jpbs.payment.preprod1.us-east-1.pci-tmaws.io

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 02:ce:be:ec:c8:cc:db:0a:e8:22:33:25:d3:4b:ce:2a was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jpbs.payment.preprod1.us-east-1.pci-tmaws.io

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:ce:be:ec:c8:cc:db:0a:e8:22:33:25:d3:4b:ce:2a
Serial Number (int): 3731941562243710651973693908049448490
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 7a:71:ac:cb:c6:af:71:93:aa:0f:bf:89:60:8b:36:4f:a4:ab:61:f0
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 61:d3:a5:92:ee:d0:9d:9c:de:58:b5:5f:bb:59:b6:b8:dc:1e:9f:88
Fingerprint (sha256): 56:f4:22:f3:f2:3a:d1:63:cb:b3:37:8a:13:2c:dd:d8:56:af:f8:69:50:85:73:c5:ad:e0:b5:e6:49:af:ef:f8

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate jpbs.payment.preprod1.us-east-1.pci-tmaws.io

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jpbs.payment.preprod1.us-east-1.pci-tmaws.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jpbs.payment.preprod1.us-east-1.pci-tmaws.io

Other certificates including the domain name pci-tmaws.io

(limited to 100 certificates)
app.pmtivr3.preprodpci1.us-west-2.pci-tmaws.io
*.preprodpci1.us-west-2.pci-tmaws.io
app.elivr1.prodpci1.us-west-2.pci-tmaws.io
pxy.cts.prod2.pci-tmaws.io
app.csivr3.preprodpci1.us-east-1.pci-tmaws.io
*.beanstream.payment.prod1.us-east-1.pci-tmaws.io
app.pmtivr3.prodpci1.us-west-2.pci-tmaws.io
app.preprodpci1.us-east-1.ole.pci-tmaws.io
dc01techeuw1.techops.info
klarna.payment.prod1.us-east-1.pci-tmaws.io
app.csivr1.preprodpci1.us-west-2.pci-tmaws.io
*.prd214.stg.us-east-1.pci-tmaws.io
app.pmtivr1.prodpci1.us-west-2.pci-tmaws.io
adfseast.pci-tmaws.io
adfseu.pci-tmaws.io
speechminer.genesys.pci-tmaws.io
*.beanstream.payment.prod1.us-east-1.pci-tmaws.io
app.elivr2.preprodpci1.us-west-2.pci-tmaws.io
pxy.cts.preprod2.pci-tmaws.io
btoauth.payment.prod1.us-east-1.pci-tmaws.io
app-preprod1.apms.us-east-1.pci-tmaws.io
walletmgr.payment.preprod1.us-east-1.pci-tmaws.io
adfseast.pci-tmaws.io
app.pmtsvc.prodpci1.us-west-2.pci-tmaws.io
app-prod1.apms.us-east-1.pci-tmaws.io
app.pmtivr2.prodpci1.us-east-1.pci-tmaws.io
testcreatecert.pci-tmaws.io
app.pmtivr1.prodpci1.us-east-1.pci-tmaws.io
ticketinsurance.payment.prod1.us-west-2.pci-tmaws.io
beanstream.payment.prod1.us-west-2.pci-tmaws.io
giftcard.payment.prod1.us-east-1.pci-tmaws.io
amex-otl.payment.preprod1.us-east-1.pci-tmaws.io
paysys-otl.prod1.us-east-1.pci-tmaws.io
adfseast.pci-tmaws.io
*.preprodpci1.us-east-1.pci-tmaws.io
payments-elk-logs.prod1.us-west-2.pci-tmaws.io
klarna.payment.preprod2.us-west-2.pci-tmaws.io
adfswest.pci-tmaws.io
app.pmtivr3.prodpci1.us-east-1.pci-tmaws.io
app.prodpci1.us-east-1.ole.pci-tmaws.io
payments-elk-logs.prod1.eu-west-1.pci-tmaws.io
app.pcipxy.prodpci1.us-east-1.pci-tmaws.io
pci-api.payment.preprod1.eu-west-1.pci-tmaws.io
app.elivr2.prodpci1.us-west-2.pci-tmaws.io
*.prodpci1.us-east-1.pci-tmaws.io
dc02techuse1.techops.info
app.csivr3.preprodpci1.us-west-2.pci-tmaws.io
app.csivr1.prodpci1.us-east-1.pci-tmaws.io
app.pmtsvc.prodpci1.us-east-1.pci-tmaws.io
braintree.payment.preprod1.eu-west-1.pci-tmaws.io
app.pmtivr2.prodpci1.us-west-2.pci-tmaws.io
sales-dta-preprodpci1-us-east-1.pci-tmaws.io
dc02techuse1.techops.info
braintree.payment.prod1.us-west-2.pci-tmaws.io
pci-api.payment.preprod1.eu-west-1.pci-tmaws.io
app.csivr3.prodpci1.us-east-1.pci-tmaws.io
app.csivr2.preprodpci1.us-west-2.pci-tmaws.io
app.pmtsvc.preprodpci1.us-east-1.pci-tmaws.io
app.csivr2.preprodpci1.us-west-2.pci-tmaws.io
app.pmtivr1.preprodpci1.us-west-2.pci-tmaws.io
app.csivr1.preprodpci1.us-west-2.pci-tmaws.io
app.pmtivr2.preprodpci1.us-east-1.pci-tmaws.io
talonone.payment.preprod1.us-east-1.pci-tmaws.io
adfseast.pci-tmaws.io
beanstream.payment.us-east-1.pci-tmaws.io
vaultlite.payment.preprod1.us-west-2.pci-tmaws.io
braintree.payment.preprod1.us-east-1.pci-tmaws.io
app.csivr2.prodpci1.us-east-1.pci-tmaws.io
walletmgr.payment.prod1.us-east-1.pci-tmaws.io
btonboard.payment.prod1.us-east-1.pci-tmaws.io
app.csivr2.prodpci1.us-east-1.pci-tmaws.io
app.csivr2.preprodpci1.us-east-1.pci-tmaws.io
app.pmtsvc.preprodpci1.us-east-1.pci-tmaws.io
*.prd214.prod.us-east-1.pci-tmaws.io
giftcard.payment.preprod1.us-east-1.pci-tmaws.io
sales-dta-preprodpci2-us-east-1.pci-tmaws.io
braintree.payment.preprod1.ap-southeast-2.pci-tmaws.io
app.csivr1.prodpci1.us-west-2.pci-tmaws.io
app.pcipxy.preprodpci1.us-west-2.pci-tmaws.io
jpbs.payment.preprod1.us-east-1.pci-tmaws.io
amex-otl.payment.preprod1.us-west-2.pci-tmaws.io
app.csivr1.preprodpci1.us-west-2.pci-tmaws.io
pci-api.payment.preprod1.eu-west-1.pci-tmaws.io
adfswest.pci-tmaws.io
app.pmtivr3.prodpci1.us-east-1.pci-tmaws.io
klarna.payment.prod2.us-west-2.pci-tmaws.io
klarna.payment.preprod1.us-east-1.pci-tmaws.io
ticketinsurance.payment.prod1.us-west-2.pci-tmaws.io
dbdm.pci-tmaws.io
vv20-api-preprodpci.pci-tmaws.io
app.pmtivr2.prodpci1.us-west-2.pci-tmaws.io
app.pmtivr3.preprodpci1.us-west-2.pci-tmaws.io
paysys-otl.prod1.us-west-2.pci-tmaws.io
dc02techusw2.techops.info
btcapture.payment.prod1.ap-southeast-2.pci-tmaws.io
dc02techeuw1.techops.info
mastercard.payment.preprod1.ap-southeast-2.pci-tmaws.io
app.pcipxy.preprodpci1.us-east-1.pci-tmaws.io
braintree.payment.prod1.us-east-1.pci-tmaws.io
dc01techusw2.techops.info

Certificate

The complete raw certificate details for jpbs.payment.preprod1.us-east-1.pci-tmaws.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljUlHQRzatmOheLtnWuL
Ie0GPUgerPHBTLQBoDLdNR4EHhpJOzd3953OosOQfO0fA/5hFbmVlyj3l2rnoMVx
XiQoo9mmZN04/VSu2gLlaUCXdPU9ew6qcRyl7P7WpEyD0ISe8LOiqqdQ0IZ0auaJ
atXPKO/sXvJQGG617gl+8c8C9P+EnhYcmkbabUmddDh8a9lvGmcQWEddS46wAweu
XniyTfpgsYGwwREiE4a8SI8OWSeySyoRS2y/2Q4YMND6Qpba5Gup4FhbSpOA1+JS
pi5XyWd59FaarDkFxzuT8Yy2i48BJUO/UYTgGGdwTA1vbLLeW3NkpX3seif7kyee
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3731941562243710651973693908049448490
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jpbs.payment.preprod1.us-east-1.pci-tmaws.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18961952508337590214938565342225754026537476085311757576120132212739296984322870203287545740231989016053249141115471908677005784941457603285520221296739199914928436496699778886169151142235307526471483179997175613744215964393393291404895003545957474725718305974490336224739475540473576238221413127344089578130621070909525258592191781271369847803218812143881784584827565186532609154821209419064960257859897610784087270916409588821325912044116253907790988230276733205968276921766871860605444781049577943287553566709759420624500181914278753678168104882635519252536809014060314902109827429363981134051332721625635043647041
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7a71accbc6af7193aa0fbf89608b364fa4ab61f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jpbs.payment.preprod1.us-east-1.pci-tmaws.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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