complete.scania.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0a:19:42:2a:23:7a:97:29:d5:b4:2b:d8:f5:e0:8f:1f:bb was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=complete.scania.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0a:19:42:2a:23:7a:97:29:d5:b4:2b:d8:f5:e0:8f:1f:bb
Serial Number (int): 264773255710649539727877063294385761755067
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 40:42:35:ac:8d:3e:44:fe:1c:19:2b:4f:3c:ce:f5:b8:bb:b4:68:80
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b7:14:25:a8:e3:e8:56:ac:fd:51:3e:8d:a4:ea:de:0b:7d:9c:2a:ef
Fingerprint (sha256): 02:3f:34:8f:32:3d:90:0b:f9:75:a0:63:48:06:b1:59:a4:61:47:f9:53:b3:a4:a5:78:f3:66:c2:26:50:7f:fb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate complete.scania.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for complete.scania.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

complete.scania.com

Other certificates including the domain name scania.com

(limited to 100 certificates)
www.shopb2b.scania.com
rsc.cdn77.org
spii.scania.com
sparta.devtest.aws.scania.com
backend.omega.onappcdn.com
scaniaconfluence.prod.aws.scania.com
mobat.scania.com
standardsapi.tdquredev.devtest.aws.scania.com
webuyanyscania.uk.devtest.aws.scania.com
one.stage.scania.com
ws.conversion-dev.devtest.aws.scania.com
corporate-intranet.scania.com
ambari.streaming.prod.aws.scania.com
*.r.worldssl.net
myebapp.clad-playground.devtest.aws.scania.com
internal-equipmentusage.apivp.cs.scania.com
api.integration-dev.devtest.aws.scania.com
*.module.cava-staging.prod.aws.scania.com
web.cvss-dev.devtest.aws.scania.com
saps.dce.scania.com
ddmadmin.testdiagnosticinformation.cs.scania.com
static.clad.aws.scania.com
dtsweb-prod.cloud01.cd.scania.com
mona-calcium.np-dce.scania.com
*.cava-dev.devtest.aws.scania.com
rfms2-status.testapies.cs.scania.com
chatbot.sfl.devtest.aws.scania.com
proxora-dev.cloud01-np.cd.scania.com
polarion-rms.cloud01.cd.scania.com
mona-calcium.np-dce.scania.com
sparta.devtest.aws.scania.com
homepage.devtools.devtest.aws.scania.com
fact.ema.prod.aws.scania.com
pre-comptool.scania.com
invoice-api.conversion-preprod.devtest.aws.scania.com
accounts.clad.devtest.aws.scania.com
dtsweb-prod.cloud01.cd.scania.com
sp-maintenancereportemailservice-api.apisp.cs.scania.com
test.calsium.devtest.aws.scania.com
rsc.cdn77.org
backend.omega.onappcdn.com
selfbilling.devtest.aws.scania.com
ec2-test.sfl.devtest.aws.scania.com
ec2-test.sfl.devtest.aws.scania.com
apicf.cs.scania.com
apim.devtest.aws.scania.com
identity.iron.cd.scania.com
polarion-rms.scania.com
identity.team-torch.devtest.aws.scania.com
oliver.pii-dev.devtest.aws.scania.com
adminlocalization.testapicd.cs.scania.com
ocs.scania.com
auth.clad.devtest.aws.scania.com
sgws.scania.com
win.caos.devtest.aws.scania.com
test.coc.devtest.aws.scania.com
apivp.cs.scania.com
calsiumhistory.scania.com
*.salesportal.prod.aws.scania.com
saps.np-dce.scania.com
keycloak.digitaldealer.prod.aws.scania.com
slapool01.scania.com
complete.scania.com
gbdesktop.scania.com
sp-grafana.apisp.cs.scania.com
monaws.np-dce.scania.com
preprod.jira-greenfield.prod.aws.scania.com
orderdiagnosticreadout.testdiagnosticinformation.cs.scania.com
apisp.cs.scania.com
ecs.apicd.cs.scania.com
mock.sws-dev.devtest.aws.scania.com
win.dev.aws.scania.com
puppet.sws-dev.devtest.aws.scania.com
*.scania.com
demo.sws-test.devtest.aws.scania.com
reflex-test.scania.com
testapird.cs.scania.com
saps.np-dce.scania.com
puppet-master.sws-prod.prod.aws.scania.com
saps.dce.scania.com
*.ccp.devtest.aws.scania.com
backend.omega.onappcdn.com
crp.prod.aws.scania.com
cloud.scania.com
complete.scania.com
saps.np-dce.scania.com
slapool01.scania.com
gitlab-dashboard.test.cs.scania.com
connect.shadow.devtest.aws.scania.com
dev.coc.devtest.aws.scania.com
fleetmonitor.scania.com
*.ithelp.scania.com
saps.dce.scania.com
uploadservice.diagnosticinformation.cs.scania.com
premacperiodicoptimizer.scania.com
saps.dce.scania.com
*.r.worldssl.net
multi-auth.sws-dev.devtest.aws.scania.com
mobat.scania.com
*.ciam.devtest.aws.scania.com

Certificate

The complete raw certificate details for complete.scania.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 264773255710649539727877063294385761755067
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-20 22:37:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-19 22:37:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'complete.scania.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 639078829545247283329678347198488028451507515320216741969339143543752765765862805115240721847731003344314488009061655433036014688559988482440477648598189317246509110958168826984537945370052342919711838773190108573850607224525876379312886178718238143985318333730355873701825597023859444507058031050367686526672385879126265317298846273785368722373231831052404945361750604331919593292878715473042735865245634758476645204727486591208133324267162454799610575641509147596727079678214894558638256667216276096217137884177407549395071887753508799176828661033158060156215486790200301635181905164834578275291339081268749104603437499304938203685265705575942269505091705347733527672227096818966704273677180407667217294893441069703819907962066545983997024420051889141959003224105029424102870553222405795474050678658838949136560797543361088113436311748160958662948371390219635805306649842222587302464333064730322267080821674061248015191645028334975075497362365447832372765648402414349519665786994942340954815825509055288338962654759654331645262629351825092630338151622809805555500674290045402029656244594884686763672864823003449903468424157459892754903234887927709691799232873217090434497275287306794489192511904811417639817018672929872693518385581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							404235ac8d3e44fe1c192b4f3ccef5b8bbb46880
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'complete.scania.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f25ac8d2c0000040300473045022100d5ac51537dd63265605f763d8630a19a6043fd050aefc3fec9c4ce5ef2746f93022019b07d1b47bd9e9d0fa45d4e82cf4c0ed7ad6ea8f89f8fddc96be6a1624b9acf007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f25ac8d1b00000403004830460221009ab6cd8f18b42cd51e228e3c6c737eb5ed223686318cefbbbb46a03b4058a7b4022100dc21611cebd3d227b1af1c827d8f40086a8cede374dfcb035e28d6aea21f24de
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00184ac5588a254235346832cdf84d07dc993f0347fd75dff5ce6b38b26eb64be1d291b4505f4e923576d1120cba74b016cd39b4071ca9ddec845686be9c5ce55a2ca5108a1db8eed11d293cd2a1970ee540675a113194a87993a2c55dcb19b0a797d7af1f3ebb489e218df95e06a3d48422d5a937973f205076709e148d80a4c61c0cbfd2e3dc31816e836a499b95cb2ac5c006df70521eba88eef62860375e85056c2029242fcd3de5c862066c0642bcd4ad23d4a155c5ed72a3a74e7a93a0096a41994f7a38fc87830b92167b5755b4c4fc3d67266a6e88c5df34c17aa8477bd21212784e0395a9fbf0ca10b59b81b223e44ee2a5e4a74fd0057d53d67a82f8