wms-fe.assoc-amazon.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:94:0b:20:38:94:ab:41:df:eb:21:ed:1f:cc:da:17 was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=wms-fe.assoc-amazon.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:94:0b:20:38:94:ab:41:df:eb:21:ed:1f:cc:da:17
Serial Number (int): 16719421543799875899841916452465334807
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b6:18:c1:97:30:83:dd:75:2e:74:34:1d:e3:45:25:ec:dc:71:94:97
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): f5:cf:75:b4:68:46:65:e8:54:9d:ef:2b:80:38:e1:e2:e3:9c:1d:f2
Fingerprint (sha256): f5:ba:a6:40:6c:18:75:02:6f:a9:77:56:f2:87:5b:f6:29:b7:95:af:7a:cc:ca:28:7b:c5:0c:f0:de:1b:b4:13

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate wms-fe.assoc-amazon.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wms-fe.assoc-amazon.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wms-fe.amazon-adsystem.com
wms-fe.assoc-amazon.com
wms.assoc-amazon.jp

Other certificates including the domain name assoc-amazon.com

(limited to 100 certificates)
rcm-fe.assoc-amazon.com
wms-eu.assoc-amazon.com
rcm-na.assoc-amazon.com
wms-eu.assoc-amazon.com
rcm-fe.assoc-amazon.com
rcm-eu.assoc-amazon.com
wms-na.assoc-amazon.com
rcm-fe.assoc-amazon.com
wms-na.assoc-amazon.com
wms-na.assoc-amazon.com
ws-eu.assoc-amazon.com
ws-fe.assoc-amazon.com
wms-na.assoc-amazon.com
wms-na.assoc-amazon.com
ws-fe.assoc-amazon.com
rcm-na.assoc-amazon.com
ws-eu.assoc-amazon.com
rcm-eu.assoc-amazon.com
ws-cn.assoc-amazon.com
rcm-fe.assoc-amazon.com
rcm-na.assoc-amazon.com
ws-eu.assoc-amazon.com
ws-cn.assoc-amazon.com
www.assoc-amazon.com
www.assoc-amazon.com
wms.assoc-amazon.com
wms-na.assoc-amazon.com
ws-na.assoc-amazon.com
rcm-eu.assoc-amazon.com
rcm-fe.assoc-amazon.com
wms-eu.assoc-amazon.com
rcm-fe.assoc-amazon.com
rcm-na.assoc-amazon.com
rcm-na.assoc-amazon.com
wms-cn.assoc-amazon.com
ws-fe.assoc-amazon.com
wms-na.assoc-amazon.com
www.assoc-amazon.com
ws-na.assoc-amazon.com
rcm-cn.assoc-amazon.com
rcm-cn.assoc-amazon.com
ws-na.assoc-amazon.com
rcm-na.assoc-amazon.com
wms-fe.assoc-amazon.com
wms-fe.assoc-amazon.com
rcm-eu.assoc-amazon.com
rcm-eu.assoc-amazon.com
ws-cn.assoc-amazon.com
ws-eu.assoc-amazon.com
wms.assoc-amazon.com
rcm-eu.assoc-amazon.com
ws-fe.assoc-amazon.com
ws-fe.assoc-amazon.com
wms-eu.assoc-amazon.com
www.assoc-amazon.com
rcm-eu.assoc-amazon.com
wms-eu.assoc-amazon.com
ws-eu.assoc-amazon.com
wms-fe.assoc-amazon.com
wms-na.assoc-amazon.com
wms-eu.assoc-amazon.com
rcm-fe.assoc-amazon.com
rcm-cn.assoc-amazon.com
wms-cn.assoc-amazon.com
ws-na.assoc-amazon.com
www.assoc-amazon.com
www.assoc-amazon.com
rcm-cn.assoc-amazon.com
ws-fe.assoc-amazon.com
ws-fe.assoc-amazon.com
wms-na.assoc-amazon.com
www.assoc-amazon.com
www.assoc-amazon.com
rcm-eu.assoc-amazon.com
wms.assoc-amazon.com
rcm-na.assoc-amazon.com
ws-fe.assoc-amazon.com
ws-cn.assoc-amazon.com
ws-cn.assoc-amazon.com
ws-na.assoc-amazon.com
rcm-cn.assoc-amazon.com
ws-fe.assoc-amazon.com
ws-cn.assoc-amazon.com
rcm-na.assoc-amazon.com
wms-fe.assoc-amazon.com
www.assoc-amazon.com
wms-fe.assoc-amazon.com
rcm-cn.assoc-amazon.com
rcm-eu.assoc-amazon.com
www.assoc-amazon.com
rcm-na.assoc-amazon.com
ws-eu.assoc-amazon.com
ws-na.assoc-amazon.com
wms-eu.assoc-amazon.com
ws-na.assoc-amazon.com
rcm-eu.assoc-amazon.com
ws-fe.assoc-amazon.com
wms-na.assoc-amazon.com
ws-eu.assoc-amazon.com
ws-na.assoc-amazon.com

Certificate

The complete raw certificate details for wms-fe.assoc-amazon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9K5gpb9ckAxt4KcBJKt
HVge4ngohxUzvOhX98P++GMa1uohHOoUlDnvvSE9H5/oB0dMF+AWoWRR3GyMt20D
ccCwTE1kh5qUdpR93e4m66uzUm5/eA0bgRomjAstGWrQMfs5suXSVYFokVa2JxlN
4QT4LX5GT1kRAcBF/1Ok0q0bZsx7g0DDyC6PQZemokQGCntLJWQOvIAqAQ+cKyid
fSuooErYfMGwwHku6xy/K3xOgCCMlNbItCHM6HXFIksKRO1iC92szG8ZgxyRT2K3
cyH3DSQ/7xD9aazJq/SumgVtIHaPGwf2S+xN1NHEsQQyDcfObl/YM/IHq55vtHh7
QwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16719421543799875899841916452465334807
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-16 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wms-fe.assoc-amazon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19670849466968500080628072767070041897206810422505357202503524739057606025785038637173343369971482247751987556688048759051782534671613435097654586373935324094021509252769102278695659271658755947071852055272788285688302087879768336660555475105698160682506497434268315564683233326781266279606250487099434314474904459224880525597373453663913838962066627143229637904777007449001928667234175424358650124233236065065034358319949448136587468430190172179391698725265938358151936937206260160040404178217789538597153796018601574386009761738599669741930179880898915991665589301431410071352420983563115216027248374248307204586307
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b618c1973083dd752e74341de34525ecdc719497
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (76 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wms-fe.amazon-adsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wms-fe.assoc-amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wms.assoc-amazon.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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