prod.us-east-1.mdcs.mshop.amazon.dev

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 06:20:8e:c3:ca:e6:84:c5:6d:1e:aa:31:aa:ba:c3:e3 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=prod.us-east-1.mdcs.mshop.amazon.dev

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:20:8e:c3:ca:e6:84:c5:6d:1e:aa:31:aa:ba:c3:e3
Serial Number (int): 8144417088632670456952148531238061027
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 92:4e:06:65:17:63:66:ca:4c:2c:c0:a2:6b:43:67:93:af:5f:b8:52
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 4b:1a:ef:01:82:6c:c8:06:32:aa:e3:33:c5:18:0b:bd:a9:00:e4:44
Fingerprint (sha256): 97:dd:3d:63:b9:7a:39:eb:94:2e:f1:0c:71:5b:02:d6:8f:7b:d4:b7:f4:f0:96:ce:59:5d:ce:14:24:41:48:6f

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate prod.us-east-1.mdcs.mshop.amazon.dev

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.us-east-1.mdcs.mshop.amazon.dev

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prod.us-east-1.mdcs.mshop.amazon.dev

Other certificates including the domain name amazon.dev

(limited to 100 certificates)
regular.us-east-1.alpha.atta.kaspian.amazon.dev
air.lmaq.last-mile.amazon.dev.lmaq.last-mile.amazon.dev
sungyenl.alpha.console.materials.sustainability.amazon.dev
eu-west-1.beta.sblandingpageservice.advertising.amazon.dev
*.timlawso.physical.advertising.amazon.dev
alpha.hitting-bullseye.zappos.amazon.dev
us.beta.itinerary-manager.onroad-execution.last-mile.amazon.dev
lialx.test.attribution.privacy.amazon.dev
coredump-parser.eink.amazon.dev
auth.prototype.alps.music.amazon.dev
andrena.niksinn.icon.amazon.dev
workflow.api.chrisfll.batch.caspian.dccs.amazon.dev
metrics-rhhigg.distance-assistant.opstechit.amazon.dev
us-west-2.alpha.int.lab.dml.alexa.amazon.dev
aasthame.api.permissions.vector.advertising.amazon.dev
deeplink.prod.alps.music.amazon.dev
lifepi.timlawso.physical.advertising.amazon.dev
*.beta.psidr.payments-security.amazon.dev
turn.ring-mobility.devices.amazon.dev
dev-1.pdx.nanobots.alexa.amazon.dev
jp.datastash-prod.pacman.last-mile.amazon.dev
fba-i2i-console.scot.amazon.dev
alpha-6ae1e725d9.netsparker.security.amazon.dev
beta.cruzoliv.people.amazon.dev
beta.eu-west-1.tax-accessor.cmp.chroma.intech.amazon.dev
central.lmaq.last-mile.amazon.dev
vinoth.test.creative-report.calltoaction.advertising.amazon.dev
api.na.alpha.substitution-state-service.subs.f3.amazon.dev
api.fcmap.swanwes.people.amazon.dev
alpha.mumblecore.kep.books.amazon.dev
beta.us-west-2.mdcs.mshop.amazon.dev
dpd-debug.devices.dev.rss.ring.amazon.dev
www.nickjmil.people.amazon.dev
dub.beta.unicorn-phoenix.lending.payments.amazon.dev
scorecard.ads.amazon.dev
zhenzihu.dev.mmt-validation.people-engine.amazon.dev
prod.luma.workshop.mathieud.people.amazon.dev
andrena.niksinn.icon.amazon.dev
fpd.sumantbh.icon.amazon.dev
aax.online-panel.advertising.amazon.dev
gulbt-failure-analysis.bsxqa.digital-books.amazon.dev
jp.problemsolve-gamma.dolphinprod.last-mile.amazon.dev
static.alpha.luma.workshop.mathieud.people.amazon.dev
dashboard.beta.security-health-monitor.acs.amazon.dev
igl.search.inside.amazon.dev
*.beta.psidr.payments-security.amazon.dev
cdj.invite.prototype.alps.music.amazon.dev
ui.pvsin.last-mile.amazon.dev
virtual.opstechit.amazon.dev
beta.step-up-tool.rbs.amazon.dev
matbacic.search.inside.amazon.dev
user.prototype.alps.music.amazon.dev
*.alpha.mouse.payments-security.amazon.dev
beta.supernova-selfservice.amazon.dev
gamma.us-west-2.mdcs.mshop.amazon.dev
us-west-2.alpha.shbhvya.people.amazon.dev
avus-na-onebox.upsell.video.alexa.amazon.dev
*.search.acp.selling-partners.amazon.dev
dev4.cyclone.gdq.amazon.dev
upload-flexsimwebapp.wwde.amazon.dev
*.rongzhou.people.amazon.dev
us-west-2.alpha.lab.dml.alexa.amazon.dev
gamma.cubeout.grokalert.last-mile.amazon.dev
placement.proxy.gamma.us-east-1.zds.arc.hit.amazon.dev
abhisaha.rpmsui.cloudtune.amazon.dev
api.beta.supernova-selfservice.amazon.dev
lease-management.gunapal.people.amazon.dev
us.beta.itinerary-manager.onroad-execution.last-mile.amazon.dev
beta.cgs.cmt.amazon.dev
*.app-flow.mshop.amazon.dev
wichor.nanobots.alexa.amazon.dev
www.jiegao.people.amazon.dev
testrail.primeair.amazon.dev
avpes-na-beta.purchase.video.alexa.amazon.dev
eu-west-1.prod.lab.dml.alexa.amazon.dev
beta.gm.plukemea.people.amazon.dev
alpha.pdx.external-gateway.eve.alexa.amazon.dev
docs.datapath.amazon.dev
alpha-test.timeoff.atoz.amazon.dev
jxf.jxf.people.amazon.dev
gamkavya-cln-tracker.bsxqa.digital-books.amazon.dev
api.sanderavdev.compdomain.compensation.amazon.dev
na.datastash-gamma.pacman.last-mile.amazon.dev
tot.aft.amazon.dev
alpha.audit.tracker.ab.amazon.dev
*.beta.itinerary-manager.onroad-execution.last-mile.amazon.dev
andrena-test.niksinn.icon.amazon.dev
jingjp.test.attribution.privacy.amazon.dev
aim-dev-kdc.internal-audit.amazon.dev
beta.secpar.bm.amazon.dev
api.integ.mx-internal.igt.physical-stores.amazon.dev
prod.api.scrubjay.birds.amazon.dev
beta.use1.hitas.icon.amazon.dev
api.us-west-2.alpha.shopper-gateway.subs.f3.amazon.dev
master-feamazon.prod-api.transaction.fuse.amazon.dev
fokker.irx.icon.amazon.dev
*.accounting-royalty.digital.amazon.dev
*.beta.psidr.payments-security.amazon.dev
jayara.beta.step-up-tool.rbs.amazon.dev
auth.api.chrisfll.batch.caspian.dccs.amazon.dev

Certificate

The complete raw certificate details for prod.us-east-1.mdcs.mshop.amazon.dev in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7SxdyejT1juzSYgDmco
HR1P6B4FtaRHsc0/gXwZ6P6Z1xRC7MjszwHnuTKqj/hHUGTtFQwRyAMsrwX71pbu
q+hPolSF6RdzyN/KDFB3OJxnBz/S5XCKpYfBK0T5zhCdOD2UXlFm0LMUDGCCdHwa
+E8WqldmMQ8kdPWSoNCbfEGzV4VPlHWjtWOXwcvpzOBr1e40xPeXY93wX+3rz0dY
43tmPPmFGsQ6vGZ8oa1Y4RDiH2vWcjv7o1ETyXtp7uaRVTgkjI4Ky+akdydCre8D
MitDqAyAXr2fyjTvu54vYW3gPBrjEXKD6W8dUcku5cFodflBV2x0iFT8LA6R+osH
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8144417088632670456952148531238061027
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.us-east-1.mdcs.mshop.amazon.dev'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24200619398392904226664851558367900720856709939832654146538423218774183389828698636063254870605038150601134604387649283358432317355934628703966468373628718708155826776240746720115864193450938464197459957381629428030560560571984714905959438690602403831900562111535568051995954276448898419301469579063474042903999832597469627550257030843422115425869794636441420561236915332824695081408814287127707382679306771876281104324366962050339721440925381730046106150819246712930141825758900273778380656162285878593807211796961322696547598616242114240032660739082545088486110765498467844113761826886159897519116831066418204837777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							924e0665176366ca4c2cc0a26b436793af5fb852
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.us-east-1.mdcs.mshop.amazon.dev'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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