affinitysa.renault.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:23:c7:96:d3:ae:73:46:85:85:e3:73:2f:7e:98:3b was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=affinitysa.renault.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:23:c7:96:d3:ae:73:46:85:85:e3:73:2f:7e:98:3b
Serial Number (int): 16136514488715447801864973038485674043
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a8:22:8a:aa:84:e5:22:a0:b8:f0:5b:e4:c6:d9:fb:7a:45:7d:b3:4b
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): d9:0c:de:c1:c2:51:08:bf:e8:16:59:81:16:3a:ae:2a:4b:42:3e:a6
Fingerprint (sha256): 02:98:dc:fb:2e:58:88:2a:7e:3a:57:23:de:eb:a7:82:4f:90:b7:76:31:93:ae:43:e2:19:59:94:d3:b1:65:38

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate affinitysa.renault.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for affinitysa.renault.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

affinitysa.renault.com
www.affinitysa.renault.com

Other certificates including the domain name renault.com

(limited to 100 certificates)
prm.renault.com
iqm.re7.aws.renault.com
matomo-re7.dt.renault.com
s3d.dev.gcp.renault.com
d4c.dev.asdh.aws.renault.com
portailrbl.dcs2.renault.com
git-sbx.sbx.aws.renault.com
testingmedia.cardekho.com
bbp.dev.aws.renault.com
tdamono.ope.aws.renault.com
dt.renault.com
www.easyelectriclife.groupe.renault.com
dt.renault.com
dod.tst.aws.renault.com
francktest.dev.aws.renault.com
*.partakus.com
service-solutions.dcs2.renault.com
mlk.tst.dcs.aws.renault.com
testingmedia.cardekho.com
dpt.dev.aws.renault.com
tst.dev.aws.renault.com
trm.dev.aws.renault.com
cdn.asdh.aws.renault.com
00001.salesforce-communities.cdn.t.siteforce.com
support4.cdnetworks.net
dcs.renault.com
r2d2.apv.aws.renault.com
00001.salesforce-communities.cdn.t.siteforce.com
pzm.dev.aws.renault.com
kdo.ope.aws.renault.com
registry-cache.dt.renault.com
refservices-qa.sbx.renault.com
actualites.wiztopic.com
affinitysa.renault.com
wws.ope.aws.renault.com
support4.cdnetworks.net
testingmedia.cardekho.com
tst.dev.aws.renault.com
adtprod.adt-prod.adt-ext.com
*.co.rplug.renault.com
support4.cdnetworks.net
3dv1.renault.com
lesiegev2-preprod.renault.com
driverg9.dcs2.renault.com
tst.aws.renault.com
3dv.renault.com
affinity.renault.com
tst.dev.aws.renault.com
store.staging.re-generations.xyz
epds.renault.com
jenkins-ce.eks.dt.renault.com
dpt.ope.aws.renault.com
rvp.dev.aws.renault.com
support4.cdnetworks.net
www.portaildigital.parts.renault.com
assuranceamaline.dcs2.renault.com
mvrro.renault.com
*.wrd-aws.com
stg.fr.co.rplug.renault.com
zoemap.renault.com
informatique-preprod.renault.com
tld.dcs.renault.com
actualites.wiztopic.com
vrd.dev.aws.renault.com
admin.dealerconnect.renault.com
staging.inffinity.renault.com
actualites.wiztopic.com
*.tst.re7.aws.renault.com
sma.ope.aws.renault.com
sp5.dev.aws.renault.com
4ex.ope.aws.renault.com
motrio-uat.renault.com
dev.piwik.asdh.renault.com
flipcard.easyelectriclife.groupe.renault.com
nip-dev.renault.com
dcs-validation.renault.com
webappsites.renault.com
tax-vision.renault.com
secure.renault.com
refservices.api-dmo.dev.gcp.renault.com
dev.onepo.aws.renault.com
tax-vision.renault.com
workflows.dcs2.renault.com
dpt.re7.aws.renault.com
apis-demo.tls.renault.com
pit.ope.aws.renault.com
boybatch.dev.aws.renault.com
d4b.re7.aws.renault.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
*.wrd-aws.com
00001.salesforce-communities.cdn.t.siteforce.com
brandhub.renault.com
vcc.dcs.aws.renault.com
espace.renault.com
bhl.re7.aws.renault.com
rpw.dev.aws.renault.com
atelier.renault.com
testingmedia.cardekho.com

Certificate

The complete raw certificate details for affinitysa.renault.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gvSxocGWYiW0PQJjXUc
QkWmArNHf3e7PTAo7IbA2MtO3MjHS/YcylHEOHNYYMextxP4KOLWKaPCbEt97BKc
spfGwJnj7d6kaWvyIL+WWseq8KFqwXkc1ApUPCVNxGTspMAMO03m5H/q+PYCGwWX
GfabQoNrIRqWswA2kIDLWKdBaLr3+LR/ORh9cvGdjcro5E52o8LGSdDWmtZRH6Ab
u+acl+2D/v3R75ZqOltBrdJ06l4uMRXppWLY9/XI3+GHAnXU4v8mE30NsGynJ9k5
2ohdN28gD5x7WIIiVdYWG3qoWey5XH5Krd8xTSBJu8Liz31Fevo9jgs8LZ663jmK
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16136514488715447801864973038485674043
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'affinitysa.renault.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29545593669192070692360531152832950259542592320227397876486015693579635998992832505633265901872286851478751635072353485191603895144051778761752480522543530242470922494453449835624821406390690803204538174446581429745233238485255872012647169423350097901431693031846488095344768847434549062876192888112660381810444947090280870221191995815614549175472673373006643899470488651030380672186257998025661274191473906354993369469142500678175743088381852306136750158705268350898907717304827259245701627427201134647662103297201750404134883377807509822050136697323795070353343938539928754340950613194950073194610895454454276524609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a8228aaa84e522a0b8f05be4c6d9fb7a457db34b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affinitysa.renault.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.affinitysa.renault.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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