*.playground.klarnaservices.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 05:a9:99:fb:e6:16:9a:a6:ae:f5:6e:49:7a:fc:7d:37 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.playground.klarnaservices.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:a9:99:fb:e6:16:9a:a6:ae:f5:6e:49:7a:fc:7d:37
Serial Number (int): 7526761314163993965810158893478477111
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: fd:f8:fd:99:73:34:6a:72:f6:fc:b7:55:4a:b9:58:40:cd:15:40:2f
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 3c:86:77:d0:f4:e5:82:65:d5:f5:59:f8:19:77:4f:2e:9d:f3:09:fb
Fingerprint (sha256): b8:d9:e8:57:20:74:de:64:f8:98:71:2b:51:d1:c5:30:d0:16:0b:6d:e9:59:55:5e:d1:ef:9c:5b:4f:e8:8d:34

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate *.playground.klarnaservices.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.playground.klarnaservices.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.playground.klarnaservices.com

Other certificates including the domain name klarnaservices.com

(limited to 100 certificates)
*.production.c2c.klarna.net
itp-images.playground.klarnaservices.com
*.production.c2c.klarna.net
*.production.c2c.klarna.net
production.eu1.kcpslackbot.influencer-platform.klarna.net
klarnaservices.production.eu1.osm.klarna.net
*.playground.c2c.klarna.net
staging.images.creator.klarnaservices.com
*.klarnaservices.com
itp-images.playground.klarnaservices.com
*.production.c2c.klarna.net
staging.images.creator.klarnaservices.com
*.klarnaservices.com
conversion-report.playground.klarnaservices.com
klarnaservices.production.us1.osm.klarna.net
*.production.c2c.klarna.net
klarnaservices.production.us1.osm.klarna.net
*.ads.klarnaservices.com
itp-images.klarnaservices.com
klarnaservices.staging.eu1.osm.klarna.net
*.production.c2c.klarna.net
*.production.c2c.klarna.net
*.klarnaservices.com
klarnaservices.production.eu1.osm.klarna.net
*.ads.klarnaservices.com
*.production.c2c.klarna.net
conversion.playground.klarnaservices.com
*.playground.klarnaservices.com
*.production.eu1.media-integrations.klarna.net
*.playground.c2c.klarna.net
*.klarnaservices.com
klarnaservices.production.us1.osm.klarna.net
conversion-report.playground.klarnaservices.com
klarnaservices.production.us1.osm.klarna.net
*.klarnaservices.com
*.production.c2c.klarna.net
*.klarnaservices.com
*.playground.klarnaservices.com
*.playground.us1.media-integrations.klarna.net
klarnaservices.production.eu1.osm.klarna.net
*.klarnaservices.com
*.ads.klarnaservices.com
*.production.c2c.klarna.net
*.production.us1.media-integrations.klarna.net
conversion-report.klarnaservices.com
*.production.eu1.media-integrations.klarna.net
*.playground.klarnaservices.com
staging.itp-images.klarnaservices.com
conversion-report.klarnaservices.com
*.playground.klarnaservices.com
*.playground.klarnaservices.com
conversion-report.klarnaservices.com
*.klarnaservices.com
ads.klarnaservices.com
klarnaservices.production.eu1.osm.klarna.net
*.playground.klarnaservices.com
klarnaservices.staging.eu1.osm.klarna.net
klarnaservices.production.us1.osm.klarna.net
*.ads.klarnaservices.com
staging.intercomhook.nonprod.us1.influencer-platform.klarna.net
*.production.c2c.klarna.net
klarnaservices.staging.us1.osm.klarna.net
*.production.us1.media-integrations.klarna.net
*.playground.c2c.klarna.net

Certificate

The complete raw certificate details for *.playground.klarnaservices.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyK3Mrnfto5xvCHQrS+P
N7WA6IizBvg+iLlolF/mXfxhjGLF4c57LqTY/8EdXeaw8AKf6Y+m+SR8zy1sNN1S
RGKWKi4kUZQd5DLk3x9aLq2F9z76qp1dNxFxs0odlz+Ao1fj2sMVN/XxFFyW5Hup
rDpjs0iVH+0qTPUN+9KJpfCSNgdBOuV8oa9rZGZRriJy/UckisMqedDzCXPNGtV1
yrWaYapvf11HWk1zD9Ohs5TWI9giUcaUQ0ZRi5HVQaGu905zKEqu/dDTJwNlkgUM
qWLNX7Y19goRMLPXDoUOzno72524NtTwOZzujPu6iEfjnHvggGWC1saRPTQmXk/H
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7526761314163993965810158893478477111
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.playground.klarnaservices.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18069196519298462522568150604020133342333530551851341263280031819087235852537651988777542069430170555769764474343489390790937952583817819349456043480526939997595816101810590146225407077079985255050670667002234324592589145319904150101428727838112337890749114326798103397745443340408866680015856698861073134392328684751917480802566870443345733073648752482137438812830811830653249060848038387298940433341479388853424130460591064976986581557866358857209868554977378598414521799532872830426729138911794690358690841885933843482353181800196690985214247180432230911565336168647389428830712978566413900645402959879379698567033
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fdf8fd9973346a72f6fcb7554ab95840cd15402f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.playground.klarnaservices.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							01670076004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018dda95cdc30000040300473045022100952f40eb40ab5e6554c99a18d6b4eb791596f953d900ccab73b37bbf9b8a4dfb02200739b033528222e45e13b2dd5878e7762812c159c2600a6c24945cbfaf7d80e40075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000018dda95ce08000004030046304402207c19678d2c7f86f40e78b1b8280c2e454b23322c1a23a1a228aa9aedc84ab31302205d775e979150bf3117d80c9480c5f82322e1f69b36b9b414738e1da45fa631fc0076007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018dda95cd9a00000403004730450221008ffbe716b7afec1c2b39fa9bf0c7a1db3fb1000979c4750a51b77fa0da38703602202da98c4171f4ee6fc235ef3b73b8f28953bbaf9cbc315f4f80fccc54943c48b4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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