com.cn

Certificate is witin its validity period

Issued by Amazon (Amazon RSA 2048 M01)

About the *.s3.cn-north-1.amazonaws.com.cn DV SSL/TLS Certificate

This certificate with serial number 05:d0:ff:17:2b:7e:8d:29:7a:0b:f6:fb:28:5f:f0:d8 for *.s3.cn-north-1.amazonaws.com.cn was issued on by Amazon.

With 12 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for *.s3.cn-north-1.amazonaws.com.cn provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Amazon

Organization: Amazon
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 05:d0:ff:17:2b:7e:8d:29:7a:0b:f6:fb:28:5f:f0:d8
Serial Number (int): 7731311575657339209665516867659231448
Serial Number Length: 123 bits, 16 octets

Subject Key Identifier: 5c:f5:3c:9a:f0:0c:fc:8c:36:d3:ac:9e:f4:08:c9:c2:b1:b1:3a:7f
Authority Key Identifier: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (SHA-1): 14:d4:59:b2:13:39:0b:15:45:68:3d:dd:35:20:7d:ae:43:dc:2c:90
Fingerprint (SHA-256): f5:86:21:2a:d3:88:a4:a8:5b:f6:67:03:b6:7d:c1:1f:74:14:5b:d9:7a:aa:b6:78:51:2b:1d:80:14:33:dc:44

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation Information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate *.s3.cn-north-1.amazonaws.com.cn
12
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for *.s3.cn-north-1.amazonaws.com.cn

Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

*.s3.cn-north-1.amazonaws.com.cn
s3.cn-north-1.amazonaws.com.cn
*.s3-control.cn-north-1.amazonaws.com.cn
s3-control.cn-north-1.amazonaws.com.cn
*.s3-accesspoint.cn-north-1.amazonaws.com.cn
*.s3-accesspoint.dualstack.cn-north-1.amazonaws.com.cn
*.s3.dualstack.cn-north-1.amazonaws.com.cn
s3.dualstack.cn-north-1.amazonaws.com.cn
*.s3-control.dualstack.cn-north-1.amazonaws.com.cn
s3-control.dualstack.cn-north-1.amazonaws.com.cn
*.s3-deprecated.cn-north-1.amazonaws.com.cn
s3-deprecated.cn-north-1.amazonaws.com.cn

X.509 Certificate

The complete raw X.509 certificate details for *.s3.cn-north-1.amazonaws.com.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVp0QEsqzd5Ukk43nBEN
gStg36JX1wvaLcuHBR/nI+4LVL6litR3f4/QMyhMkbD0o93nqzzaMZYQQG+DrhH0
8HyUD1QwNBtohkm/siJpOpgGP6ZqRB4tEbN/qjNasKRRqJZw+Myh+s/NA9bZHoGj
ZuiUTPbcO0R+F4QAmDoJdzcDr7BKSAQKh+QQCEnYFHaj1ZCP50oujfyc+ehPBMoj
LNdC4waGBX2TEIFHwJJ3tlCsj/kGHTEiqDZ0GwsZDpeWStvtnTk3PXZ9HtjxhxlR
B6/IdMqOTbeKgp82P0mu+kn7JvYlyo98CkUwb+X+7sttOkm1qW8JJDoGKyV+5nRu
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7731311575657339209665516867659231448
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-11-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.s3.cn-north-1.amazonaws.com.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25923457100167271551707733705096590351087462476710631673690058217536342477845891081822019378913596024880523308726757734203729654590817783464834922874696254973212969429434160543978609190593585012016097998344160840205744992593333557669687643323375701835848675795387235959243780084045785394920338611856376360803355166381894015203521969677330861622205495491995820825328165879973566165513755192857545816556315745400275275585438770530723958892882155556934127477377188156795532010344767064840399391264928952339600486092582951202406365591272818117777103828461581604906538129951473154178350290550928449510170476727309648031477
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5cf53c9af00cfc8c36d3ac9ef408c9c2b1b13a7f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (530 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-control.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3-control.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-accesspoint.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-accesspoint.dualstack.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3.dualstack.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3.dualstack.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-control.dualstack.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3-control.dualstack.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-deprecated.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3-deprecated.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00990f8510fa648768c8b3ec9875e7f5345017b2dfc7e065ede7ad7188048d42e6ad6c931c6a12f0a6ba736b9c4aedcdcc5fbf6860b247c32faac54f5644579309077d43a858ccf955c91b3ba53d70a44dc55cb9f9c05d1772aba36ac4eee79add314010146189f08f9e0a919dfbe240bad779d5cb6a27ba1c63e70abf28e720ac0d4b500d415b700fef47d613bcb09e82d47e3a734e3aef494762254e0ab22213dab3e62359278ff168cce55148ea6da14d5b0e0ba03eff380ccbd73f9fa0d5ef389e150892a21ecd439963505aec0eb2eca5245ec403e76d67fc0c39aa583c14e5741def5e17b6f5280af686d231a088e7ab109a45abfcc8e2dfbdd1130ae07a