regular.us-east-1.alpha.atta.kaspian.amazon.dev

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:c9:46:86:76:c5:4f:10:9b:4e:19:02:60:7c:da:6a was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=regular.us-east-1.alpha.atta.kaspian.amazon.dev

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:c9:46:86:76:c5:4f:10:9b:4e:19:02:60:7c:da:6a
Serial Number (int): 19654274031558118021012604008905103978
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c2:58:ff:b1:84:a2:72:99:57:db:0b:00:f3:dd:f0:a1:35:2a:f3:ce
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): f2:b2:7d:e9:d7:63:d2:67:b1:b6:9a:f4:23:e6:09:79:1d:a2:37:04
Fingerprint (sha256): d6:c3:d2:48:5f:cb:51:bb:27:b4:c6:13:2d:35:94:0f:4c:14:4f:ba:14:0c:fe:78:6a:25:85:71:8d:e5:36:4f

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate regular.us-east-1.alpha.atta.kaspian.amazon.dev

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for regular.us-east-1.alpha.atta.kaspian.amazon.dev

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

regular.us-east-1.alpha.atta.kaspian.amazon.dev

Other certificates including the domain name amazon.dev

(limited to 100 certificates)
regular.us-east-1.alpha.atta.kaspian.amazon.dev
air.lmaq.last-mile.amazon.dev.lmaq.last-mile.amazon.dev
sungyenl.alpha.console.materials.sustainability.amazon.dev
eu-west-1.beta.sblandingpageservice.advertising.amazon.dev
*.timlawso.physical.advertising.amazon.dev
us.beta.itinerary-manager.onroad-execution.last-mile.amazon.dev
lialx.test.attribution.privacy.amazon.dev
coredump-parser.eink.amazon.dev
auth.prototype.alps.music.amazon.dev
andrena.niksinn.icon.amazon.dev
us-west-2.alpha.int.lab.dml.alexa.amazon.dev
deeplink.prod.alps.music.amazon.dev
lifepi.timlawso.physical.advertising.amazon.dev
dev-1.pdx.nanobots.alexa.amazon.dev
jp.datastash-prod.pacman.last-mile.amazon.dev
fba-i2i-console.scot.amazon.dev
beta.cruzoliv.people.amazon.dev
beta.eu-west-1.tax-accessor.cmp.chroma.intech.amazon.dev
central.lmaq.last-mile.amazon.dev
vinoth.test.creative-report.calltoaction.advertising.amazon.dev
api.na.alpha.substitution-state-service.subs.f3.amazon.dev
dpd-debug.devices.dev.rss.ring.amazon.dev
www.nickjmil.people.amazon.dev
prod.luma.workshop.mathieud.people.amazon.dev
andrena.niksinn.icon.amazon.dev
fpd.sumantbh.icon.amazon.dev
gulbt-failure-analysis.bsxqa.digital-books.amazon.dev
static.alpha.luma.workshop.mathieud.people.amazon.dev
*.beta.psidr.payments-security.amazon.dev
cdj.invite.prototype.alps.music.amazon.dev
virtual.opstechit.amazon.dev
beta.step-up-tool.rbs.amazon.dev
user.prototype.alps.music.amazon.dev
*.alpha.mouse.payments-security.amazon.dev
beta.supernova-selfservice.amazon.dev
us-west-2.alpha.shbhvya.people.amazon.dev
avus-na-onebox.upsell.video.alexa.amazon.dev
*.search.acp.selling-partners.amazon.dev
dev4.cyclone.gdq.amazon.dev
upload-flexsimwebapp.wwde.amazon.dev
*.rongzhou.people.amazon.dev
us-west-2.alpha.lab.dml.alexa.amazon.dev
gamma.cubeout.grokalert.last-mile.amazon.dev
placement.proxy.gamma.us-east-1.zds.arc.hit.amazon.dev
abhisaha.rpmsui.cloudtune.amazon.dev
api.beta.supernova-selfservice.amazon.dev
lease-management.gunapal.people.amazon.dev
us.beta.itinerary-manager.onroad-execution.last-mile.amazon.dev
*.app-flow.mshop.amazon.dev
wichor.nanobots.alexa.amazon.dev
www.jiegao.people.amazon.dev
testrail.primeair.amazon.dev
avpes-na-beta.purchase.video.alexa.amazon.dev
eu-west-1.prod.lab.dml.alexa.amazon.dev
beta.gm.plukemea.people.amazon.dev
alpha.pdx.external-gateway.eve.alexa.amazon.dev
docs.datapath.amazon.dev
alpha-test.timeoff.atoz.amazon.dev
jxf.jxf.people.amazon.dev
gamkavya-cln-tracker.bsxqa.digital-books.amazon.dev
na.datastash-gamma.pacman.last-mile.amazon.dev
tot.aft.amazon.dev
alpha.audit.tracker.ab.amazon.dev
*.beta.itinerary-manager.onroad-execution.last-mile.amazon.dev
andrena-test.niksinn.icon.amazon.dev
jingjp.test.attribution.privacy.amazon.dev
aim-dev-kdc.internal-audit.amazon.dev
beta.secpar.bm.amazon.dev
api.integ.mx-internal.igt.physical-stores.amazon.dev
beta.use1.hitas.icon.amazon.dev
api.us-west-2.alpha.shopper-gateway.subs.f3.amazon.dev
fokker.irx.icon.amazon.dev
*.accounting-royalty.digital.amazon.dev
jayara.beta.step-up-tool.rbs.amazon.dev
alpha.leaderboard.abtools.mathieud.people.amazon.dev
flock.primeair.amazon.dev
us-west-2.prod.sblandingpageservice.advertising.amazon.dev
drawing-alpha.sammonb.people.amazon.dev
na.prairiesquirrel-gamma.pacman.last-mile.amazon.dev
alpha.resolution-service.artifacts.datapath.amazon.dev
drawing.sammonb.people.amazon.dev
octopus.sm.amazon.dev
andrena.niksinn.icon.amazon.dev
deldieth.people.amazon.dev
alpha.leaderboard.abtools.mathieud.people.amazon.dev
pim-api.dev.nickgo.people.amazon.dev
audience-insights.advertising.amazon.dev
sxo-sentiment.sps.amazon.dev
us-west-2.alpha.internal.lab.dml.alexa.amazon.dev
api.calmond.people.amazon.dev
aim-gamma.internal-audit.amazon.dev
api.beta.rosebread.sustainability.amazon.dev
shaynaw.us-west-2.beta.api.rosebread.sustainability.amazon.dev
luma.andlau.people.amazon.dev
api.na.prod.substitution-state-service.subs.f3.amazon.dev
prod.usw2.hitas.icon.amazon.dev
api.na.beta.substitution-state-service.subs.f3.amazon.dev
crawl-management.beta.arcc.s3c.amazon.dev
wichor.nanobots.alexa.amazon.dev
vinoth.test.creative-report.calltoaction.advertising.amazon.dev

Certificate

The complete raw certificate details for regular.us-east-1.alpha.atta.kaspian.amazon.dev in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/Ig3+iXrwy+eMnTplmm
/E0nUu7HNO0iVF2N8cEFgBjXrCn8T8zkMSCQRIecLoCDM3x2jUB1CmsPVVERCEZt
UOXjzaIQj9QXZHIm2lvxJh66VHUVtuE3kefsZq3opuRe/zrHHaSQ3gGofOfqBXJK
l/iKGBk9Pty6xMVjFbhL6IQunFnCO304Xd/MQTFy0UjmnbLetPxEael0SWE/4ybe
b6Ujp97FtRdRyncwg3nMqVKF37Bh1dVBcBrJsIT1DNVGMWtPX5XAs54NRYb/AHdD
KYF4KjdF+BTDDHC33x+xy7+2zUFcVbGxT6Q1oFfcDKF8KPN9X/YDNtwT5YttzfeO
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19654274031558118021012604008905103978
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'regular.us-east-1.alpha.atta.kaspian.amazon.dev'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22716054561160279866922155773381013067845410919664427914023273553071179926230939923064080048256336272620713328584218298656689906732876923187163776473415312857968160416203945820794586445649872422805612115508871668888707886385437231058981619445215492577552204831738558169992463570467558098376826304448070004574917831697297393343889447979296297555516240083147297000638907914847507802682014617899330116597337708989590633979061472994424800012927133156663923208893600451602291153924732134261721369916307721161282224036396478805690925468039438704544614712975669688377875562333235247499694344298800563167273737455468925128267
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c258ffb184a2729957db0b00f3ddf0a1352af3ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regular.us-east-1.alpha.atta.kaspian.amazon.dev'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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