extapi-dev-a.ac02.dev-md.digital.ricoh.com

Issued by Amazon

About this certificate

This digital certificate with serial number 01:65:e3:2b:6b:02:55:e7:c0:78:bf:d0:ac:a9:03:1c was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=extapi-dev-a.ac02.dev-md.digital.ricoh.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:65:e3:2b:6b:02:55:e7:c0:78:bf:d0:ac:a9:03:1c
Serial Number (int): 1858257525405670084679262252072239900
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 0a:8c:68:93:0e:6c:8b:aa:71:2c:c8:2e:f4:e8:ef:a1:ce:53:31:75
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 13:07:f9:8c:e8:27:05:bd:f0:e9:df:99:22:bd:d7:77:85:48:e3:b6
Fingerprint (sha256): 00:41:30:92:96:0a:3d:ca:ba:f7:85:33:77:59:81:28:dc:71:d7:cd:b0:5b:c7:66:51:96:bd:d9:5f:c0:6b:98

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate extapi-dev-a.ac02.dev-md.digital.ricoh.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for extapi-dev-a.ac02.dev-md.digital.ricoh.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

extapi-dev-a.ac02.dev-md.digital.ricoh.com

Other certificates including the domain name ricoh.com

(limited to 100 certificates)
stapp-dev-5.in-house.ac03.dev-md.digital.ricoh.com
health.vmpower.io
extapi-dev-a.ac02.dev-md.digital.ricoh.com
gtl01.rcc.ricoh.com
dc-dev1.rinfra.ricoh.com
allow.sterda.com
*.start.ricoh.com
ez.fukuoka.status.ricoh.com
rxdom.g-tas.ricoh.com
remote-concierge.beta.csp.ricoh.com
stapp-dev-05.in-house.ac03.dev-md.digital.ricoh.com
www.na.inst.ricoh.com
eu.iwb-add-on-service.status.ricoh.com
capco-status.polaris.synopsys.com
app-status.cloudsign.jp
*.devu.smart-integration.ricoh.com
drco1i.cubic.ricoh.com
changes.carta.com
*.iot.deve.smart-integration.ricoh.com
*.na.smart-integration.ricoh.com
*.scrap.smart-integration.ricoh.com
eu.iwb-add-on-service.status.ricoh.com
pcont-dev-1.ac01.dev-md.digital.ricoh.com
*.io-ext-devu-dev.rinfra.ricoh.com
en.riws.status.ricoh.com
connect-status.instacart.com
ssl.cdngc.net
abrsonline.atostatus.com.au
abrsonline.atostatus.com.au
ez.fukuoka.status.ricoh.com
contents.ap1-dev.cdf.ricoh.com
test.procfs.ricoh.com
edge-api.ft.dm.deve.smart-integration.ricoh.com
eu1-status.mulesoft.com
na.smart-integration.status.ricoh.com
na.smart-integration.status.ricoh.com
advantagestatus.paradox.ai
contents.dev.cdf.ricoh.com
d4.specialcounsel.technology
*.rdata.ricoh.com
app-status.cloudsign.jp
*.smartitconcierge.ricoh.com
up.ja.stage.amspf.ricoh.com
changes.carta.com
12a10fad.status.cleafy.cloud
api-dev-06.ac03.dev-md.digital.ricoh.com
bare-metal-servers.status-ovhcloud.com
advantagestatus.paradox.ai
ricoh.com
*.sav.ex.start.ricoh.com
pcont-dev-ds.ac02.dev-md.digital.ricoh.com
*.scrap.accounts.ricoh.com
drco2i.cubic.ricoh.com
cwpstorage.status.symantec.com
jt.inst.ricoh.com
bare-metal-servers.status-ovhcloud.com
prod.co2-estimator.ivy.ricoh.com
stapp-dev-a.in-house.ac02.dev-md.digital.ricoh.com
appstatus.justworks.com
*.ric.ricoh.com
cs.status.ricoh.com
*.io-ext1001-na.rinfra.ricoh.com
cogver1.rcog.ricoh.com
na.smart-integration.status.ricoh.com
people.ohrengineering.com
eu1-status.mulesoft.com
prod.co2-estimator.ivy.ricoh.com
na.srs.status.ricoh.com
d4.specialcounsel.technology
status.dev.rkaizen.ricoh.com
abrsonline.atostatus.com.au
oa.aresflare.com
ja.riws.status.ricoh.com
bare-metal-servers.status-ovhcloud.com
*.na.smart-integration.ricoh.com
abrsonline.atostatus.com.au
alerts.illinoisstate.edu
alerts.illinoisstate.edu
api-dev-5.ac03.dev-md.digital.ricoh.com
eaa.status.akamai.com
na.smart-integration.status.ricoh.com
bare-metal-servers.status-ovhcloud.com
12a10fad.status.cleafy.cloud
www.cost-visualizer.ricoh.com
dc-scrap.rinfra.ricoh.com
*.cent7.smart-integration.ricoh.com
bare-metal-servers.status-ovhcloud.com
*.ric.ricoh.com
en.riws.status.ricoh.com
*.example-dev1.rinfra.ricoh.com
cwa.status.symantec.com
mgmt.cons1.os5.unics.ricoh.com
processing.azurepai.pfu-us.ricoh.com
*.pf-info-dev.rinfra.ricoh.com
cwpstorage.status.symantec.com
eu.iwb-add-on-service.status.ricoh.com
www.inst.ricoh.com
eaa.status.akamai.com
dev2.ap-northeast-1.rita.cip.ricoh.com
industry.ricoh.com

Certificate

The complete raw certificate details for extapi-dev-a.ac02.dev-md.digital.ricoh.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnnFid3hiYeQWgg2+IjiX
tqUPRKUR+uIcG2VgCAeR/3lJsqNTi0MQuLO9qXfdq1ei7ISM2j+fBDMb/KR57qnW
mqL1gtYIJwpH8zV023nW0rBPJLbCs0nouDbnZ7kURFxbHD+XmrdP19GzEFHDP8eO
RanpCncyQ+U1QUPTAsNccIYpXhb2nlvProXo884bz/bXyKCc6mpxwSTWhGPr95Ni
hXldyEdRSylnvzrpd2TZ+IS+r3Ojd1AUKdKiaPEX9bsK7nkqSgSCS2RaFfso3cIN
wrQIM0gdqzH/iAF8xILzO6Qf71r2rVSe7Rh7W4TOah2BhQjJ50uNzR6SmJYftSPf
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1858257525405670084679262252072239900
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-08 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'extapi-dev-a.ac02.dev-md.digital.ricoh.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20001564232258743627398224890020563959231394155397988999241363206641441780040254450823259334123199524333589209718509175746132073857283489793946009385201975016987306116687550961983478634827770009479913533757066402328285499262221773185295878854361052622639890871020017784704825916794234238347479306077656896257018871564794502643253856798125095554438815218888521676006190413655187506187596237880671329705601929564511331036718036853881286632074092152174692707239443733587243223587826438078183562185745479075171627372918868527434391623142372028087522646292898123559599882051831948261308910492705763684212609939994455564063
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0a8c68930e6c8baa712cc82ef4e8efa1ce533175
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extapi-dev-a.ac02.dev-md.digital.ricoh.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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