www.portaildigital.parts.renault.com

Issued by Amazon

About this certificate

This digital certificate with serial number 01:0b:d4:b2:00:09:88:38:2e:a5:af:14:34:5e:4b:8c was issued on by Amazon.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.portaildigital.parts.renault.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:0b:d4:b2:00:09:88:38:2e:a5:af:14:34:5e:4b:8c
Serial Number (int): 1390657234689224280596766248268614540
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: ea:78:e1:5e:27:d0:47:6a:5e:b9:c9:46:04:a6:5c:9a:96:90:97:d0
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 67:2e:b5:f4:73:e3:10:27:01:dc:b2:2e:a4:0e:1d:9c:e0:16:d0:5a
Fingerprint (sha256): 04:2b:e5:a4:5f:ca:8b:b9:7f:df:69:ef:a6:6e:44:3d:df:a5:65:e3:74:64:7d:da:9e:cb:1a:a5:97:95:d0:3d

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate www.portaildigital.parts.renault.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.portaildigital.parts.renault.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.portaildigital.parts.renault.com
www.portaildigital.ram.aws.renault.com
ram.dcs2.renault.com
dcs2.ram.aws.renault.com
bo.ram.aws.renault.com

Other certificates including the domain name renault.com

(limited to 100 certificates)
prm.renault.com
iqm.re7.aws.renault.com
matomo-re7.dt.renault.com
s3d.dev.gcp.renault.com
d4c.dev.asdh.aws.renault.com
portailrbl.dcs2.renault.com
git-sbx.sbx.aws.renault.com
testingmedia.cardekho.com
bbp.dev.aws.renault.com
tdamono.ope.aws.renault.com
dt.renault.com
www.easyelectriclife.groupe.renault.com
dt.renault.com
dod.tst.aws.renault.com
francktest.dev.aws.renault.com
*.partakus.com
service-solutions.dcs2.renault.com
mlk.tst.dcs.aws.renault.com
testingmedia.cardekho.com
dpt.dev.aws.renault.com
tst.dev.aws.renault.com
trm.dev.aws.renault.com
cdn.asdh.aws.renault.com
00001.salesforce-communities.cdn.t.siteforce.com
support4.cdnetworks.net
dcs.renault.com
r2d2.apv.aws.renault.com
00001.salesforce-communities.cdn.t.siteforce.com
pzm.dev.aws.renault.com
kdo.ope.aws.renault.com
registry-cache.dt.renault.com
refservices-qa.sbx.renault.com
actualites.wiztopic.com
affinitysa.renault.com
wws.ope.aws.renault.com
support4.cdnetworks.net
testingmedia.cardekho.com
tst.dev.aws.renault.com
adtprod.adt-prod.adt-ext.com
*.co.rplug.renault.com
support4.cdnetworks.net
3dv1.renault.com
lesiegev2-preprod.renault.com
driverg9.dcs2.renault.com
tst.aws.renault.com
3dv.renault.com
affinity.renault.com
tst.dev.aws.renault.com
store.staging.re-generations.xyz
epds.renault.com
jenkins-ce.eks.dt.renault.com
dpt.ope.aws.renault.com
rvp.dev.aws.renault.com
support4.cdnetworks.net
www.portaildigital.parts.renault.com
assuranceamaline.dcs2.renault.com
mvrro.renault.com
*.wrd-aws.com
stg.fr.co.rplug.renault.com
zoemap.renault.com
informatique-preprod.renault.com
tld.dcs.renault.com
actualites.wiztopic.com
vrd.dev.aws.renault.com
admin.dealerconnect.renault.com
staging.inffinity.renault.com
actualites.wiztopic.com
*.tst.re7.aws.renault.com
sma.ope.aws.renault.com
sp5.dev.aws.renault.com
4ex.ope.aws.renault.com
motrio-uat.renault.com
dev.piwik.asdh.renault.com
flipcard.easyelectriclife.groupe.renault.com
nip-dev.renault.com
dcs-validation.renault.com
webappsites.renault.com
tax-vision.renault.com
secure.renault.com
refservices.api-dmo.dev.gcp.renault.com
dev.onepo.aws.renault.com
tax-vision.renault.com
workflows.dcs2.renault.com
dpt.re7.aws.renault.com
apis-demo.tls.renault.com
pit.ope.aws.renault.com
boybatch.dev.aws.renault.com
d4b.re7.aws.renault.com
support4.cdnetworks.net
support4.cdnetworks.net
support4.cdnetworks.net
*.wrd-aws.com
00001.salesforce-communities.cdn.t.siteforce.com
brandhub.renault.com
vcc.dcs.aws.renault.com
espace.renault.com
bhl.re7.aws.renault.com
rpw.dev.aws.renault.com
atelier.renault.com
testingmedia.cardekho.com

Certificate

The complete raw certificate details for www.portaildigital.parts.renault.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8TzRjoNhKUlCCBCjMxN8
5/fcJfFVhcHLDRQzEQu+4HVER0IVflfF8HSYeqrOHghkrIFj1hwgT89bBhrfrR7t
KXAqq/ZDAFiWKyQ4R7r5ZRdDMK512XNW4U8eKNiv9jNl0PEEq78WC2QlJQAwJZvk
CvLZd5TGOuMIqbBEqF0kxbhSUPqokgrXtzITxFFmb3lq2biCRMmIx8PvPdCX0L80
afRTCyiJ88STqZKLb0XLcjrIPRp7xfOmCgPADk9ApplB4EicSXjRuv8nD9titzn5
GO5NjId9jxzEH/YlX3k22eDuH0yudsnMN5Ml1ljSFCAd2n+pCEaEukz7o1AeAj3k
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1390657234689224280596766248268614540
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.portaildigital.parts.renault.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30453422256797779214739360210292573495081528623051036092170468020007888258005507112080058675589833582190056624427595944504431422403934334788917337851444630367048516862067543148018876498256113900140155528451551287210114516855746121717847873145818489789777200925734754452265538854945628717844184975207039070481931286506489502309641235414353056187002615654263021775466603932754534559901225229294299589939381265616435793202128828548706538269596057684367084539098718316192010961012280642623996235464863077656475222466448322338674810760523210587740552924142464982252619105534897993073324261916447470589612040384662439060661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ea78e15e27d0476a5eb9c94604a65c9a969097d0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (153 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portaildigital.parts.renault.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portaildigital.ram.aws.renault.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ram.dcs2.renault.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcs2.ram.aws.renault.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo.ram.aws.renault.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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