atos-data-labeling.playground.daai.siemens.cloud

Issued by Amazon

About this certificate

This digital certificate with serial number 04:c6:28:b8:c6:2b:6c:55:b5:c9:75:0c:44:30:9f:5c was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=atos-data-labeling.playground.daai.siemens.cloud

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c6:28:b8:c6:2b:6c:55:b5:c9:75:0c:44:30:9f:5c
Serial Number (int): 6345812696826135405041620152187133788
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 45:7a:d3:32:b1:75:33:85:b6:8e:94:b4:06:82:80:cc:82:91:b1:1f
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 1a:28:e3:bf:53:ce:61:b2:88:11:df:46:97:17:36:2a:ba:3d:bd:16
Fingerprint (sha256): 04:20:c2:d1:b9:9e:98:50:df:1d:1a:28:00:cc:d9:c1:ad:8a:7c:e9:ea:05:13:e3:e1:13:c4:d0:97:27:fe:d4

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate atos-data-labeling.playground.daai.siemens.cloud

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for atos-data-labeling.playground.daai.siemens.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

atos-data-labeling.playground.daai.siemens.cloud
*.atos-data-labeling.playground.daai.siemens.cloud

Other certificates including the domain name siemens.cloud

(limited to 100 certificates)
jira.gdmc.siemens.cloud
demo-frankfurt.iip.siemens.cloud
saleskits.siemens.cloud
cic-berlin.siemens.cloud
*.stephan.sp275.tiat.siemens.cloud
fleetmanager.demo-evosoft.siemens.cloud
sn-189.opscenter-dev.siemens.cloud
annotation.theia.ct-rda-bam-mic.siemens.cloud
jira.siemens.cloud
cssfe.bt-dev.siemens.cloud
confluence.gdmc.siemens.cloud
*.ecar-dev.masglobal.siemens.cloud
soc.siemens.cloud
sidriveiqtwin-lda-q.siemens.cloud
*.spicetest.siemens.cloud
pulse.siemens.cloud
tmb.security-int.siemens.cloud
tms.daac-apps.siemens.cloud
idaas.siemens.cloud
iot-apm-manager.mosaic-dev.siemens.cloud
sifrai.siemens.cloud
fair.navigator.gds-energy.siemens.cloud
*.naf-pipeline.nav2cloud-build.bt.siemens.cloud
simpleaccess-siemens-id.siemens.cloud
siemensfm.idea-company.siemens.cloud
*.eightfold.ai
evoawsesp.sap.siemens.cloud
btssp-smtp.sz.bt.siemens.cloud
qa-dcs.apps.siemens.cloud
*.fleetmanager.emob-fleetportal-qa.siemens.cloud
soc-x.siemens.cloud
myid-test.hackathon.daai.siemens.cloud
snapp.scm.mosaic-qa.siemens.cloud
app1.mendix.siemens.cloud
allocation-uat.siemens.cloud
*.authorization.siveillance-dev.siemens.cloud
flex-ops-advisor-be.mosaic-qa.siemens.cloud
sj-299-nvme-uuid.opscenter-dev.siemens.cloud
portfolio.mosaic-dev.siemens.cloud
*.profiles.prod.dmp.siemens.cloud
siemens-apm-appdevelopment.mosaic-dev.siemens.cloud
genelba-apm-andsrv.mosaic-dev.siemens.cloud
redirects.dc.siemens.com
zero-engineering.apps.siemens.cloud
*.rpe.global.siemens.cloud
api.pages.playground.isec.siemens.cloud
*.k8.siveillance.siemens.cloud
*.idaas.siemens.cloud
*.istio.thomas.sp275.tiat.siemens.cloud
mlhub.ct-rda-bam-mic.siemens.cloud
jira-test.sz.bt.siemens.cloud
alfredo.siemens.cloud
silounge-poc.siemens.cloud
iot-apm-appsrv.mosaic-dev.siemens.cloud
access.bt.siemens.cloud
dcs.apps.siemens.cloud
api.aws.siemens.cloud
api.dev-ram.apps.siemens.cloud
evoawsesd.opscenter-dev.siemens.cloud
demo.burstdetection.apps.siemens.cloud
sn-cops-72.opscenter-dev.siemens.cloud
qlik-test.si.siemens.cloud
*.ir.adminaccess.siemens.cloud
documentsservice.spicetest.siemens.cloud
rancher.tiat.siemens.cloud
pl-cops-312.opscenter-dev.siemens.cloud
siemensfm.idea-company.siemens.cloud
data-commons.mobilityai.siemens.cloud
packages.hpc.siemens.cloud
*.siq-dev.apps.siemens.cloud
shell.playground.isec.siemens.cloud
*.naf-pipeline.nav2cloud-build.bt.siemens.cloud
int.motion.siemens.cloud
rancher.dev.tiat.siemens.cloud
logcenter.almxserv.siemens.cloud
*.digitaltwin.bt.siemens.cloud
*.sz.bt.siemens.cloud
log.graph.siemens.cloud
cf-monitor.playground.siemens.cloud
evoawsesp.opscenter-dev.siemens.cloud
atos-data-labeling.playground.daai.siemens.cloud
sj-166-peering.opscenter-dev.siemens.cloud
mobilityai.siemens.cloud
building360-dev.siemens.cloud
petshop.playground.isec.siemens.cloud
mlhub.ct-rda-bam-mic.siemens.cloud
pl-cops-488-fix-1.opscenter-dev.siemens.cloud
*.stephan.sp275.tiat.siemens.cloud
culture-kit.idea-company.siemens.cloud
pkn.siemens.cloud
ui.elv-dev.masglobal.siemens.cloud
*.istio.stephan.sp275.tiat.siemens.cloud
fleetmanager.emob-fleetportal-qa.siemens.cloud
soc-q.siemens.cloud
svi.qa-dcs.apps.siemens.cloud
webappdev.eingenia.siemens.cloud
kmt-projects.siemens.cloud
auth.soc.siemens.cloud
api.dcs.apps.siemens.cloud
www.mswitaly.siemens.cloud

Certificate

The complete raw certificate details for atos-data-labeling.playground.daai.siemens.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx4Y28g0n/f+kekBOJkO
BbVnvBs8TQZ/yJzu/rFcbMmWf37vd5QKZs2GsZw9xgK5HhwRUmR9yRHNvIgNFFYz
NAHM1URYeeylN7fUZZCUytNUvZka1qscCPO+aBwJ4KOjJqHET0/kO4/Z9V1UeCo+
1A5C9wHZdhuQQo8hv13VBlujPO9w63P4bU9GWNKMQRR79K3g4QcA7gasIOTKj+rN
jIFTdnpR6QijE9VamLNcpf0ws2rAmkXVoQhQrrD58Q0D7jykAb9NhKxBE68fQe8c
3dqGTD3zaW6mroWqKfmmM555cAaql4dO1dwIZnuPZwIDuNkAb5DDXxSOAVJXGBvM
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6345812696826135405041620152187133788
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'atos-data-labeling.playground.daai.siemens.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22106544803997212182875516177580623780422490588026430382682666294559361904477828456761452989247048569477580834154382905106542427606423781223251517890352763313411444300378208836459194489805902993850235471591707012826037583289901121439881970368630684983837827329662530881162578931757768916890906981287550335520819629270302053738096972862958631595994820180295511128265006238570220630231663605817643618470190960973467862986312728261528992990398389558459959670318222796480047874122364578518394894265371876393669197394466984622085822937868680498542356356781432844903141864051155580717252952635786356364196380743840443387067
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							457ad332b1753385b68e94b4068280cc8291b11f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atos-data-labeling.playground.daai.siemens.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.atos-data-labeling.playground.daai.siemens.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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