0.cn-northwest-1.prod.signer.console-api.aws-dev.amazonaws.cn

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 01:63:26:ed:0a:37:f8:1d:20:f0:b9:73:bc:c2:25:68 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=0.cn-northwest-1.prod.signer.console-api.aws-dev.amazonaws.cn

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:63:26:ed:0a:37:f8:1d:20:f0:b9:73:bc:c2:25:68
Serial Number (int): 1844054896581831154761631874148345192
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: d9:e4:4e:23:3b:b1:33:eb:ab:37:9b:3a:ed:bc:1a:18:e3:09:00:bf
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 7c:a0:f5:9c:da:ef:9c:c9:5f:f9:c9:d3:ba:41:e4:48:6a:6f:a1:7f
Fingerprint (sha256): 57:2a:43:fb:f1:f4:84:46:0a:4b:7f:63:ae:fa:b7:5b:39:b8:da:29:ce:60:a4:16:d3:15:39:a3:de:ae:fb:87

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate 0.cn-northwest-1.prod.signer.console-api.aws-dev.amazonaws.cn

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 0.cn-northwest-1.prod.signer.console-api.aws-dev.amazonaws.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

0.cn-northwest-1.prod.signer.console-api.aws-dev.amazonaws.cn

Other certificates including the domain name amazonaws.cn

(limited to 100 certificates)
cn-northwest-1.console.amazonaws.cn
spaceneedle-beta-zhy.amazonaws.cn
s3-console-cn-north-1.console.amazonaws.cn
operatornet-preprod.cn-northwest-1.amazonaws.cn
phd.amazonaws.cn
docs.amazonaws.cn
phd.amazonaws.cn
docs.amazonaws.cn
*.signin.amazonaws.cn
aws-console-nav-integ.cn-northwest-1.amazonaws.cn
*.signin.amazonaws.cn
signup-onebox.amazonaws.cn
aws-console-nav-preprod.cn-northwest-1.amazonaws.cn
gamma.api.support.amazonaws.cn
support.amazonaws.cn
signup-gamma.amazonaws.cn
cn-north-1.certificate.amazonaws.cn
contessa-awsmarketplace.amazonaws.cn
*.signin.amazonaws.cn
api.support.amazonaws.cn
awstraining-idm-cn-prod.cn-north-1.amazonaws.cn
cn-northwest-1.console.amazonaws.cn
sg-console-cn-north-1.console.amazonaws.cn
cn-northwest-1.console.amazonaws.cn
cn-north-1.console.amazonaws.cn
support.amazonaws.cn
policysim.amazonaws.cn
signup.amazonaws.cn
callback.es-staging.cn-north-1.amazonaws.cn
signup.amazonaws.cn
support.amazonaws.cn
api.support.amazonaws.cn
docs.amazonaws.cn
*.signin.amazonaws.cn
phd.amazonaws.cn
glacier-console-cn-north-1.console.amazonaws.cn
status.amazonaws.cn
acerendering-awsmarketplace.amazonaws.cn
support.amazonaws.cn
koipond.cn-north-1.amazonaws.cn
*.signin.amazonaws.cn
cn-northwest-1.gamma.signer.console-api.aws-dev.amazonaws.cn
cn-northwest-1-onebox.quicksight.amazonaws.cn
cn-north-1.console.amazonaws.cn
console.amazonaws.cn
support.amazonaws.cn
status.amazonaws.cn
live.zhy.prod.content-server.marketing.aws.a2z.org.cn
awsmarketplace-gamma.amazonaws.cn
operatornet-preprod.cn-north-1.amazonaws.cn
live.bjs.prod.content-server.marketing.aws.a2z.org.cn
*.signin.amazonaws.cn
cn-north-1.console.amazonaws.cn
docs.amazonaws.cn
scamp-prod.cn-north-1.amazonaws.com.cn
cn-northwest-1.console.amazonaws.cn
cn-north-1.quicksight.amazonaws.cn
0.cn-northwest-1.prod.signer.console-api.aws-dev.amazonaws.cn
api.support.amazonaws.cn
prod.www.docs.aws.a2z.org.cn
operatornet-gamma.cn-north-1.amazonaws.cn
cloudfront-console-gamma.amazonaws.cn
operatornet-preprod.cn-north-1.amazonaws.cn
cn-north-1.console.amazonaws.cn
policysim.amazonaws.cn
cn-north-1.console.amazonaws.cn
cn-north-1.prod.signer.console-api.aws-dev.amazonaws.cn
signup.amazonaws.cn
awsconsole.cn-north-1.amazonaws.com.cn
policysim.amazonaws.cn
signup.amazonaws.cn
cn-northwest-1.prod.signer.console-api.aws-dev.amazonaws.cn
signup.amazonaws.cn
koipond.cn-northwest-1.amazonaws.cn
cn-northwest-1.console.amazonaws.cn
status.amazonaws.cn
prod.www.docs.aws.a2z.org.cn
phd-console.cn-north-1.amazonaws.cn
awsmarketplace-gamma.amazonaws.cn
operatornet.cn-north-1.amazonaws.cn
awsmarketplace.amazonaws.cn
console.amazonaws.cn
www.amazonaws.cn
contessa-awsmarketplace.amazonaws.cn
gamma.support.amazonaws.cn
reactions.marketplace.cn-northwest-1.amazonaws.cn
docs.amazonaws.cn
toucan.amazonaws.cn
signup.amazonaws.cn
signup-gamma.amazonaws.cn
cloudfront-console.amazonaws.cn
sdk-for-sapabap.aws.amazon.com
docs.amazonaws.cn
operatornet-preprod.cn-north-1.amazonaws.cn
operatornet.cn-northwest-1.amazonaws.cn
squidhat.amazonaws.cn
photon-portal-gamma.cn-northwest-1.aws.amazon.com.cn
policysim.amazonaws.cn
operatornet-preprod.cn-northwest-1.amazonaws.cn
operatornet-preprod.cn-northwest-1.amazonaws.cn

Certificate

The complete raw certificate details for 0.cn-northwest-1.prod.signer.console-api.aws-dev.amazonaws.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BXbGlkYZmZm0TYJHIdu
GZhST3ICkdsl/EPqOwGBgkJaHuoIL/h2jGwaBhbCq3DVGhYlORHU37KQAjr8eDJ2
FVj6uF5eI83o1FlPmyDEHOk2M3sF2ljELLXmua8WSn50N4PvR+I5pmbtTWJ5c4HA
xL+Y75hLiFl3VXbOGKQGNnTgUnwyiS+6Vaamj0cp04f1ngfQ5JQizLGmGWdFw90W
RR86s8nVEIu/kJxbvjgCrfqBwCDe1U5fUKIkSQlhiL3YIxtnjk7i8DKsMMloX8kl
rrh+S5rj+0VV0+wxIt3grLGcRRnR2EyceRaPikmfHXFyf6XKKrjmp9UoPx1x9/nD
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1844054896581831154761631874148345192
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0.cn-northwest-1.prod.signer.console-api.aws-dev.amazonaws.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29298064283695763750934100273599707765311000129842934114742084826764526311494439274264449144153564566402653971008620003840996001401746378416258258629023078596725186014406147264909512556093437464666977023197716814409107048083020656244710389630894887975172463319741807071803303658530686858970298887376219717881523977433527222561955169654355533446501770063615677449429484136436316986737854170403211168712619678537219688139333367514215350235868723485888853104235111807365801448624075545163204586360965149448110221434291515735381915426419543420591098123497778505146985995441519126172651017444988361197308070311843805643647
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9e44e233bb133ebab379b3aedbc1a18e30900bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '0.cn-northwest-1.prod.signer.console-api.aws-dev.amazonaws.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018648167c97000004030046304402202e7be9812a344d34fb93a0698f02cb87d0b76e89840c88c049e1676117604ade0220728a34d999647ecf666c9aefc984d4a16f8c6a39aa35ebda859418cb2c5a498700760073d99e891b4c9678a0207d479de6b2c61cd0515e71192a8c6b80107ac17772b50000018648167caa00000403004730450220082e68c5eb225858b42eaae8f837f9b106cc06ca5cbdfbad7e11ede745243c5d022100bfda912573902b5f055da81338bf9b49e9740c8d2cc6b5ab288a13f0e9861a0400760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018648167c7a0000040300473045022002e5724b91da2ecf0bf68319ba77e71beb2e054ec04a6e85733866b16a0e70fe022100fe66a354ba551aadd0f239b3b269d2aa9e25a5ae60adc2f7fa1f58277ea764b2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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