cn-north-1.quicksight.amazonaws.cn

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0b:11:94:78:57:f4:f4:16:81:aa:b8:26:30:24:9d:67 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cn-north-1.quicksight.amazonaws.cn

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:11:94:78:57:f4:f4:16:81:aa:b8:26:30:24:9d:67
Serial Number (int): 14712788331451335257606814682960928103
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 62:d0:6a:ef:b1:c9:c2:71:3a:7b:ea:ce:9e:12:b0:f3:54:d7:40:8d
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 0c:1f:39:3a:ce:e7:41:da:5e:c0:c0:f2:0d:9b:e9:8a:19:2a:2b:86
Fingerprint (sha256): 56:e9:b8:36:0d:fb:59:01:bd:2f:a3:49:58:34:35:7f:77:9e:65:a9:c5:d8:89:08:32:76:c9:25:cb:c2:1a:70

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate cn-north-1.quicksight.amazonaws.cn

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cn-north-1.quicksight.amazonaws.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cn-north-1.quicksight.amazonaws.cn
quicksight.amazonaws.cn

Other certificates including the domain name amazonaws.cn

(limited to 100 certificates)
cn-northwest-1.console.amazonaws.cn
spaceneedle-beta-zhy.amazonaws.cn
s3-console-cn-north-1.console.amazonaws.cn
operatornet-preprod.cn-northwest-1.amazonaws.cn
phd.amazonaws.cn
docs.amazonaws.cn
phd.amazonaws.cn
docs.amazonaws.cn
*.signin.amazonaws.cn
aws-console-nav-integ.cn-northwest-1.amazonaws.cn
*.signin.amazonaws.cn
signup-onebox.amazonaws.cn
aws-console-nav-preprod.cn-northwest-1.amazonaws.cn
gamma.api.support.amazonaws.cn
support.amazonaws.cn
signup-gamma.amazonaws.cn
cn-north-1.certificate.amazonaws.cn
contessa-awsmarketplace.amazonaws.cn
*.signin.amazonaws.cn
api.support.amazonaws.cn
awstraining-idm-cn-prod.cn-north-1.amazonaws.cn
cn-northwest-1.console.amazonaws.cn
sg-console-cn-north-1.console.amazonaws.cn
cn-northwest-1.console.amazonaws.cn
cn-north-1.console.amazonaws.cn
support.amazonaws.cn
policysim.amazonaws.cn
signup.amazonaws.cn
callback.es-staging.cn-north-1.amazonaws.cn
signup.amazonaws.cn
support.amazonaws.cn
api.support.amazonaws.cn
docs.amazonaws.cn
*.signin.amazonaws.cn
phd.amazonaws.cn
glacier-console-cn-north-1.console.amazonaws.cn
status.amazonaws.cn
acerendering-awsmarketplace.amazonaws.cn
support.amazonaws.cn
koipond.cn-north-1.amazonaws.cn
*.signin.amazonaws.cn
cn-northwest-1.gamma.signer.console-api.aws-dev.amazonaws.cn
cn-northwest-1-onebox.quicksight.amazonaws.cn
cn-north-1.console.amazonaws.cn
console.amazonaws.cn
support.amazonaws.cn
status.amazonaws.cn
live.zhy.prod.content-server.marketing.aws.a2z.org.cn
awsmarketplace-gamma.amazonaws.cn
operatornet-preprod.cn-north-1.amazonaws.cn
live.bjs.prod.content-server.marketing.aws.a2z.org.cn
*.signin.amazonaws.cn
cn-north-1.console.amazonaws.cn
docs.amazonaws.cn
scamp-prod.cn-north-1.amazonaws.com.cn
cn-northwest-1.console.amazonaws.cn
cn-north-1.quicksight.amazonaws.cn
0.cn-northwest-1.prod.signer.console-api.aws-dev.amazonaws.cn
api.support.amazonaws.cn
prod.www.docs.aws.a2z.org.cn
operatornet-gamma.cn-north-1.amazonaws.cn
cloudfront-console-gamma.amazonaws.cn
operatornet-preprod.cn-north-1.amazonaws.cn
cn-north-1.console.amazonaws.cn
policysim.amazonaws.cn
cn-north-1.console.amazonaws.cn
cn-north-1.prod.signer.console-api.aws-dev.amazonaws.cn
signup.amazonaws.cn
awsconsole.cn-north-1.amazonaws.com.cn
policysim.amazonaws.cn
signup.amazonaws.cn
cn-northwest-1.prod.signer.console-api.aws-dev.amazonaws.cn
signup.amazonaws.cn
koipond.cn-northwest-1.amazonaws.cn
cn-northwest-1.console.amazonaws.cn
status.amazonaws.cn
prod.www.docs.aws.a2z.org.cn
phd-console.cn-north-1.amazonaws.cn
awsmarketplace-gamma.amazonaws.cn
operatornet.cn-north-1.amazonaws.cn
awsmarketplace.amazonaws.cn
console.amazonaws.cn
www.amazonaws.cn
contessa-awsmarketplace.amazonaws.cn
gamma.support.amazonaws.cn
reactions.marketplace.cn-northwest-1.amazonaws.cn
docs.amazonaws.cn
toucan.amazonaws.cn
signup.amazonaws.cn
signup-gamma.amazonaws.cn
cloudfront-console.amazonaws.cn
sdk-for-sapabap.aws.amazon.com
docs.amazonaws.cn
operatornet-preprod.cn-north-1.amazonaws.cn
operatornet.cn-northwest-1.amazonaws.cn
squidhat.amazonaws.cn
photon-portal-gamma.cn-northwest-1.aws.amazon.com.cn
policysim.amazonaws.cn
operatornet-preprod.cn-northwest-1.amazonaws.cn
operatornet-preprod.cn-northwest-1.amazonaws.cn

Certificate

The complete raw certificate details for cn-north-1.quicksight.amazonaws.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYVAsJ1xHBVKZvSJIJeK
ZicGwoojCCUXe8vlZR4vpIl+Yk1TbzOyyAtawASd5stbo1kTe5oABjBJEb7062WV
+8g8Dyb81x9w4dFCKIwXMzCUax91FXmdnFhmo6cSPjT0szFT3Mnl2KYUva4pNAGh
y3S+cOQCYaxzrQfEUhSGqHp+Ga7tLseB/nLh2uYeoYjVRtOo3UW+CUSz6vMaN2HJ
hKBIMGvkSCsKYW3pdnH44pxD/g1nNnXynsCYacOb7b9AwslJOP+AGK2kCYkYlMpH
kEUWo9gXQ4Ni0eS58KcORIKI3sJDq5wI2DKn/8WoPqsRsreDJSUw1ZRsls6A7mPT
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14712788331451335257606814682960928103
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cn-north-1.quicksight.amazonaws.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18370263572970165772112218846587734585963351969766072948960480290842903103593138393810783745823904548574646465735954062198748381905596060645133228396839243600354306413664714235566038420466232524299382094640949056371573568975146306406723822532130559639138098415039792962511574732619438145526492028227525435858937678735643799096289453001837374205530359749163606507284586499619086852355127442046001702527553282211501888433734106230029338577366626204593108726492634700151969464349087971929856825244488516312021145626747669003030191628813028915558889809783693027782283307469893945546199224489661725434862604755857857303463
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							62d06aefb1c9c2713a7beace9e12b0f354d7408d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn-north-1.quicksight.amazonaws.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quicksight.amazonaws.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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