sps-internal.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0d:b7:7d:0c:1a:f6:07:51:34:9b:fc:08:dc:45:88:06 was issued on by Amazon.

With 22 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sps-internal.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:b7:7d:0c:1a:f6:07:51:34:9b:fc:08:dc:45:88:06
Serial Number (int): 18232690530598226995268338388990003206
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 8a:a5:4e:72:eb:9e:73:10:90:7c:2d:15:5f:fe:77:e3:7f:4e:74:d0
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 0b:0b:35:f9:b1:a1:0d:ee:27:10:77:bc:ed:53:f5:b1:b5:34:78:13
Fingerprint (sha256): b3:40:39:85:96:ca:0c:01:d1:9c:c5:19:a6:c5:83:b3:27:ab:85:6d:13:1f:66:93:cb:1e:70:38:93:77:08:73

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate sps-internal.com

22

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sps-internal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sps-internal.com
grafana.nonprod-us-east-1-sandbox-3c4d.sandbox.integration.platform.sps-internal.com
jaeger.sandbox.integration.platform.sps-internal.com
prometheus.nonprod-us-east-1-sandbox-3c4d.sandbox.integration.platform.sps-internal.com
gotjwt.sandbox.integration.platform.sps-internal.com
prometheus.sandbox.integration.platform.sps-internal.com
zipkin.nonprod-us-east-1-sandbox-3c4d.sandbox.integration.platform.sps-internal.com
kube-dashboard.nonprod-us-east-1-sandbox-3c4d.sandbox.integration.platform.sps-internal.com
kubecost-dashboard.nonprod-us-east-1-sandbox-3c4d.sandbox.integration.platform.sps-internal.com
pushgateway.nonprod-us-east-1-sandbox-3c4d.sandbox.integration.platform.sps-internal.com
pushgateway.sandbox.integration.platform.sps-internal.com
jaeger.nonprod-us-east-1-sandbox-3c4d.sandbox.integration.platform.sps-internal.com
zipkin.sandbox.integration.platform.sps-internal.com
kiali.sandbox.integration.platform.sps-internal.com
nonprod-us-east-1-sandbox-3c4d.sandbox.integration.platform.sps-internal.com
gotjwt.nonprod-us-east-1-sandbox-3c4d.sandbox.integration.platform.sps-internal.com
kube-dashboard.sandbox.integration.platform.sps-internal.com
sandbox.integration.platform.sps-internal.com
alertmanager.sandbox.integration.platform.sps-internal.com
alertmanager.nonprod-us-east-1-sandbox-3c4d.sandbox.integration.platform.sps-internal.com
grafana.sandbox.integration.platform.sps-internal.com
kiali.nonprod-us-east-1-sandbox-3c4d.sandbox.integration.platform.sps-internal.com

Other certificates including the domain name sps-internal.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for sps-internal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Jnuy7vIkkHZbpFLU0/l
tW3NKFPXJtATJME+2zWt7yoIIU/CI+IIFS15j5QQtxNqdADFk5kEUBpt/Ss5Z/+X
k4FfOfj+ETT3+cIcv2aUC7F6SzotNkEbRyub/GkHultjuPd+KUK9ztXNH7VhhvD0
t/+ioDjfk37fOGyYcsO2Q99pi8S0LdGoTE3aeF7Gsmls0JdQQj1SuxcY8zLxaLgO
9vpGf2ppb18FOq9xlmsC51PYbobyPVpioU0wXe6C2qQ3vQ27oaInMhI1IyPVuLMk
u03mgSvaw+g+s9Oa52UJOfFfXCiI4r2fcxcBIQr4KiPI7zN89emzdzKmE2AzrD/l
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18232690530598226995268338388990003206
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sps-internal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29363193843041129839337979222907048304457787763459818243521016588082747902188566429169159072407727998378657155415900640614152144252887544208040030568134016242302079792833119869656277828264469265112985352045326907359415079830002012320030437104341007918599132186899856480996403055968666815641369952476884168498237144945112681875596132078107849460064063966377652698502810804486627264661759921577316445676346584589998437684922185379595109991754115697130265825188107620330903430546594592129379259366496108628538290230865728027826676997292991945164080639341854224402206398243163600019399731106379002468993930135817901041021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8aa54e72eb9e7310907c2d155ffe77e37f4e74d0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1541 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grafana.nonprod-us-east-1-sandbox-3c4d.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaeger.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prometheus.nonprod-us-east-1-sandbox-3c4d.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotjwt.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prometheus.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zipkin.nonprod-us-east-1-sandbox-3c4d.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kube-dashboard.nonprod-us-east-1-sandbox-3c4d.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kubecost-dashboard.nonprod-us-east-1-sandbox-3c4d.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pushgateway.nonprod-us-east-1-sandbox-3c4d.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pushgateway.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jaeger.nonprod-us-east-1-sandbox-3c4d.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zipkin.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiali.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprod-us-east-1-sandbox-3c4d.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gotjwt.nonprod-us-east-1-sandbox-3c4d.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kube-dashboard.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alertmanager.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alertmanager.nonprod-us-east-1-sandbox-3c4d.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grafana.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiali.nonprod-us-east-1-sandbox-3c4d.sandbox.integration.platform.sps-internal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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