edge-api.ft.dm.deve.smart-integration.ricoh.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 04:71:4d:03:d5:dd:9c:e2:24:33:ca:53:24:ce:28:c3 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=edge-api.ft.dm.deve.smart-integration.ricoh.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:71:4d:03:d5:dd:9c:e2:24:33:ca:53:24:ce:28:c3
Serial Number (int): 5905203577566288293880303121930791107
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 31:73:59:c6:60:25:18:75:2c:f8:e7:f5:4b:5b:cb:2d:4a:dc:17:c3
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): b4:35:c4:07:01:90:38:b8:95:8e:8b:97:72:21:6e:f5:76:ed:3c:c6
Fingerprint (sha256): 02:16:42:2d:6e:d4:cd:ce:2d:28:e3:e5:f4:2d:6d:b9:b4:d7:b6:aa:cd:ff:38:df:3f:74:60:2b:63:98:64:a6

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate edge-api.ft.dm.deve.smart-integration.ricoh.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for edge-api.ft.dm.deve.smart-integration.ricoh.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

edge-api.ft.dm.deve.smart-integration.ricoh.com
e2e.edge-api.ft.dm.deve.smart-integration.ricoh.com

Other certificates including the domain name ricoh.com

(limited to 100 certificates)
stapp-dev-5.in-house.ac03.dev-md.digital.ricoh.com
health.vmpower.io
extapi-dev-a.ac02.dev-md.digital.ricoh.com
gtl01.rcc.ricoh.com
dc-dev1.rinfra.ricoh.com
allow.sterda.com
*.start.ricoh.com
ez.fukuoka.status.ricoh.com
rxdom.g-tas.ricoh.com
remote-concierge.beta.csp.ricoh.com
stapp-dev-05.in-house.ac03.dev-md.digital.ricoh.com
www.na.inst.ricoh.com
eu.iwb-add-on-service.status.ricoh.com
capco-status.polaris.synopsys.com
app-status.cloudsign.jp
*.devu.smart-integration.ricoh.com
drco1i.cubic.ricoh.com
changes.carta.com
*.iot.deve.smart-integration.ricoh.com
*.na.smart-integration.ricoh.com
*.scrap.smart-integration.ricoh.com
eu.iwb-add-on-service.status.ricoh.com
pcont-dev-1.ac01.dev-md.digital.ricoh.com
*.io-ext-devu-dev.rinfra.ricoh.com
en.riws.status.ricoh.com
connect-status.instacart.com
ssl.cdngc.net
abrsonline.atostatus.com.au
abrsonline.atostatus.com.au
ez.fukuoka.status.ricoh.com
contents.ap1-dev.cdf.ricoh.com
test.procfs.ricoh.com
edge-api.ft.dm.deve.smart-integration.ricoh.com
eu1-status.mulesoft.com
na.smart-integration.status.ricoh.com
na.smart-integration.status.ricoh.com
advantagestatus.paradox.ai
contents.dev.cdf.ricoh.com
d4.specialcounsel.technology
*.rdata.ricoh.com
app-status.cloudsign.jp
*.smartitconcierge.ricoh.com
up.ja.stage.amspf.ricoh.com
changes.carta.com
12a10fad.status.cleafy.cloud
api-dev-06.ac03.dev-md.digital.ricoh.com
bare-metal-servers.status-ovhcloud.com
advantagestatus.paradox.ai
ricoh.com
*.sav.ex.start.ricoh.com
pcont-dev-ds.ac02.dev-md.digital.ricoh.com
*.scrap.accounts.ricoh.com
drco2i.cubic.ricoh.com
cwpstorage.status.symantec.com
jt.inst.ricoh.com
bare-metal-servers.status-ovhcloud.com
appstatus.justworks.com
*.ric.ricoh.com
cs.status.ricoh.com
cogver1.rcog.ricoh.com
na.smart-integration.status.ricoh.com
people.ohrengineering.com
eu1-status.mulesoft.com
na.srs.status.ricoh.com
d4.specialcounsel.technology
status.dev.rkaizen.ricoh.com
abrsonline.atostatus.com.au
oa.aresflare.com
ja.riws.status.ricoh.com
bare-metal-servers.status-ovhcloud.com
*.na.smart-integration.ricoh.com
abrsonline.atostatus.com.au
alerts.illinoisstate.edu
alerts.illinoisstate.edu
api-dev-5.ac03.dev-md.digital.ricoh.com
eaa.status.akamai.com
na.smart-integration.status.ricoh.com
bare-metal-servers.status-ovhcloud.com
12a10fad.status.cleafy.cloud
www.cost-visualizer.ricoh.com
dc-scrap.rinfra.ricoh.com
*.cent7.smart-integration.ricoh.com
bare-metal-servers.status-ovhcloud.com
*.ric.ricoh.com
en.riws.status.ricoh.com
*.example-dev1.rinfra.ricoh.com
cwa.status.symantec.com
mgmt.cons1.os5.unics.ricoh.com
processing.azurepai.pfu-us.ricoh.com
*.pf-info-dev.rinfra.ricoh.com
cwpstorage.status.symantec.com
eu.iwb-add-on-service.status.ricoh.com
www.inst.ricoh.com
eaa.status.akamai.com
dev2.ap-northeast-1.rita.cip.ricoh.com
industry.ricoh.com
*.dev.bss.ricoh.com
eu.iwb-add-on-service.status.ricoh.com
bare-metal-servers.status-ovhcloud.com
na.srs.status.ricoh.com

Certificate

The complete raw certificate details for edge-api.ft.dm.deve.smart-integration.ricoh.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndNshxTq2X6EkGydP0Xx
B/7aej7YmRjnHFKYX2khrZZ8dWRZseS752E+S/jANwbi3DEMM/vznfwa2e+39fkj
wwpr+zn2mTsBO3lNK7mAYv/U1Ob9jmqnVYsN9KjD5myvrO2JZ9xE2IEojKLh8am+
/MpU5ZJSGBX0+hMxFKGNuF/E2nHmVgk+eZhHesCnO3TUBTkOHfJ8xbvh5Qmk2/HG
ChZPQHB+94EHegpSM+39NfpuQ9aW63pPLDK27HabElGMcL7WW6liHJvHoBPTfpZm
ag7E+TqH9g66sZkxSvIuQIWQpnnuEfRRSOMapsaIOc49KcYb3iym3tgvpwet8Ce8
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5905203577566288293880303121930791107
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'edge-api.ft.dm.deve.smart-integration.ricoh.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19923670908315857998842477990682506794285231658801089458723063101549440864842793823478418888161995122931262691332990024049712948363343576229055652824502746066099489715889698972656253168279610894595264701196921842352842865557133682739417466830398725459746637591733601931385270377415792118828026045813977033709457120879541188370622723493594918345703631091364415850520567557184478806418886034678185397587486898997606387263035687429914260466407579383431158500426500042708871759361238721563294510777921070339558479374514937654243512064480692743241033857630104266411686587667481435652859535870706547735396699208351398476971
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							317359c6602518752cf8e7f54b5bcb2d4adc17c3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edge-api.ft.dm.deve.smart-integration.ricoh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e2e.edge-api.ft.dm.deve.smart-integration.ricoh.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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