sps-internal.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 05:00:0a:df:16:16:63:fc:3a:bf:3c:cd:c1:10:44:5f was issued on by Amazon.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sps-internal.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:00:0a:df:16:16:63:fc:3a:bf:3c:cd:c1:10:44:5f
Serial Number (int): 6646360477736595313366151186843976799
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 5a:59:08:e6:e5:df:ff:3b:14:7e:16:12:3d:51:4d:2e:69:47:1e:2d
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 5d:e2:30:3e:a6:e9:61:3e:4c:54:f0:7b:e9:57:76:21:7b:6b:7b:27
Fingerprint (sha256): 95:68:dd:42:0a:28:92:ed:5d:60:75:50:0f:72:23:5a:93:81:f5:1c:58:41:5e:dd:55:00:67:bb:72:17:06:33

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate sps-internal.com

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sps-internal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sps-internal.com
jaeger.sandbox.integration.platform.sps-internal.com
alertmanager.nonprod-us-east-2-sandbox-1a2b.sandbox.integration.platform.sps-internal.com
gotjwt.sandbox.integration.platform.sps-internal.com
kiali.nonprod-us-east-2-sandbox-1a2b.sandbox.integration.platform.sps-internal.com
jaeger.nonprod-us-east-2-sandbox-1a2b.sandbox.integration.platform.sps-internal.com
prometheus.sandbox.integration.platform.sps-internal.com
pushgateway.sandbox.integration.platform.sps-internal.com
kube-dashboard.nonprod-us-east-2-sandbox-1a2b.sandbox.integration.platform.sps-internal.com
gotjwt.nonprod-us-east-2-sandbox-1a2b.sandbox.integration.platform.sps-internal.com
zipkin.sandbox.integration.platform.sps-internal.com
kiali.sandbox.integration.platform.sps-internal.com
zipkin.nonprod-us-east-2-sandbox-1a2b.sandbox.integration.platform.sps-internal.com
kubecost-dashboard.nonprod-us-east-2-sandbox-1a2b.sandbox.integration.platform.sps-internal.com
grafana.nonprod-us-east-2-sandbox-1a2b.sandbox.integration.platform.sps-internal.com
kube-dashboard.sandbox.integration.platform.sps-internal.com
sandbox.integration.platform.sps-internal.com
prometheus.nonprod-us-east-2-sandbox-1a2b.sandbox.integration.platform.sps-internal.com
alertmanager.sandbox.integration.platform.sps-internal.com
grafana.sandbox.integration.platform.sps-internal.com
pushgateway.nonprod-us-east-2-sandbox-1a2b.sandbox.integration.platform.sps-internal.com
nonprod-us-east-2-sandbox-1a2b.sandbox.integration.platform.sps-internal.com

Other certificates including the domain name sps-internal.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for sps-internal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyI1SeDgBdoVppUTWkqPP
mgKArzTMuYHqMr9rTNCDzeziA4B37WZLt71VInGePeLlSZUDM+uBaQCMaHgjOzBO
zDKoo2JN8q8TlxVdGWqBHK3srtyHvFlC6IRRUnx3MgQAQB3PJBT6Lyj2BM8DYqFD
8cN5PbG9rNgBWnqPYkF9N+vMcJcsc9mcsRn0niaiVtRqrUwDshmI7UoYLsLH69bj
UaIlgsWyMEoXcZ7QGt9Djc+g92c0j943+Z9hJGefxCiqKWj/bqFa1eszEn/lqACq
dd4ascYVHllIYO2GYyIIE+ZKu64176WTAKzPWpT9IFEQ0uuh7K+Smw5c1HhnaQn9
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6646360477736595313366151186843976799
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sps-internal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25317349541172359448391649521113315869070519794969806893843593448264576270669050651334183318539732706145337984855975410109883709851891101203518606561811899355519860972544782909599316836655270996388210409547951252942223736840609270197156173820483824258095136316974259860006913780078124296918035262033382133930658116526428294730914668729484080317111883642650391641676844706410430188367186011125713815048067745317725477012037914045663753531091168032937326491766769643783724106949410638768283463008007581173202610972904337614123356790907875480233098996131954366854335663387665166126200661308344684981488139558576930291123
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5a5908e6e5dfff3b147e16123d514d2e69471e2d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1541 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaeger.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alertmanager.nonprod-us-east-2-sandbox-1a2b.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotjwt.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiali.nonprod-us-east-2-sandbox-1a2b.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaeger.nonprod-us-east-2-sandbox-1a2b.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prometheus.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pushgateway.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kube-dashboard.nonprod-us-east-2-sandbox-1a2b.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotjwt.nonprod-us-east-2-sandbox-1a2b.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zipkin.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiali.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zipkin.nonprod-us-east-2-sandbox-1a2b.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kubecost-dashboard.nonprod-us-east-2-sandbox-1a2b.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grafana.nonprod-us-east-2-sandbox-1a2b.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kube-dashboard.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prometheus.nonprod-us-east-2-sandbox-1a2b.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alertmanager.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grafana.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pushgateway.nonprod-us-east-2-sandbox-1a2b.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprod-us-east-2-sandbox-1a2b.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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