*.csw-stage.lenovo.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0e:2a:f1:71:2b:91:53:28:43:ad:6b:ca:0b:6d:2f:23 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.csw-stage.lenovo.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:2a:f1:71:2b:91:53:28:43:ad:6b:ca:0b:6d:2f:23
Serial Number (int): 18832165436027671510820371849242554147
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 38:03:79:8c:b0:5c:8d:62:51:68:cf:c7:ec:97:1b:f3:4c:de:d4:ec
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 91:9a:bc:30:32:8d:16:f7:2a:ab:c6:ca:c9:d7:80:75:25:4e:9d:4b
Fingerprint (sha256): 02:ae:ef:4d:ec:0b:62:9a:38:b9:2f:c6:74:be:98:cd:ba:3b:0b:c1:d0:c7:67:51:dc:06:cf:42:5d:15:26:2a

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate *.csw-stage.lenovo.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.csw-stage.lenovo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.csw-stage.lenovo.com
*.csw.lenovo.com

Other certificates including the domain name lenovo.com

(limited to 100 certificates)
777bpce76.saagie.com
marketplace-templates-vpoc.cp.lenovo.com
777bpce76.saagie.com
*.lenovo.com
displaycdn.lenovo.com
www.maestro.io
activate.connect.lenovo.com
outlet.de.lenovo.com
api-test.tsc.lenovo.com
osd.lenovo.com
cxs.lenovo.com
www.thinkbook.com
geo.uds-qa.lenovo.com
loyalty.lenovo.com
mail.lenovo.com
subaru3-dev.lenovo.com
webform.wd.lenovo.com
*.lenovo.com
io.gdi.lenovo.com
esourcingtest.lenovo.com
*.csw.lenovo.com
testforums.lenovo.com
secure01.lithium.com
lcfc01.blt.lenovo.com
rolandberger.relmeetingapp.lenovo.com
receiver.b2b.lenovo.com
esbclient-cn-t.lenovo.com
mqtt-mtls-load.naea1.uds-qa.lenovo.com
scoe.lenovo.com
secure01.lithium.com
smartalbumcloud.lenovo.com
aployalty.lenovo.com
brazil-mds.lenovo.com
*.csw-stage.lenovo.com
smartedu.lenovo.com
amer-es.tw22.lenovo.com
*.bycube.lenovo.com
sni.cloudflaressl.com
www.maestro.io
*.lenovo.com
cowork.us.owa.lenovo.com
www.maestro.io
*.lenovo.com
oauth.csw.lenovo.com
spokenenglish.smartedu.lenovo.com
aefepl01.lenovo.com
homeedgeserver.lenovo.com
www.maestro.io
*.lenovo.com
stscn.lenovo.com
www.thinkbook.com
qa-sit.hub.lenovo.com
apservicesales.lenovo.com
*.lenovo.com
secure01.lithium.com
*.lenovo.com
log-smart.lenovo.com
*.adminhosting.shea1.lenovo.com
nonprod-idp-xclarityone.lenovo.com
fpvpn.hk.lenovo.com
test.wx.lenovo.com
linux.lenovo.com
brandworld.lenovo.com
*.lenovo.com
lscs-qa.dev.cloud.lenovo.com
suwen.lenovo.com
www.thinkbook.com
dalestatus.mambu.com
www.maestro.io
wireless.lenovo.com
sts.us.lenovo.com
sni.cloudflaressl.com
pages.lenovo.com
status.apoteket.dk
mqtt-mtls.naea1.uds-sit.lenovo.com
sni.cloudflaressl.com
*.resources.lenovo.com
less.naea1.uds.lenovo.com
uds.lenovo.com
analytics.status.atlassian.com
cc20.status.jasper.com
mitest.lenovo.com
test.le-credit.lenovo.com
mcstaging.store.lenovo.com
techworld21.lenovo.com
stscn.lenovo.com
ldiplusstatus.uds.lenovo.com
emea-it.tw22.lenovo.com
*.dev.cloud.lenovo.com
b2b.lenovo.com
mave.dds.lenovo.com
geo.cnno1.uds-sit.lenovo.com
embed-answers.cority.com.pagescdn.com
webvpncnpek01.lenovo.com
tracking.lenovo.com
*.lenovo.com
*.brain.lenovo.com
mfa-test-login.icelab.lenovo.com
cap.lenovo.com
xclarityone.lenovo.com

Certificate

The complete raw certificate details for *.csw-stage.lenovo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2O0b4ICEdJaUC9i7i3T
Wrn+I7CGJzXplYbgNm43i/F1v5Pg5NkQSobgb/ebhYf4yAlh1XURehQT2EPnBLm5
dW2y/qgy4KAc1am1Iiu6jXdivPlJhs9zN741ubkt6fJS3wlzAYZfP8JTmI3RWu4a
sVyJ/PeG9vLQ2sawGo502NnpNqQj0c9CGCVn9V10Pe06c6ySAlGsC7IdydLhKbDN
iQTWNwgyFZoSJU8t2jw9itr/ZTi3F5MhGy0834uELz0KX54IL59QwUhNrtZhTGuE
Ot9uldtNQDo293wrS3HA93BjW3yTkS2H2iRtvdstAfhmT5OsIYgTam+jOX+b/dPd
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18832165436027671510820371849242554147
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.csw-stage.lenovo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19616103552126186266502462612543974785217680291899060426650838520080482362540698904090969345875545639320994437305536990852844653064734930937478390271674761565992989746068083057625921984068052064228492195045234973940668653627083592412966488236967292643759692938734424190681781243809402249656042135647591094621303208755049998101874289840899236141614407187911423596854208805195649878066239836914712415646740993653723807394058346566406725118938196446201332017137808876597474158600920808382088859758290950248262511022860284346040051072219823046929859840039233488926153241481438831759927619255365433622052280997390234934547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3803798cb05c8d625168cfc7ec971bf34cded4ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.csw-stage.lenovo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.csw.lenovo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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