calsiumhistory.scania.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0a:4b:2a:61:bc:fa:87:11:59:91:1f:4c:8f:48:f2:db was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=calsiumhistory.scania.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:4b:2a:61:bc:fa:87:11:59:91:1f:4c:8f:48:f2:db
Serial Number (int): 13682561827060439195816751209594286811
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: be:35:cc:ed:44:de:90:3e:2c:03:f7:ab:f2:61:a3:08:1b:df:2f:74
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 89:9d:8e:e9:ce:cf:d8:6f:03:23:ff:0c:b3:a9:d9:ee:6e:59:33:d5
Fingerprint (sha256): 02:33:67:50:aa:fc:95:29:ef:c5:30:ed:c4:d5:64:df:c9:d1:fa:38:90:5b:23:9d:55:c1:fb:6f:18:95:f6:d7

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate calsiumhistory.scania.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for calsiumhistory.scania.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

calsiumhistory.scania.com
calsium-history.prod.aws.scania.com

Other certificates including the domain name scania.com

(limited to 100 certificates)
www.shopb2b.scania.com
rsc.cdn77.org
spii.scania.com
sparta.devtest.aws.scania.com
backend.omega.onappcdn.com
scaniaconfluence.prod.aws.scania.com
mobat.scania.com
standardsapi.tdquredev.devtest.aws.scania.com
webuyanyscania.uk.devtest.aws.scania.com
one.stage.scania.com
ws.conversion-dev.devtest.aws.scania.com
corporate-intranet.scania.com
ambari.streaming.prod.aws.scania.com
*.r.worldssl.net
myebapp.clad-playground.devtest.aws.scania.com
internal-equipmentusage.apivp.cs.scania.com
api.integration-dev.devtest.aws.scania.com
*.module.cava-staging.prod.aws.scania.com
web.cvss-dev.devtest.aws.scania.com
saps.dce.scania.com
ddmadmin.testdiagnosticinformation.cs.scania.com
static.clad.aws.scania.com
dtsweb-prod.cloud01.cd.scania.com
mona-calcium.np-dce.scania.com
*.cava-dev.devtest.aws.scania.com
rfms2-status.testapies.cs.scania.com
chatbot.sfl.devtest.aws.scania.com
proxora-dev.cloud01-np.cd.scania.com
polarion-rms.cloud01.cd.scania.com
mona-calcium.np-dce.scania.com
sparta.devtest.aws.scania.com
homepage.devtools.devtest.aws.scania.com
fact.ema.prod.aws.scania.com
pre-comptool.scania.com
invoice-api.conversion-preprod.devtest.aws.scania.com
accounts.clad.devtest.aws.scania.com
dtsweb-prod.cloud01.cd.scania.com
sp-maintenancereportemailservice-api.apisp.cs.scania.com
test.calsium.devtest.aws.scania.com
rsc.cdn77.org
backend.omega.onappcdn.com
selfbilling.devtest.aws.scania.com
ec2-test.sfl.devtest.aws.scania.com
ec2-test.sfl.devtest.aws.scania.com
apicf.cs.scania.com
apim.devtest.aws.scania.com
identity.iron.cd.scania.com
polarion-rms.scania.com
identity.team-torch.devtest.aws.scania.com
oliver.pii-dev.devtest.aws.scania.com
adminlocalization.testapicd.cs.scania.com
ocs.scania.com
auth.clad.devtest.aws.scania.com
sgws.scania.com
win.caos.devtest.aws.scania.com
test.coc.devtest.aws.scania.com
apivp.cs.scania.com
calsiumhistory.scania.com
*.salesportal.prod.aws.scania.com
saps.np-dce.scania.com
keycloak.digitaldealer.prod.aws.scania.com
slapool01.scania.com
complete.scania.com
gbdesktop.scania.com
sp-grafana.apisp.cs.scania.com
monaws.np-dce.scania.com
preprod.jira-greenfield.prod.aws.scania.com
orderdiagnosticreadout.testdiagnosticinformation.cs.scania.com
apisp.cs.scania.com
ecs.apicd.cs.scania.com
mock.sws-dev.devtest.aws.scania.com
win.dev.aws.scania.com
puppet.sws-dev.devtest.aws.scania.com
*.scania.com
demo.sws-test.devtest.aws.scania.com
reflex-test.scania.com
testapird.cs.scania.com
saps.np-dce.scania.com
puppet-master.sws-prod.prod.aws.scania.com
saps.dce.scania.com
*.ccp.devtest.aws.scania.com
backend.omega.onappcdn.com
crp.prod.aws.scania.com
cloud.scania.com
complete.scania.com
saps.np-dce.scania.com
slapool01.scania.com
gitlab-dashboard.test.cs.scania.com
connect.shadow.devtest.aws.scania.com
dev.coc.devtest.aws.scania.com
fleetmonitor.scania.com
*.ithelp.scania.com
saps.dce.scania.com
uploadservice.diagnosticinformation.cs.scania.com
premacperiodicoptimizer.scania.com
saps.dce.scania.com
*.r.worldssl.net
multi-auth.sws-dev.devtest.aws.scania.com
mobat.scania.com
*.ciam.devtest.aws.scania.com

Certificate

The complete raw certificate details for calsiumhistory.scania.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTkSeCWEqTbTVu2Q0MYo
UdPQUIchY/C+3joITTtiLKbvgrc7fXiPnKvfO7ZBlhB2zUePjatnuC+jUYE/GXRq
Vnmizm7Y4u/o+EArXgOYbBlwz0oIRjgzP/IB/RusaI8sNyqOQdQj4vWn+VPJjBt7
aALKK9P0c0eSiUMuwBSi8vs9jujEpQOx7gfk+XZ9TbWSKZs8aSDc0BUDqXdZdv+3
PKek5K6KANF6cb7b+D4vc/5SdVN8QhdQd1mSnch+OrWUadC+ICzc54hgDrlj/R7z
hQ63RM2LqyB7y9oW/tHXWy9Luy27cirXfx8HefWG4s5IO06sxO8rgA/Bv/hYEoaH
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13682561827060439195816751209594286811
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'calsiumhistory.scania.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20857463643405238744107335248073535365713713971550811831148438491094607383413427255061321829399914395341457094063936373083242684970624555058607378124239584446746159074972100181190764376004629614886563766192591682735780390397703267416345949543288323849079837868756993478548543239866474958248285806050866954887000720189764393908781796607676119259342107157687743815214835624680560906911520278226539900000279027335113730035528312960219913404250207171558872871604427441627275284691676331767198944875134408361643247740066803703544011019232228465367869248227022078663121302995989702473824392174609242787541384384138294233053
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							be35cced44de903e2c03f7abf261a3081bdf2f74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calsiumhistory.scania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calsium-history.prod.aws.scania.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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