*.scoreeks1.infra.score.siemens.cloud

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 04:62:d5:45:7f:c0:cd:f6:17:cd:a3:33:ab:1a:21:8b was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.scoreeks1.infra.score.siemens.cloud

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:62:d5:45:7f:c0:cd:f6:17:cd:a3:33:ab:1a:21:8b
Serial Number (int): 5830082734802550518670881015258030475
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 5c:01:9a:52:86:d8:8e:79:95:41:ef:a6:5b:c9:76:83:bb:42:2c:26
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): a7:b8:b2:54:0d:38:df:cb:51:ed:7e:55:46:f7:cc:d7:e1:7b:6a:e5
Fingerprint (sha256): 00:42:07:69:bb:1b:90:6a:fe:2a:22:21:a8:96:7b:d0:43:21:1a:d6:97:c2:95:1f:93:f7:1d:45:ef:a2:58:58

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate *.scoreeks1.infra.score.siemens.cloud

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.scoreeks1.infra.score.siemens.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.scoreeks1.infra.score.siemens.cloud
*.score-eks1-vc.scoreeks1.infra.score.siemens.cloud

Other certificates including the domain name siemens.cloud

(limited to 100 certificates)
jira.gdmc.siemens.cloud
pilot2.helpmee.siemens.cloud
demo-frankfurt.iip.siemens.cloud
saleskits.siemens.cloud
*.scoreeks1.infra.score.siemens.cloud
cic-berlin.siemens.cloud
*.stephan.sp275.tiat.siemens.cloud
fleetmanager.demo-evosoft.siemens.cloud
sn-189.opscenter-dev.siemens.cloud
annotation.theia.ct-rda-bam-mic.siemens.cloud
jira.siemens.cloud
cssfe.bt-dev.siemens.cloud
confluence.gdmc.siemens.cloud
example.gwap-dev.siemens.cloud
*.ecar-dev.masglobal.siemens.cloud
soc.siemens.cloud
sidriveiqtwin-lda-q.siemens.cloud
*.spicetest.siemens.cloud
pulse.siemens.cloud
tmb.security-int.siemens.cloud
tms.daac-apps.siemens.cloud
idaas.siemens.cloud
iot-apm-manager.mosaic-dev.siemens.cloud
sifrai.siemens.cloud
fair.navigator.gds-energy.siemens.cloud
*.naf-pipeline.nav2cloud-build.bt.siemens.cloud
proxy.uat.phoenix.si.siemens.cloud
simpleaccess-siemens-id.siemens.cloud
platform.int.360viewer.bpcloud.siemens.cloud
siemensfm.idea-company.siemens.cloud
*.eightfold.ai
evoawsesp.sap.siemens.cloud
btssp-smtp.sz.bt.siemens.cloud
qa-dcs.apps.siemens.cloud
*.fleetmanager.emob-fleetportal-qa.siemens.cloud
soc-x.siemens.cloud
myid-test.hackathon.daai.siemens.cloud
snapp.scm.mosaic-qa.siemens.cloud
app1.mendix.siemens.cloud
allocation-uat.siemens.cloud
*.authorization.siveillance-dev.siemens.cloud
flex-ops-advisor-be.mosaic-qa.siemens.cloud
sj-299-nvme-uuid.opscenter-dev.siemens.cloud
portfolio.mosaic-dev.siemens.cloud
*.profiles.prod.dmp.siemens.cloud
siemens-apm-appdevelopment.mosaic-dev.siemens.cloud
genelba-apm-andsrv.mosaic-dev.siemens.cloud
redirects.dc.siemens.com
*.score01.itips.score.siemens.cloud
zero-engineering.apps.siemens.cloud
*.rpe.global.siemens.cloud
api.pages.playground.isec.siemens.cloud
*.k8.siveillance.siemens.cloud
*.idaas.siemens.cloud
*.istio.thomas.sp275.tiat.siemens.cloud
mlhub.ct-rda-bam-mic.siemens.cloud
jira-test.sz.bt.siemens.cloud
alfredo.siemens.cloud
silounge-poc.siemens.cloud
iot-apm-appsrv.mosaic-dev.siemens.cloud
access.bt.siemens.cloud
dcs.apps.siemens.cloud
api.aws.siemens.cloud
api.dev-ram.apps.siemens.cloud
evoawsesd.opscenter-dev.siemens.cloud
demo.burstdetection.apps.siemens.cloud
sn-cops-72.opscenter-dev.siemens.cloud
qlik-test.si.siemens.cloud
*.ir.adminaccess.siemens.cloud
documentsservice.spicetest.siemens.cloud
acmdemo.apm.siemens.cloud
rancher.tiat.siemens.cloud
pl-cops-312.opscenter-dev.siemens.cloud
local-2380272-pvt.dev.planimporterapi.bpcloud.siemens.cloud
siemensfm.idea-company.siemens.cloud
data-commons.mobilityai.siemens.cloud
packages.hpc.siemens.cloud
*.siq-dev.apps.siemens.cloud
shell.playground.isec.siemens.cloud
*.naf-pipeline.nav2cloud-build.bt.siemens.cloud
int.motion.siemens.cloud
rancher.dev.tiat.siemens.cloud
api.media-service.dvm.siemens.cloud
logcenter.almxserv.siemens.cloud
*.digitaltwin.bt.siemens.cloud
*.sz.bt.siemens.cloud
dev.gbs-ls.ceres.siemens.cloud
log.graph.siemens.cloud
cf-monitor.playground.siemens.cloud
evoawsesp.opscenter-dev.siemens.cloud
atos-data-labeling.playground.daai.siemens.cloud
sj-166-peering.opscenter-dev.siemens.cloud
mobilityai.siemens.cloud
building360-dev.siemens.cloud
petshop.playground.isec.siemens.cloud
mlhub.ct-rda-bam-mic.siemens.cloud
pl-cops-488-fix-1.opscenter-dev.siemens.cloud
gojiratvm.mindsphere-ops.siemens.cloud
*.stephan.sp275.tiat.siemens.cloud
directdownload.si.siemens.cloud

Certificate

The complete raw certificate details for *.scoreeks1.infra.score.siemens.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn558gcnBdbwOobqUWUsz
Sa2r37PEdhgx3PjT8+KobIxKn1fLITpONr06NBVlWkUqi7xOC5a4y0GbiltW/e/D
cfk+rLANaBfDpofgTyNLRM83JgEGYq1FN3/EpwC4BXTEFhqpqbRaAckSGv5X8BWV
Nn2J7n7mvyCr2AFQqegn++nHnb08rF0GDV9fHm8+aU+FLWXkvR1lfD89P3h2frJr
6diR9ZsE993gf8eVabPUew8uF2fuj4zdWpAAvt5DFKDh7jH51yRdBPByYQe3kNnN
7MjOqVctrRD42xlZVWhNU7v/Oda2Mf5Xgx/LFYYabVYbCoCpkqZiBA6n3JIOO38Z
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5830082734802550518670881015258030475
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.scoreeks1.infra.score.siemens.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20150043024240534638825646070674572795269756593203764724624248023158670019531871061015158766854039309788650837945756731396520446285997515144535681090350992923691385423827727524603544483162709495651604196013738112880985429727483410548383956465338798195483830882148510290268744596394159140903772224338998046280231678340740198819095782359752364387834854001271245711034923445251903884470948374285847009155467920274189830620558128093933581557193300666059433449642299063917955233635270255999897847386140581444054908635895034749215169845600435068432586155141399110490169281024515964200294593773203582647685738863964553419009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5c019a5286d88e799541efa65bc97683bb422c26
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scoreeks1.infra.score.siemens.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.score-eks1-vc.scoreeks1.infra.score.siemens.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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