cdhxchrfederation-test-service.iam-oss.data.bmw.cloud

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 07:1a:7b:7e:c6:1a:c5:07:58:7d:9c:7d:4a:d7:47:32 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cdhxchrfederation-test-service.iam-oss.data.bmw.cloud

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:1a:7b:7e:c6:1a:c5:07:58:7d:9c:7d:4a:d7:47:32
Serial Number (int): 9442100469256437039074187136457983794
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: a5:7c:39:7d:f6:38:52:b2:8e:c0:3d:bc:d2:69:2e:e0:40:72:d2:19
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 42:32:d4:1b:c1:db:ef:e7:c0:40:47:98:52:66:0a:26:8c:90:b8:d8
Fingerprint (sha256): 00:4b:c6:72:bd:5e:60:39:74:34:66:1d:5f:ac:05:81:77:05:24:6b:87:d9:10:7b:e5:98:e1:ff:2c:8b:ea:c3

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate cdhxchrfederation-test-service.iam-oss.data.bmw.cloud

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cdhxchrfederation-test-service.iam-oss.data.bmw.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdhxchrfederation-test-service.iam-oss.data.bmw.cloud

Other certificates including the domain name bmw.cloud

(limited to 100 certificates)
drhub-i.aws.bmw.cloud
api.emea.deperso-dev.data.bmw.cloud
admin.smoss.apac.bmw.cloud
cdp.hst-dev.bmw.cloud
cdhxchrfederation-test-service.iam-oss.data.bmw.cloud
cdhxcoreexternal-authentication.iam-oss.data.bmw.cloud
cdhxlpaexternal-authentication.iam-oss.data.bmw.cloud
sf-mco.aws.bmw.cloud
resources-dev9.data.bmw.cloud
impxmv1.impact-connector-dev.data.bmw.cloud
api.loyalty-dev.my.bmw.cloud
cdhxdev14idp.iam-int.data.bmw.cloud
api.aiforeng.aws.bmw.cloud
b2cds-neo-storybook.int.b2cds.eu-central-1.aws.bmw.cloud
rvm-test.aws.bmw.cloud
api.rita-dev.azure.bmw.cloud
data-middleware.aws.bmw.cloud
cdhxlu2.api-dev.data.bmw.cloud
us-east-1.api-dev.data.bmw.cloud
graphql.orbit-selfservice-test.aws.bmw.cloud
qa-wcmp.wcp-int.bmw.cloud
establish.test.digital-trust.bmw.cloud
bmw-int1.com
ktd.aws.bmw.cloud
compare.int.stolo.eu-central-1.aws.bmw.cloud
ispi-dev.azure.bmw.cloud
b2b.prod.trainingsmedia.bmw.cloud
cdhxdev8authorization.iam-int.data.bmw.cloud
user-api.int.manage.aws.bmw.cloud
api.eu-central-1.playground.personalization.aws.bmw.cloud
authorization.fsspk2-iam.scratch.cdh-oss.bmw.cloud
sql-dev9.data.bmw.cloud
engage-th-uat.apac.bmw.cloud
frontend-api.chengdu.manage.aws.bmw.cloud
cdhxkguquicksight-updater.iam-dev.data.bmw.cloud
content-e2e.bch-ipa.aws.bmw.cloud
graph-dev7.data.bmw.cloud
dvs-css-frontend.st4.dvscss.eu-central-1.aws.bmw.cloud
cdhxkgu-gutherkfederation-test-service.iam-oss.data.bmw.cloud
fsspk1.fsspk1-api.scratch.cdh-oss.bmw.cloud
pr2quicksight-updater.iam-oss.data.bmw.cloud
lb.int.cosy.bmw.cloud
mini-next.configurator.bmw.cloud
svmd.msdynamics.azure.bmw.cloud
crm-adapter.aws.bmw.cloud
api.blava-int.aws.bmw.cloud
dev3.ingest-dev.data.bmw.cloud
subscriptions-dev3.data.bmw.cloud
cdhxmorgraphql-api-dummy.iam-oss.data.bmw.cloud
bmw-int1.com
portal.nkam-sit.azure.bmw.cloud
rvm-int.aws.bmw.cloud
cdhxdev10idp.iam-int.data.bmw.cloud
openvidu.viper.bmw.cloud
demo.tst.us-east-1.cgpb-test.aws.bmw.cloud
dfms.bmwna-dealer-cms-reimagine-prod.us-east-1.aws.bmw.cloud
cdhxjr2.api-dev.data.bmw.cloud
cdhxcoreperformance-data.iam-oss.data.bmw.cloud
qa.mu.int.rossi-italy.bmw.cloud
configure.mini.com
cdhxdev3authentication.iam-int.data.bmw.cloud
pr0quicksight-assets.iam-oss.data.bmw.cloud
cdhxblsgraphql-api-dummy.iam-oss.data.bmw.cloud
admin-dev.azure.bmw.cloud
graph-dev13.data.bmw.cloud
pr1quicksight-updater.iam-oss.data.bmw.cloud
bmw-int1.com
api.smms.apac.bmw.cloud
portal.data.bmw.cloud
issue-func.test-lppackagingapproval.azure.bmw.cloud
bmw-int1.com
impxmat.impact-connector-dev.data.bmw.cloud
authentication.fssww1-iam.scratch.cdh-oss.bmw.cloud
italy.manage.aws.bmw.cloud
mybmwweb-app.e2e.mybmwweb.eu-central-1.aws.bmw.cloud
cdhxkguidp.iam-dev.data.bmw.cloud
api.manage.aws.bmw.cloud
prodlib-ev-aggregator-prod.prodlib-prod.aws.bmw.cloud
int.nbc.bmw.cloud
cdh-api.dev.simpledata.bmw.cloud
impxjro.impact-connector-dev.data.bmw.cloud
cdhx008.api-dev.data.bmw.cloud
server.ispi.azure.bmw.cloud
intranetkr-dev.aws.bmw.cloud
bmwgroupdesignworks.com
status.codecraft.bmw.cloud
cdhxdev13docs.iam-int.data.bmw.cloud
ccr-x-dev.aws.bmw.cloud
app.engage-my-uat.apac.bmw.cloud
quizit.azure.bmw.cloud
us-east-1.api.core.data-int.bmw.cloud
cdhxmordocs.iam-dev.data.bmw.cloud
dev.sales-steering-reporting.aws.bmw.cloud
cdhxdev4quicksight-updater.iam-int.data.bmw.cloud
clouddays.data.bmw.cloud
apc.nsp-na-prod-public.aws.bmw.cloud
sql-localhost.data.bmw.cloud
pr0idp.iam-oss.data.bmw.cloud
knowledge.api.dev.aws.bmw.cloud
cdhxphb.api-dev.data.bmw.cloud

Certificate

The complete raw certificate details for cdhxchrfederation-test-service.iam-oss.data.bmw.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymZzBx+YEZmZWj5LHdVl
waAZXWJvtMnMr+pZOku/L0lirtOve0ScC+HaaFtg5jk8yaZtaILiCMqY0U1omKbL
R8+Y0bN2R+HMp654DMOmMqxE/2DehusITdzuhfYQhefREyqs/chsjwjvVXq0ivGM
Qn19/0N3+ewSm8vVj81bsuKa3q83GgTZAjXm+ZYvg8zSz/YTOiiC5fLx/hpjZ0PG
ABzOsSne2f9zroNOXbBw9EeYFUdAd6zPBYMjAcSl8wTWHc6pKxiD3oAoHtu9y25M
5ZCv4X5EToSHWXo5d7nWPLYX/2EK+2PT9YvvffMd+DydaBMtv78wIbfX2tV/Hclb
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9442100469256437039074187136457983794
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdhxchrfederation-test-service.iam-oss.data.bmw.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25550657249399811685105547910966532057198912723736034309974672563841330335594877287945187141811696804466802446657768400164019441006096009545397516103191043214734489785264081658958926959922999691461506668333411274062748990580584499520588112971109190012276422524290029076118992893762202457689395781437738957517148516828622051019022237923058259232420308970714180078955429210623414994816261307210347031208846158100139743158277766158784715186506331596818480667390655613579082274179129609320830514687173592636809286331421412837846708891788294474042380790021363877668364366861501687879258804495260347973525871845732566784981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a57c397df63852b28ec03dbcd2692ee04072d219
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdhxchrfederation-test-service.iam-oss.data.bmw.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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