pat.services-store.dsautomobiles.com

Issued by Amazon

About this certificate

This digital certificate with serial number 07:e9:60:64:5f:76:47:da:60:35:11:4a:a6:ab:c6:af was issued on by Amazon.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pat.services-store.dsautomobiles.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:e9:60:64:5f:76:47:da:60:35:11:4a:a6:ab:c6:af
Serial Number (int): 10516356202215296430653979155879413423
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 2e:c6:8f:f7:66:b9:2d:af:9f:0d:8d:cc:55:c3:64:9a:2a:44:3d:9a
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 5e:d9:cc:80:b0:0e:c4:76:42:d8:9f:61:3f:25:77:81:ee:71:f2:b1
Fingerprint (sha256): 03:88:a8:54:83:e0:bf:40:15:43:d5:e7:02:32:24:aa:5b:c8:52:48:38:07:8e:0c:fe:8c:2c:a7:32:d4:8d:31

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate pat.services-store.dsautomobiles.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pat.services-store.dsautomobiles.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pat.services-store.dsautomobiles.com
pat.services-store.dsautomobiles.fr
pat.services-store.dsautomobiles.co.uk
pat.services-store.dsautomobiles.de
pat.services-store.peugeot.com
pat.services-store.peugeot.fr
pat.services-store.peugeot.co.uk
pat.services-store.peugeot.de
pat.services-store.citroen.com
pat.services-store.citroen.fr
pat.services-store.citroen.co.uk
pat.services-store.citroen.de

Other certificates including the domain name dsautomobiles.com

(limited to 100 certificates)
uat-admin.services-store.dsautomobiles.com
account.services-store.dsautomobiles.com
pat.services-store.dsautomobiles.com
uat.services-store.dsautomobiles.com
aemdevms4-connectivity.alfaromeo.com
aemstagems4-connect.alfaromeo.com
inf.services-store.dsautomobiles.com
pat.services-store.dsautomobiles.com
aemstagems4-connect.alfaromeo.com
pat-admin.services-store.dsautomobiles.com
dev.services-store.dsautomobiles.com
www.dsautomobiles.com
inf.services-store.dsautomobiles.com
dpromo.abarth.it
trn-admin.services-store.dsautomobiles.com
pat.services-store.dsautomobiles.com
www.dsautomobiles.fr
pat.services-store.dsautomobiles.com
uat-admin.services-store.dsautomobiles.com
admin.services-store.dsautomobiles.com
www.services-store.dsautomobiles.com
ppr-admin.services-store.dsautomobiles.com
pat.services-store.dsautomobiles.com
ppr-admin.services-store.dsautomobiles.com
trn.services-store.dsautomobiles.com
aemstagems4-connect.alfaromeo.com
www.dsautomobiles.fr
dev.services-store.dsautomobiles.com
sip-hr.mpsa.com
sip-be.mpsa.com
inf.services-store.dsautomobiles.com
sip-hr.mpsa.com
dev-admin.services-store.dsautomobiles.com
media-professional.peugeot.ru
aemdevms4-connectivity.alfaromeo.com
pat.services-store.dsautomobiles.com
ppr.services-store.dsautomobiles.com
inf.services-store.dsautomobiles.com
uat.services-store.dsautomobiles.com
services-store.peugeot.fr
pat.services-store.dsautomobiles.com
sip-be.mpsa.com
vos-sauvegardes.dsautomobiles.com
pat-admin.services-store.dsautomobiles.com
dpromo.abarth.it
ppr.services-store.dsautomobiles.com
aemdevms4-connectivity.alfaromeo.com
www.dsautomobiles.fr
sip-hr.mpsa.com
pat.services-store.dsautomobiles.com
sip-hr.mpsa.com
sip-be.mpsa.com
sip-be.mpsa.com
ppr-admin.services-store.dsautomobiles.com
dev.lead.services-store.dsautomobiles.com
uat-admin.services-store.dsautomobiles.com
admin.services-store.dsautomobiles.com
sip-hr.mpsa.com
pat-admin.services-store.dsautomobiles.com
ppr.services-store.dsautomobiles.com
dsautomobiles.com
services-store.peugeot.fr
ppr.services-store.dsautomobiles.com
trn.services-store.dsautomobiles.com
pat-admin.services-store.dsautomobiles.com
inf-front-eligibility.services-store.awsmpsa.com
uat.services-store.dsautomobiles.com
dev.services-store.dsautomobiles.com
trn-admin.services-store.dsautomobiles.com
inf.services-store.dsautomobiles.com
*.dsautomobiles.com
dev.services-store.dsautomobiles.com
aemstagems4-connect.alfaromeo.com
uat.services-store.dsautomobiles.com
ppr.services-store.dsautomobiles.com
aemdevms4-connectivity.alfaromeo.com
admin.services-store.peugeot.fr
mediapays-cdn-dspp-driveds.dsautomobiles.com
services-store.peugeot.fr
ppr-admin.services-store.dsautomobiles.com
pat.services-store.dsautomobiles.com
admin.services-store.dsautomobiles.com
inscriptions-mondial-auto.dsautomobiles.com
admin.services-store.dsautomobiles.com
ppr-admin.services-store.dsautomobiles.com
login-dev.dsautomobiles.com
www.dsautomobiles.fr
ppr.services-store.dsautomobiles.com
fix-admin.services-store.dsautomobiles.com
inf.services-store.dsautomobiles.com
uat-admin.services-store.dsautomobiles.com
admin.services-store.dsautomobiles.com
inf-admin.services-store.dsautomobiles.com
www.dsautomobiles.com
uat.services-store.dsautomobiles.com
inf.services-store.dsautomobiles.com
www.dsautomobiles.fr
pat-admin.services-store.dsautomobiles.com
inf-admin.services-store.dsautomobiles.com
inf-admin.services-store.dsautomobiles.com

Certificate

The complete raw certificate details for pat.services-store.dsautomobiles.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LZe2YI6v0bhYaDgXu81
gwkRGLDfAe768Y3u7nmiSvSX7vuqJ2O4378iJnF1+0rjt0RcGybRWhd3x/5E/JYX
9o02kane1J5qkks3OXCh1HaFnuwJMBf4bSHuSxfCat9YUxnq7G/pzxvZ841Fnaf3
FXMTEj6WgRaqCTDOVkMoBt4FOdfuiZQJ2/ZtePnU37oKV37ZGyuuAfbOkpbXg5J+
dU8bKJbRIOjNAfO3QisrPs0ccgSzsy/zkqwQuy+V2QIHaRiRxwPrmrlSRvKdYrRw
VvlB4cn5bdpvV2S/GQFgH7lJBmXerxZgX1O7IivAkzihu9Rm2VaNYOQzxrzv17Lc
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10516356202215296430653979155879413423
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-05 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pat.services-store.dsautomobiles.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28872263780723086459238405038354261244002904474672637761890844989391178843282603531078790407608261681152894076854517769144727201740428044567706188525431695752508280344313032756251098347818807127844511928847900119668779418335373290801752547880492537281963140988008603975303725769175691816865243450009577277336802661906429805652841807646757103008222673732458122280345910472333466913242263755889207232590926493627660284147333922337994520407360787507411478815423333488232582398158676793951455324078387696834310939993429548580623135855464122812629398928366893593920826460652478169881592670004709148195316926461760563764461
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2ec68ff766b92daf9f0d8dcc55c3649a2a443d9a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (412 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pat.services-store.dsautomobiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pat.services-store.dsautomobiles.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pat.services-store.dsautomobiles.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pat.services-store.dsautomobiles.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pat.services-store.peugeot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pat.services-store.peugeot.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pat.services-store.peugeot.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pat.services-store.peugeot.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pat.services-store.citroen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pat.services-store.citroen.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pat.services-store.citroen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pat.services-store.citroen.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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