s3.cn-north-1.amazonaws.com.cn

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0d:ef:47:55:e4:ce:41:62:5d:c6:6d:ed:2e:2a:34:e0 was issued on by Amazon.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=s3.cn-north-1.amazonaws.com.cn

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:ef:47:55:e4:ce:41:62:5d:c6:6d:ed:2e:2a:34:e0
Serial Number (int): 18522369750681332858503880298484872416
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 07:05:0d:a7:a2:7c:fc:15:98:b5:06:9f:a9:0e:29:fe:08:5c:c9:a7
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 2f:6c:68:12:fb:2d:ea:b2:25:91:3b:b2:37:4f:f5:01:89:4b:7f:1d
Fingerprint (sha256): e4:4f:c3:09:9d:da:11:a8:50:43:e0:57:8c:78:94:8b:c0:79:83:94:8d:1a:97:7f:2e:66:13:ef:44:bb:b0:ba

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate s3.cn-north-1.amazonaws.com.cn

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for s3.cn-north-1.amazonaws.com.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

s3.cn-north-1.amazonaws.com.cn
*.control.vpce-0f50777947883200f-5sp4yrbm-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn
*.accesspoint.vpce-0f50777947883200f-5sp4yrbm-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn
*.s3.cn-north-1.amazonaws.com.cn
bucket.vpce-0f50777947883200f-5sp4yrbm-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn
*.bucket.vpce-0f50777947883200f-5sp4yrbm-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn
*.bucket.vpce-0f50777947883200f-5sp4yrbm-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn
*.s3-control.cn-north-1.amazonaws.com.cn
*.s3-accesspoint.cn-north-1.amazonaws.com.cn
*.control.vpce-0f50777947883200f-5sp4yrbm-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn
*.accesspoint.vpce-0f50777947883200f-5sp4yrbm.s3.cn-north-1.vpce.amazonaws.com.cn
*.accesspoint.vpce-0f50777947883200f-5sp4yrbm-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn
bucket.vpce-0f50777947883200f-5sp4yrbm-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn
bucket.vpce-0f50777947883200f-5sp4yrbm.s3.cn-north-1.vpce.amazonaws.com.cn
*.accesspoint.vpce-0f50777947883200f-5sp4yrbm-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn
*.control.vpce-0f50777947883200f-5sp4yrbm.s3.cn-north-1.vpce.amazonaws.com.cn
*.bucket.vpce-0f50777947883200f-5sp4yrbm.s3.cn-north-1.vpce.amazonaws.com.cn
bucket.vpce-0f50777947883200f-5sp4yrbm-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn
*.control.vpce-0f50777947883200f-5sp4yrbm-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn
*.bucket.vpce-0f50777947883200f-5sp4yrbm-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for s3.cn-north-1.amazonaws.com.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aKb9o+oZLStsncHe0f2
X3V+RygImsIMbx4W9VUrMjWF1WbrHG8Oli4EdZnfYDwRGzyEyLwmeyPNkOYYLMN/
v6zlI0POiw5bhmmbFWjiKuGBa4xEF8f86FqaQol2YY2Ioe7kc/DS9utbHEG5a/8e
LlZpZEzSzjk4HQ/rFiKTGCvh4aQVlZ4yejzrxzLfaQO2gqKd0ubivavj8m98rWkg
viFM2Tw9o2clLpTn4uwouuzJ1lWxIuK1yb7uojn/3Vnw+eOW42oGpq76TgHKFtbx
Hc+gG0CmCKWQgjzitLXLjWfu027uGqcO1YtKXro/u2n+mFEOZXaNFr7WqiDnKovr
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18522369750681332858503880298484872416
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 's3.cn-north-1.amazonaws.com.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27978850997850872061078342659204796585407766372245162961634541072004456268733155740341755024851779384810678471541990179173199349734189669695140940765857173998902187300888388250858171278569502329862205784092753931405229396502983604741768933667432700169631476007182441216119358868136854740895000617258496579636353228029378628397966028059230084226032860704874844056034980324774722457222600418809670851884986724853392917169465925581015759949652307004865663334594652282009260103714861243347655772806286021908078340360273447659012243957292615630263758472897254212969919845012250793510250178203295556529730394929308269014009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							07050da7a27cfc1598b5069fa90e29fe085cc9a7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1566 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-0f50777947883200f-5sp4yrbm-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-0f50777947883200f-5sp4yrbm-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-0f50777947883200f-5sp4yrbm-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-0f50777947883200f-5sp4yrbm-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-0f50777947883200f-5sp4yrbm-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-control.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s3-accesspoint.cn-north-1.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-0f50777947883200f-5sp4yrbm-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-0f50777947883200f-5sp4yrbm.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-0f50777947883200f-5sp4yrbm-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-0f50777947883200f-5sp4yrbm-cn-north-1d.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-0f50777947883200f-5sp4yrbm.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.accesspoint.vpce-0f50777947883200f-5sp4yrbm-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-0f50777947883200f-5sp4yrbm.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-0f50777947883200f-5sp4yrbm.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucket.vpce-0f50777947883200f-5sp4yrbm-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.control.vpce-0f50777947883200f-5sp4yrbm-cn-north-1a.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bucket.vpce-0f50777947883200f-5sp4yrbm-cn-north-1b.s3.cn-north-1.vpce.amazonaws.com.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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