holodeck-api.service.prod.spsapps.net

Issued by Amazon

About this certificate

This digital certificate with serial number 04:75:7d:38:98:ab:33:55:8a:b0:b8:cb:78:68:a6:a7 was issued on by Amazon.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=holodeck-api.service.prod.spsapps.net

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:75:7d:38:98:ab:33:55:8a:b0:b8:cb:78:68:a6:a7
Serial Number (int): 5926950500814485808415310365944489639
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: f2:9f:9d:be:62:b3:12:ea:21:1f:c0:8b:7a:e5:2d:e2:37:f1:97:78
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 04:6d:a6:b3:9e:46:f2:3d:62:92:ce:39:cc:1a:55:3f:44:47:3b:69
Fingerprint (sha256): 52:a2:55:8d:f8:b2:df:97:ee:ad:a3:e2:31:bb:f1:ef:93:d5:1a:b7:a0:bc:0b:a0:c7:65:a9:1b:fe:32:5c:ad

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate holodeck-api.service.prod.spsapps.net

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for holodeck-api.service.prod.spsapps.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

holodeck-api.service.prod.spsapps.net
jira-service.prod.spsc.io
label.spsc.io
jira-service.service.prod.spsapps.net
id.spsc.io
identity-service.service.prod.spsapps.net
intercom-salesforce-integration.service.prod.spsapps.net
intercom-salesforce-integration.spsapps.net
integration-router-ecs.prod.spsc.io
integration-router-api-ecs.prod.spsc.io

Other certificates including the domain name spsapps.net

(limited to 100 certificates)
sps-tech-registry-api.internal.sharedservicesdev.spsapps.net
api.dc4-proxy-pull-service.preprod.spsapps.net
api.pa-supplier-configuration.spsapps.net
sps-tech-registry-api.internal.sharedservices.spsapps.net
*.analytics-portal.test.spsapps.net
*.dev.spsapps.net
nonprod-us-east-2-jarocki-4r5t.integration.api.sps-internal.com
*.1screen.spsapps.net
api.dc4-proxy-pull-service.spsapps.net
*.mna.spsapps.net
*.swp.dev.spsapps.net
*.analytics.stage.spsapps.net
*.swp.spsapps.net
*.messaging-service.stage.spsapps.net
api.dc4-proxy-pull-service.test.spsapps.net
*.data-engine-transformation.stage.spsapps.net
transaction-tracker-api.service.prod.spsapps.net
catalog-gateway.service.test.spsapps.net
*.stage.spsapps.net
cdk-hackathon-api.service.test.spsapps.net
api.dc4-proxy-pull-service.preprod.spsapps.net
*.analytics.dev.spsapps.net
*.analytics.spsapps.net
*.1screen.spsapps.net
api.data-engine-command-center.spsapps.net
*.paca-interaction.preprod.spsapps.net
nonprod-us-east-2-jarocki-4r5t.integration.api.spscommerce.com
weekend.internal.sharedservices.spsapps.net
bus.fulfillment.spsapps.net
*.service.preprod.spsapps.net
1screen-prospace-converter.service.prod.spsapps.net
api.template.test.spsapps.net
*.api.dev.spsapps.net
parcel-service-heartbeat.service.preprod.spsapps.net
*.1screen.dev.spsapps.net
api.dc4-proxy-receiver.dev.spsapps.net
api.dc4-proxy-pull-service.preprod.spsapps.net
fulfillment-edi-automation.test.spsapps.net
as2-admin-api.service.prod.spsapps.net
*.stage.spsapps.net
1screen-prospace-converter.service.prod.spsapps.net
fi-top.service.prod.spsapps.net
*.analytics-portal.preprod.spsapps.net
api.messaging-service.spsapps.net
*.stage.spsapps.net
opal.prod.spsc.io
bus.fulfillment.spsapps.net
bus.fulfillment.spsapps.net
fi-top.service.test.spsapps.net
fi-top.service.prod.spsapps.net
nexus-graphql.service.test.spsapps.net
fulfillment-edi-automation.test.spsapps.net
*.mna.test.spsapps.net
api.messaging-service.spsapps.net
*.template.test.spsapps.net
*.devcenter.spsapps.net
*.spsapps.net
analytics-portal-api.service.preprod.spsapps.net
svram.spsapps.net
api.dc4-proxy-receiver.spsapps.net
transaction-tracker-api.service.test.spsapps.net
*.swp.dev.spsapps.net
*.paca-interaction.preprod.spsapps.net
*.swp.spsapps.net
*.messaging-service.spsapps.net
*.mna.stage.spsapps.net
api.pa-supplier-configuration.spsapps.net
setup-migrator-2-api.service.test.spsapps.net
analytics-snowflake-api.service.test.spsapps.net
*.swp.spsapps.net
api.profile-service.prod.spsc.io
*.messaging-service.stage.spsapps.net
opal.prod.spsc.io
*.devcenter.spsapps.net
auth.test.spsapps.net
api.messaging-service.spsapps.net
analytics-snowflake-api.service.prod.spsapps.net
1screen-prospace-converter.service.prod.spsapps.net
bus.fulfillment.spsapps.net
api.data-engine-command-center.test.spsapps.net
transaction-tracker-api.service.test.spsapps.net
analytics-snowflake-api.service.test.spsapps.net
api.fulfillment.spsc.io
*.paca-interaction.dev.spsapps.net
api.template.test.spsapps.net
*.data-engine-transformation.test.spsapps.net
acknowledgement-service-api.service.prod.spsapps.net
parcel-timeout-service.service.test.spsapps.net
api.pa-supplier-configuration.spsapps.net
*.analytics.preprod.spsapps.net
holodeck-api.service.prod.spsapps.net
api.mna.test.spsapps.net
analytics-portal-api.service.preprod.spsapps.net
api.dc4-proxy-receiver.preprod.spsapps.net
api.data-engine-ecs-adapter.stage.spsapps.net
api.data-engine-file-collection.spsapps.net
*.paca-interaction.dev.spsapps.net
*.messaging-service.stage.spsapps.net
*.api.spsapps.net
*.analytics-portal.preprod.spsapps.net

Certificate

The complete raw certificate details for holodeck-api.service.prod.spsapps.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1PXbFKYT05wOtx9jBCP
KvDsqM3/N1rKCHb2y9rUslKGMTrijld1myXJVNeFDg8A7IuRI1wv1AKj15p0fx51
Cg31Xhni3GihB15qi970CLour0y8hCL6saecjfb8wgF4gQ2MQI5t0Wu10vP1oixh
dZONmhiJKpvnBd0H3Os8RIXpcDybRCtEXsslI8e+9x5nIOCU1aqaku7R74z7QXRG
QHCNd8K99wJyj089jzCCe3ZJxSeQf73IEbrO/KU0OL2yQEqkMehn+jd0kEjp9RxK
oKsGu1zY+tnD79p2DYmZKrl8sCaeO3E54YU1I/r6ifRAeJ6HX1u+sEhQ9t3ypWYX
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5926950500814485808415310365944489639
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'holodeck-api.service.prod.spsapps.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25162766471133993508253325284303592434188940248457887695957986385429714480608001753501733985076161791994136274982772519551751747632777081744314869651018645024009079411493213221849536077075923176584388942675639255749628645828398263010172287143738865761852750257378711839325987058010285871985680715421814100221358928245666373190578677064908526361690712780842001082504314758105958816097807934304010199303600598379667335267743984264211014667784558116896503638607877562830816882219246817063910487582538779840628015592302413437335143229633697471316966075908308782852352110442352051199694141574434706196732925036229621585709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f29f9dbe62b312ea211fc08b7ae52de237f19778
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holodeck-api.service.prod.spsapps.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira-service.prod.spsc.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'label.spsc.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jira-service.service.prod.spsapps.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.spsc.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identity-service.service.prod.spsapps.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intercom-salesforce-integration.service.prod.spsapps.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intercom-salesforce-integration.spsapps.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration-router-ecs.prod.spsc.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration-router-api-ecs.prod.spsc.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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