stage.digitalme.stellantis.com

Issued by R3

About this certificate

This digital certificate with serial number 03:ff:2d:b0:b3:91:0c:61:06:a3:28:94:97:72:d6:a4:c5:b9 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=stage.digitalme.stellantis.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:ff:2d:b0:b3:91:0c:61:06:a3:28:94:97:72:d6:a4:c5:b9
Serial Number (int): 348169594106220705202459151995052017108409
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9f:b1:84:75:d5:50:b5:39:96:76:5b:90:e4:6e:58:34:6e:a8:0e:a2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4f:ab:1f:b4:4b:eb:9a:76:70:55:a4:6e:f4:82:f8:66:86:38:6c:46
Fingerprint (sha256): 00:89:5e:99:f3:b9:89:79:ea:a2:db:e3:ee:c8:cc:6e:94:0a:1e:68:28:f4:41:ea:61:ed:5e:81:f2:ff:6c:bd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate stage.digitalme.stellantis.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stage.digitalme.stellantis.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stage.digitalme.stellantis.com

Other certificates including the domain name stellantis.com

(limited to 100 certificates)
staging1.fcagroup.com
stage.digitalme.stellantis.com
diabase.stellantis.com
test.k2.extra.stellantis.com
dash.stellantis.com
oms-ui-stage.stellantis.com
isba.stellantis.com
www.fcagroup.com
be.idhub.test.stellantis.com
aemdevms4-connectivity.alfaromeo.com
alpha.nea.wrt.stellantis.com
aemstagems4-connect.alfaromeo.com
be.idhub.stellantis.com
incubator.stellantis.com
workbench.stellantis.com
secure5s.scene7.com
linkentry.fiat.com
git.stellantis.com
vpn-mobile-preprod.stellantis.com
*.stellantis.com
aemstagems4-connect.alfaromeo.com
oms-ui-dev.stellantis.com
commercial-needs.stellantis.com
admin3-medialibrary.stellantis.com
abarth.pt
audiencemanager.stellantis.com
www.stellantis.com
prod.sfp.stellantis.com
comconnect.stellantis.com
imc.test.com-activities.stellantis.com
teamcity.stellantis.com
itdealersupport.stellantis.com
dpromo.abarth.it
login-stage.sapcdc.stellantis.com
san-16-s51.tlsprovisioning.exacttarget.com
management.diagboxcloud.stellantis.com
uat3.alfaromeousa.com
nea.wrt.test.stellantis.com
*.test.as.ivdp.dash.stellantis.com
itdealersupport.pre.stellantis.com
abarth.pt
spu-dev.stellantis.com
idpm.stellantis.com
abarth.pt
cloud.web.stellantis.com
www.fiat.com
nocache.media.stellantis.com
isba.staging.stellantis.com
staging1.fcagroup.com
aemstagems4-connect.alfaromeo.com
oms-ui-stage2.stellantis.com
aftersales-solutions-test.stellantis.com
thehub.stellantis.com
ppr.ppw.stellantis.com
carcomp.stellantis.com
email.lumapps.thehub.stellantis.com
privacyportal.stellantis.com
docma.stellantis.com
targethub.test.stellantis.com
cars-tms.stellantis.com
secure5s.scene7.com
click.web.stellantis.com
secure5s.scene7.com
fed.docmacert.stellantis.com
san-7-s10.tlsprovisioning.exacttarget.com
uat3.alfaromeousa.com
abarth.pt
*.stellantis.com
abarth.pt
dashboards.stellantis.com
admin2-medialibrary.stellantis.com
aemdevms4-connectivity.alfaromeo.com
www.jeep.com
email.lumapps.thehub.stellantis.com
abarth.pt
secure5s.scene7.com
diagboxcloud.stellantis.com
my.des.stellantis.com
admin.idhub.test.stellantis.com
carconfigurator.fcagroup.it
cloud.iap-crm.stellantis.com
www.fiat.com
integration-diagcloud.stellantis.com
www.fiat.com
*.stellantis.com
test.ccl-event.stellantis.com
dpromo.abarth.it
aemdevms4-connectivity.alfaromeo.com
digitalme.stellantis.com
edoc-partners.stellantis.com
mcstaging.stellantis.com
autodiscover.external.stellantis.com
api.ccl-event.stellantis.com
careers.stellantis.com
stellantis.com
stage1-www.opel.de
oms-ui-stage3.stellantis.com
alpha.nea.wrt.test.stellantis.com
askstella.stellantis.com
oms-ui-stage2.stellantis.com

Certificate

The complete raw certificate details for stage.digitalme.stellantis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGCTCCBPGgAwIBAgISA/8tsLORDGEGoyiUl3LWpMW5MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA0MDkwODMwNDBaFw0yNDA3MDgwODMwMzlaMCkxJzAlBgNVBAMT
HnN0YWdlLmRpZ2l0YWxtZS5zdGVsbGFudGlzLmNvbTCCAiIwDQYJKoZIhvcNAQEB
BQADggIPADCCAgoCggIBALGIWTF4XLFOg7KBue9o3alSa5nsiDaquNwE94DZvqGy
6aa+8QGioS/Ogq6wWJTFCd9A6n/+6qEZQ50r0HaAUCN26SJW3B7jtjNMPymjxnwH
q3IiWVNVvADNPakJbGnTGhN5KEP8/DwETq+mM5UNdB0znlhjHchfP/2iGYdxiiHV
JGkRGDwInISLSqoa2ioVlSviDA+dFq8H94gVTSfTjY8VZ2kWYCmrNnZd5y+Ejrla
7N4bOdvAcrBRB6Rs8iUINtvI2FzjJipUbXyXswO0UTy0Mz3xjg0HDu/z0H1iIqjs
kCXicgkKzC0iSbCcewnJXqILpvaURn+FODm7cOTR8HfZuCPPIgDID6AEvepoF7Y3
AOerEXHlmlPj8kdrLFrMIrR4oNaLHPv4iM61y2ou5yFYSUQYTSc0wKFwhJyPeQog
4sqRRwzSYgFr9O9qKrkuum11/IeHw8WcOllo1N9DNx3X/TobMzfsJEdI1idwzuSz
rf730qt5utw/ECPqkIgdF16Q3sUVkIT14GUm3W17KUfBLPhldzGPB/w+W2eQeDle
qU99jDfdoWJu1VUF74HhIEkr0eUABHR+WWPHP9yVI133ydWNOwYZdvjNy4uDQtL0
BLymM7LCr9T558+zKFkvMvJ9GKFJG9538vuXbAYZKgo3/dW5hLRzh6WGYsMGxCBN
AgMBAAGjggIgMIICHDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJ+xhHXVULU5lnZb
kORuWDRuqA6iMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYfr52LFMLGMFUGCCsG
AQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8ubGVuY3Iub3JnMCIG
CCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMCkGA1UdEQQiMCCCHnN0
YWdlLmRpZ2l0YWxtZS5zdGVsbGFudGlzLmNvbTATBgNVHSAEDDAKMAgGBmeBDAEC
ATCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB1AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8
vOzew1FIWUZxH7WbAAABjsIyAeUAAAQDAEYwRAIgUUuacHy36HP2a24qWoHXbqhn
KtuxbJnnxB28KZE4zfkCIGcZeyvgocULZKh+FiJi/9RM/hsKC77dpazq7sx+AXzt
AHcAGZgQcQnw1lIuMIDSnj9ku4NuKMz5D1KO7t/OSj8WtMoAAAGOwjIB8wAABAMA
SDBGAiEA5dMBvzY2vFYHpLki9r2WrlpRfI3P2l10LmSW8IKZZJcCIQCVQL64vFZh
3D2QzyWlRwCbf/1hANjGqwjf804EeXt49TANBgkqhkiG9w0BAQsFAAOCAQEAneoi
LOM38EhulX5gQgNkx5f6xd/TQg8y2IhVU+ewADyeQfuyiCG7ArWeS6yBCHWBQMbr
eCd+udenxKmMYZaNUlwSySBcJRYhkVzylHZqH4D56NqZL2KAxzWXd157xrLIy3RJ
6st8HbyEU7Us5uQ9/JCJr4Ci6umPsowmoVZd4Vpz5tzQR4Sf5dPaxjGW6oWW1+fX
qTRX9V+u+vHsdL8md31tSxjNNnxMt0myY9xUSXFNvn8VnkKn0NZrn+XclNq7xGB2
nMBehfgc+FLF6ifIhp8Wo6+JmCg+haAwtx0s7nEUVIBoVHzcJGJYuZlyaYH8I9ZD
UNwcfCZOJjusiyBavg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 348169594106220705202459151995052017108409
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-09 08:30:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-08 08:30:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stage.digitalme.stellantis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 724269863268264348896487189819180861013282248478220142395767964178480869081792529618767057067652067401731989533216877874740870838634127593575115696289641514845243783404637573893466624387515641370699968108700762688435843903334711704965164551585852468659952155503964058857510043040048757003172212227956963962409099330754897480234634870493000484847151440026814292666426036729025879830209718290719778882433303283612404022819635101390572368028548977539057619098445094898708738828766783736008361193485115534148098254733171643077856431198392596853972986162721767692681936915476896197509259654607820366187862294204304645886529475268263799395470173765621023512784421409642812864450899333142835675474865688043761738194719122653542320173997793034028673397442170070560502842864150763507392716315986082864535048737301418031270925141016218891317087451051111211557603690477490461056638315954839612745961979527431891852286752504852146241068520507361747271565667344809167868205219926864454912541235245979080976489169797556724102936429157253090311796583473093265431262029575157028780513403550866648156302324885765201384473197564693336082751741990547693812472547458374347744320782250915571727048371765355419502926691811187864233504121115460237141483597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9fb18475d550b53996765b90e46e58346ea80ea2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.digitalme.stellantis.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ec23201e500000403004630440220514b9a707cb7e873f66b6e2a5a81d76ea8672adbb16c99e7c41dbc299138cdf9022067197b2be0a1c50b64a87e162262ffd44cfe1b0a0bbedda5aceaeecc7e017ced0077001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ec23201f30000040300483046022100e5d301bf3636bc5607a4b922f6bd96ae5a517c8dcfda5d742e6496f0829964970221009540beb8bc5661dc3d90cf25a547009b7ffd6100d8c6ab08dff34e04797b78f5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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