sps-internal.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0a:c2:86:c5:73:d9:5d:b6:47:cf:0c:38:89:e0:4e:f3 was issued on by Amazon.

With 23 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sps-internal.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:c2:86:c5:73:d9:5d:b6:47:cf:0c:38:89:e0:4e:f3
Serial Number (int): 14302319035093375497760055410749886195
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 14:f9:f0:a9:3e:bc:6c:01:09:13:6e:ae:0b:20:83:5b:53:f6:2e:99
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): bd:b4:60:5d:e5:2c:8d:53:a0:8c:b6:64:40:44:9e:50:e8:5d:93:d0
Fingerprint (sha256): 9d:58:16:eb:46:bf:44:2f:10:1c:81:29:58:b2:14:a3:82:b5:07:05:0e:24:03:ce:ef:28:ee:f7:e1:86:06:f9

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate sps-internal.com

23

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sps-internal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sps-internal.com
grafana.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com
integration.platform.sps-internal.com
zipkin.integration.platform.sps-internal.com
kube-dashboard.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com
nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com
alertmanager.integration.platform.sps-internal.com
kiali.integration.platform.sps-internal.com
zipkin.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com
pushgateway.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com
jaeger.integration.platform.sps-internal.com
kiali.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com
prometheus.integration.platform.sps-internal.com
gotjwt.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com
jaeger.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com
alertmanager.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com
prometheus.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com
kubecost-dashboard.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com
gotjwt.integration.platform.sps-internal.com
kube-dashboard.integration.platform.sps-internal.com
pushgateway.integration.platform.sps-internal.com
grafana.integration.platform.sps-internal.com
kube-oidc-proxy.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com

Other certificates including the domain name sps-internal.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for sps-internal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsF3hnrlfo/PoS5XLrYu1
I1CvRwuoynuo72YvCnyWAo2fiHdjFkpg67SJFsOxASNDxpKm5+eMY0kIqDujtlQw
9dw5eHGzRGLJhvq4JGYa7AhHefK6DRkUVhWL0q01QrZcp0qbDyOzWBHo8NwyX0Fy
n2Tng6PrL1QGS0wES56GlLrH91pjgJ0bv4FTkD/T/nlrDDahuLbQigDz0jVTYcng
yLsHOX1hT4hmGBEaBuirRrRuWGdlI74Qra5PSvND/C73UseORMGlnPOurZsr1tj/
ug7X35bIydoxJyGZSdAvJawWj9sw/MRFS03EJ2Q4XIrR7HGf/EFeCPBD81r+gyf0
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14302319035093375497760055410749886195
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sps-internal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22264236282379403570088269139699836701342640114751204745141389718156834773437284328429949212943454923581834685927297817199557317998702087924167719192787594261454406533674946146627251841956873442098433917254965177038956659533940816757651276587408857318898390753036045038357823296669453904538017284285446810434963876537210599155376112057527891794056904241610284358979752976518426725751701710127350974694664808922961267003058087085545152184322089639939937002005328624912066145667271883595566463316252816612603328081033286957819731150540333592153997437206827450322713588687901296892912095345606114463952842907214349333537
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							14f9f0a93ebc6c0109136eae0b20835b53f62e99
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1459 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grafana.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zipkin.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kube-dashboard.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alertmanager.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiali.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zipkin.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pushgateway.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaeger.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiali.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prometheus.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotjwt.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaeger.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alertmanager.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prometheus.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kubecost-dashboard.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotjwt.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kube-dashboard.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pushgateway.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grafana.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kube-oidc-proxy.nonprod-us-east-2-jarocki-4r5t.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004c219ce982dbcb988b4ace6a46ca0ef75937bfbe8954f84bcbcf1e4ac5296b898316a8ecf24118c556aa1954e5047bc2f79e2d198ebad4c39e8d53deb4dfdb2a3706ad3971863c5f581d3b992fbeb38b6a2e9f49b8ee4b514b1bd1d66a5f011e465ea5bbfd4d3c06774f74cd8e25daa4c3a4698a5beac351440faae338a24d84eae8684ae31e63154be45f330c871f8e407ea2e2ce7322f240339ea94687ab80d44bf3d66a1ac01dd7d28cfd69a742396c536cab3e8801af321cc1eefe2c11e35fd3b087ec5f299419613b584898959d132ad77280af871bb62c0ffdd294b5ee1ecc80725566e9f56cf91f9ceee87b9457ff16a531088fb7dfeb545cae028fc6