pnld-break-ldp-planningservice-public-api.d010.aws.cldsvc.net

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0d:29:b3:05:a2:e9:0f:b7:b2:44:9d:c3:6f:2a:dc:ce was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pnld-break-ldp-planningservice-public-api.d010.aws.cldsvc.net

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:29:b3:05:a2:e9:0f:b7:b2:44:9d:c3:6f:2a:dc:ce
Serial Number (int): 17496479114282026031971900423366433998
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 21:88:4e:48:fa:9e:d2:d1:02:78:19:3d:b4:f7:af:a1:48:b6:1a:95
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 25:ad:57:da:ef:d8:85:01:10:cb:4c:74:7b:4d:33:63:dd:59:a1:db
Fingerprint (sha256): 5f:9d:5b:a1:55:77:cd:83:47:9b:e5:3b:a8:b7:12:56:5d:e6:67:35:7b:bb:62:66:25:bb:73:58:72:eb:37:e1

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate pnld-break-ldp-planningservice-public-api.d010.aws.cldsvc.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pnld-break-ldp-planningservice-public-api.d010.aws.cldsvc.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pnld-break-ldp-planningservice-public-api.d010.aws.cldsvc.net

Other certificates including the domain name cldsvc.net

(limited to 100 certificates)
gascrws01.p10.cldsvc.net
api-1311.fsn.d16.cldsvc.net
*.a06.cldsvc.net
console-api.cis.bas.d16.cldsvc.net
cape.cpi.a15.cldsvc.net
test01.postnl.nl
authorizationservice.p10.cldsvc.net
www.d057.aws.cldsvc.net
controltstrtispr146.d041.aws.cldsvc.net
haco.t10.cldsvc.net
postnl.nl
pnlt-ldp-trap-public-api.t010.aws.cldsvc.net
api.fsn.d16.cldsvc.net
pnld-dd-ldp-planningservice.d010.aws.cldsvc.net
us245774.boi.bas.d16.cldsvc.net
api.us246027.ls.bas.d16.cldsvc.net
signature-rb-043fc.led.d16.cldsvc.net
api.webshopprofiel.d27.cldsvc.net
pr-103-scp-subgraph.d032.aws.cldsvc.net
api.svs.bas.d16.cldsvc.net
springest.cpi.p22.cldsvc.net
oplsws01.p10.cldsvc.net
tridion.a02.cldsvc.net
integration.joost.d026.aws.cldsvc.net
api-65752.bgs.bas.d16.cldsvc.net
tnt-rb-7794d.led.d16.cldsvc.net
acc01.postnl.nl
tnt-rb-043fc.rest.led.d16.cldsvc.net
secureexchange01.a10.cldsvc.net
retourlabel.p04.cldsvc.net
pnld-ldp-trap-signedurlsubstack-public-api.d010.aws.cldsvc.net
rpa-client.p02.cldsvc.net
api.cis.bas.d16.cldsvc.net
uma.mijnpostnl.a02.cldsvc.net
pas.em.t17.cldsvc.net
franco.d026.aws.cldsvc.net
postnl.com
cpi.p22.cldsvc.net
contentapi2.contapi.t16.cldsvc.net
pr-478-scp-subgraph.d032.aws.cldsvc.net
api.emp.t17.cldsvc.net
dynamics.p02.cldsvc.net
api-1539.fsn.d16.cldsvc.net
console-api.cis.bas.d16.cldsvc.net
api.pnps-dbd3e0d2-read.d023.aws.cldsvc.net
jeff.d27.cldsvc.net
control-tst-rtis-pr-22.d041.aws.cldsvc.net
dks-component-lib.d014.aws.cldsvc.net
prod01.postnl.nl
cris-aws.a04.cldsvc.net
control-tst-rtis-pr-25.d041.aws.cldsvc.net
depot-parameters.d014.aws.cldsvc.net
haco01-intern.p10.cldsvc.net
api.cis.bas.d16.cldsvc.net
nl.web.t16.cldsvc.net
signature-renovate.led.d16.cldsvc.net
control-tst-rti-locations-pr-225.d039.aws.cldsvc.net
oms.cpi.api.esb.t16.cldsvc.net
device-provisioning.api.scap.d018.aws.cldsvc.net
demo-api.d022.aws.cldsvc.net
mtls.postnl.nl
api-1320.fsn.d16.cldsvc.net
transaction.location.pli.d16.cldsvc.net
uma2.mijnpostnl.a02.cldsvc.net
uma.mijnpostnl.a02.cldsvc.net
ext-api-1534.fsn.d16.cldsvc.net
customer-dropoff-int.t04.cldsvc.net
rabbitmq.qmp.t04.cldsvc.net
api.ls.bas.a16.cldsvc.net
signature-rescon.led.d16.cldsvc.net
cph.a02.cldsvc.net
jouw.pat.postnl.nl
sustainability.mijnpostnl.p02.cldsvc.net
springest.cpi.a22.cldsvc.net
nrpin.a15.cldsvc.net
console-tmp.renovate-353131.ls.bas.d16.cldsvc.net
ext-api-1336.fsn.d16.cldsvc.net
doorzenden.pat.postnl.nl
console.bgs.bas.d16.cldsvc.net
pnlpas.feature-usus173189.d16.cldsvc.net
acc01.postnl.nl
*.oompd.t15.cldsvc.net
us183028.boi.bas.d16.cldsvc.net
springest.cpi.a22.cldsvc.net
test01.postnl.nl
mock-server-pr-1164.d030.aws.cldsvc.net
doorzenden.pat.postnl.nl
api.pnps-1bd04c1b-read.d023.aws.cldsvc.net
web.mstr.led.t16.cldsvc.net
d057.aws.cldsvc.net
bih.d042.aws.cldsvc.net
api.chronostgn.a16.cldsvc.net
pr-38-rti-eds-physical-subgraph.d036.aws.cldsvc.net
tiama.a02.cldsvc.net
api.renovate-aws-cd.ls.bas.d16.cldsvc.net
pr-50-rti-eds-physical-subgraph.d036.aws.cldsvc.net
postweb.em.t17.cldsvc.net
geospottanl-2.a02.cldsvc.net
flashscan.d042.aws.cldsvc.net
*.d024.aws.cldsvc.net

Certificate

The complete raw certificate details for pnld-break-ldp-planningservice-public-api.d010.aws.cldsvc.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAriE2zU80F6Qxh1zCZ9Aa
/bfnOxN/jW4V480fklrL2nCCQnjbSrcAeqO0oirIH5NktZLvFckwxrOH8nSkVI0c
ONZehjBIgpzCJdtAcV833a/IvYVjE5FnNiRHFKVoBS1xioo2em0Vh7sovFbxlbjC
AndfoDdSvbgihCpwsStfpG9TVxiZdy+i+piaNYuvaPRdYdDDgrlGqC9UIZa3nWsk
w1n+xporsjNqpNkiF2UYSKmV8BajA94ZQj3iBe638zTcbNoeVmzMWFHZNdOR4SDO
0iAVroIUHHovpiQ7Sw1GaZpE3iD8CAlTANK6cad1LGDPuCXAtorfjvzFf3Vu9qo5
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17496479114282026031971900423366433998
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pnld-break-ldp-planningservice-public-api.d010.aws.cldsvc.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21981843532579525772501727880814737382980726300010353450358736955527002705937834420632933099897147760118916798163474888164365006857427455479655464794368606200709393455026016951601717422366106050728679436899995366602265921183632758129251944790791502279147788850389942707739979446868878063441477988199721903323068691745294252702193171362752424471866137572985204203252023071186658295197831310669462395561524423224394260071800692517952722542859397803851986839427201196152837407087813059065735101354341005806176284602508741003195851105433278795133745627096418551037074693106075111117994792175989887865849334604154786167147
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							21884e48fa9ed2d10278193db4f7afa148b61a95
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnld-break-ldp-planningservice-public-api.d010.aws.cldsvc.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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