redirects-stage.test.dc.siemens.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0a:65:61:9a:b5:d7:c4:ea:b0:74:75:fa:28:2c:42:35 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=redirects-stage.test.dc.siemens.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:65:61:9a:b5:d7:c4:ea:b0:74:75:fa:28:2c:42:35
Serial Number (int): 13818681591707393470223038796691948085
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 64:4b:88:34:ec:19:7b:fd:32:cd:99:8b:0c:03:51:62:c1:e0:e6:84
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 1b:30:5f:1c:75:56:ea:29:f1:58:2b:07:ed:37:7d:9a:fd:39:ef:97
Fingerprint (sha256): 00:46:de:70:84:b5:e7:16:13:b5:4e:ed:0d:0e:dc:6f:c6:7e:b8:af:e2:be:a9:0f:61:21:ab:ef:95:16:c1:36

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate redirects-stage.test.dc.siemens.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for redirects-stage.test.dc.siemens.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

redirects-stage.test.dc.siemens.com

Other certificates including the domain name siemens.com

(limited to 100 certificates)
brandville.siemens.com
industryservice.siemens.com
tciq10lb.gplm.siemens.com
application-hu.siemens.com
npm.siemens.com
plsccmcmg.industrysoftware.automation.siemens.com
tgsprs.siemens-emis.com
www.medical.siemens.com
sow-int.siemens.com
railmall.siemens.com
ura-mx.siemens.com
vdi-mil.industrysoftware.automation.siemens.com
identityloc2.industrysoftware.automation.siemens.com
mds-mailsync.siemens.com
siemens.com
sts-online.siemens.com
redirects-stage.test.dc.siemens.com
fss.us-east-1.sws.siemens.com
turn65.circuit.siemens.com
btpresales-q.siemens.com
jumphost-us.hccloud.siemens.com
volttest.siemens.com
ppm.usa.siemens.com
dev-publish.aemweb.industrysoftware.automation.siemens.com
w3.energy.siemens.com
api-ws.qa.sensproducts.siemens.com
sensproductsyslog.cloud.siemens.com
www.siemens.com
emmt.siemens.com
mailman.industrysoftware.automation.siemens.com
sharepoint-maintenance.siemens.com
vdesktop-aae2.siemens.com
hit.sbt.siemens.com
dev.ws.duve.siemens.com
portal2.industryservice.siemens.com
myid-qa.siemens.com
EGMRS.siemens.com
citiauth.industrysoftware.automation.siemens.com
origin.dev.cms.c2.dc.siemens.com
beta04.industryservice.siemens.com
solidedge.siemens.com
*.test.teamplay.siemens.com
MysiteQA13.industrysoftware.automation.siemens.com
api-myshare.siemens.com
2013-internet-valid.catestsite.siemens.com
primavera-rdweb.siemens.com
c4b.gss.siemens.com
failover.www.siemens.com
console.monitoring.dev.eu-central-1.sws.siemens.com
ura-mum-in.siemens.com
sw.siemens.com
testing-dgswsus.energy.siemens.com
esurvey.siemens.com
turn02.circuit-test.siemens.com
community.plm.automation.siemens.com
api.dc.siemens.com
circuit-test.siemens.com
mspki.na.entitlement.siemens.com
www.motores.siemens.com
www.pia-selector.automation.siemens.com
productadvisor-demo.mindsphere.siemens.com
winlog01.industrysoftware.automation.siemens.com
elearning-test.healthcare.siemens.com
datahub.mindsphere.siemens.com
extranet.webapp.swe.siemens.com
tcim30v01.gplm.siemens.com
www.csm.energy.siemens.com
data.cdn.siemens.com
smda2.siemens.com
shop.healthcare.siemens.com
login.ias.plm.automation.siemens.com
skb.healthcare.siemens.com
login.siemenswelt.siemens.com
cpq.healthcare.siemens.com
w802.siemens.com
ussciport.medical.siemens.com
s2c-supplier-qa.siemens.com
webtac2.industrysoftware.automation.siemens.com
www.sitrain-int.siemens.com
getpaid.siemens.com
www.ea-testreports.siemens.com
siecus.siemens.com
www.csm.energy.siemens.com
sfdcauth.energy.siemens.com
ura-tok.industrysoftware.automation.siemens.com
health-advisor-dev.mindsphere.siemens.com
ld-academy-test.siemens.com
engage.siemens.com
extranet-backend-ma1.eps.siemens.com
productinformation.healthcare.siemens.com
assetperformance.navigator.siemens.com
dev-fileshare.siemens.com
w3.siemens.com
amc2csg.siemens.com
test-myregistration.siemens.com
*.eightfold.ai
www.healthcare.siemens.com
mspki.rs.entitlement.siemens.com
robotics3dvdi.siemens.com
amc2csg.siemens.com

Certificate

The complete raw certificate details for redirects-stage.test.dc.siemens.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvDqfl3hMnC3sHZiIAKGz
Muf7poyqAtxbdWh1BAqODuZ54m9Z0ssXrlvlP6CpUbVCA+Nm1MWRnRXN/hY4tpBE
V4wJKIk/sVFDdvhxzA9HofmuL4smSsXrVkWKAuuccy12zHmziKr/4JsISbPoYptB
OoG0OJsb4eBuyNrVmSGVeCxfN8S7hqJkFJLg2jWqApwhFV7rNvgNR2hEhlPtmZ8P
/a1Z8J7P6bYazbaJI55UKbmDbB7G4cKepZz4eD01+qwKPqOk9z0eUGd3RwCx538Q
qQNOL2eEfXeYluWvpH+JHJJ0/tvSRmshUwqubeOOvSiie/91wBNVB4ZLUFX+FzA7
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13818681591707393470223038796691948085
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'redirects-stage.test.dc.siemens.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23761709612049601440778778815046248511221022069177562272732767660568723927102159957786894081987062050692895389455575786204701175343870153405858533732656486934410673601530257864777048583147827059069024754890795977574734571264335165300566706729619197883923281033625910506433463778476217656597093913203878024891808702616485811088517929134310228668016139951061440293411557637284596665852645036772592337244739766559252382155324441076793096778433612316041163497001506263543974365594485586764975025078211039733308098480532343428927533185701790348436946920500737170322383748742225509691932305226866795309090593104666408532969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							644b8834ec197bfd32cd998b0c035162c1e0e684
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (39 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redirects-stage.test.dc.siemens.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0082eda47dc687bdd915f053ae171b6089f374c9a54f3de7eed665d0d7451690c4dfc9eeb3af27a90065d511b7da3386a27ff37d5ac19c078717da64195653193144a448c15e47dea2de0c9ca1d663198529d6874062ef7bc14d1cc42be3324898224b3db303bc9af1add6787e89c061b7dd0977338ebe31cdb36045fa16406c801b366ca07b06691b713cc70e5a4c7b02f78369d8a89d42138368cbd876f6045cdbb180f8e128c2833654b8b7f0884470d15de454c3190c77ab5df891edd3763f26e3d1cc52207ab2ea1f5035bd9e44249b064a4c48c1b882c2462dabd3e92b231aaea354a0abf1d5135d1b1232efb1749ebcd1a7b9b2b4d6d252426a497ca075