status.dev.rkaizen.ricoh.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0f:ab:9d:20:90:99:38:b5:eb:42:70:79:a2:10:94:06 was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=status.dev.rkaizen.ricoh.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:ab:9d:20:90:99:38:b5:eb:42:70:79:a2:10:94:06
Serial Number (int): 20829489617943242259761865305107764230
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 9c:76:d9:9a:d1:11:e6:07:6a:62:60:04:b5:ce:9f:ea:54:03:d2:6c
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 98:57:6e:80:5e:58:e5:09:3e:81:1d:37:2b:85:e1:bd:42:16:19:cc
Fingerprint (sha256): 04:3e:18:82:4e:83:89:8d:00:67:3e:67:6e:15:12:bb:ab:e4:0b:6c:0d:58:77:16:f1:2d:8a:a2:aa:22:a8:03

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate status.dev.rkaizen.ricoh.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for status.dev.rkaizen.ricoh.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

status.dev.rkaizen.ricoh.com
api.status.dev.rkaizen.ricoh.com
status.stage.dev.rkaizen.ricoh.com

Other certificates including the domain name ricoh.com

(limited to 100 certificates)
stapp-dev-5.in-house.ac03.dev-md.digital.ricoh.com
health.vmpower.io
extapi-dev-a.ac02.dev-md.digital.ricoh.com
gtl01.rcc.ricoh.com
dc-dev1.rinfra.ricoh.com
allow.sterda.com
*.start.ricoh.com
ez.fukuoka.status.ricoh.com
rxdom.g-tas.ricoh.com
remote-concierge.beta.csp.ricoh.com
stapp-dev-05.in-house.ac03.dev-md.digital.ricoh.com
www.na.inst.ricoh.com
eu.iwb-add-on-service.status.ricoh.com
capco-status.polaris.synopsys.com
app-status.cloudsign.jp
*.devu.smart-integration.ricoh.com
drco1i.cubic.ricoh.com
changes.carta.com
*.iot.deve.smart-integration.ricoh.com
*.na.smart-integration.ricoh.com
*.scrap.smart-integration.ricoh.com
eu.iwb-add-on-service.status.ricoh.com
pcont-dev-1.ac01.dev-md.digital.ricoh.com
*.io-ext-devu-dev.rinfra.ricoh.com
en.riws.status.ricoh.com
connect-status.instacart.com
ssl.cdngc.net
abrsonline.atostatus.com.au
abrsonline.atostatus.com.au
ez.fukuoka.status.ricoh.com
contents.ap1-dev.cdf.ricoh.com
test.procfs.ricoh.com
edge-api.ft.dm.deve.smart-integration.ricoh.com
eu1-status.mulesoft.com
na.smart-integration.status.ricoh.com
na.smart-integration.status.ricoh.com
advantagestatus.paradox.ai
contents.dev.cdf.ricoh.com
d4.specialcounsel.technology
*.rdata.ricoh.com
app-status.cloudsign.jp
*.smartitconcierge.ricoh.com
up.ja.stage.amspf.ricoh.com
changes.carta.com
12a10fad.status.cleafy.cloud
api-dev-06.ac03.dev-md.digital.ricoh.com
bare-metal-servers.status-ovhcloud.com
advantagestatus.paradox.ai
ricoh.com
*.sav.ex.start.ricoh.com
pcont-dev-ds.ac02.dev-md.digital.ricoh.com
*.scrap.accounts.ricoh.com
drco2i.cubic.ricoh.com
cwpstorage.status.symantec.com
jt.inst.ricoh.com
bare-metal-servers.status-ovhcloud.com
prod.co2-estimator.ivy.ricoh.com
stapp-dev-a.in-house.ac02.dev-md.digital.ricoh.com
appstatus.justworks.com
*.ric.ricoh.com
cs.status.ricoh.com
*.io-ext1001-na.rinfra.ricoh.com
cogver1.rcog.ricoh.com
na.smart-integration.status.ricoh.com
people.ohrengineering.com
eu1-status.mulesoft.com
prod.co2-estimator.ivy.ricoh.com
na.srs.status.ricoh.com
d4.specialcounsel.technology
status.dev.rkaizen.ricoh.com
abrsonline.atostatus.com.au
oa.aresflare.com
ja.riws.status.ricoh.com
bare-metal-servers.status-ovhcloud.com
*.na.smart-integration.ricoh.com
abrsonline.atostatus.com.au
alerts.illinoisstate.edu
alerts.illinoisstate.edu
api-dev-5.ac03.dev-md.digital.ricoh.com
eaa.status.akamai.com
na.smart-integration.status.ricoh.com
bare-metal-servers.status-ovhcloud.com
12a10fad.status.cleafy.cloud
www.cost-visualizer.ricoh.com
dc-scrap.rinfra.ricoh.com
*.cent7.smart-integration.ricoh.com
bare-metal-servers.status-ovhcloud.com
*.ric.ricoh.com
en.riws.status.ricoh.com
*.example-dev1.rinfra.ricoh.com
cwa.status.symantec.com
mgmt.cons1.os5.unics.ricoh.com
processing.azurepai.pfu-us.ricoh.com
*.pf-info-dev.rinfra.ricoh.com
cwpstorage.status.symantec.com
eu.iwb-add-on-service.status.ricoh.com
www.inst.ricoh.com
eaa.status.akamai.com
dev2.ap-northeast-1.rita.cip.ricoh.com
industry.ricoh.com

Certificate

The complete raw certificate details for status.dev.rkaizen.ricoh.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtMDfoFEb3IpmNx2xs9D+
AcNIWZYNeSK0mg8NXOZsrRtFOI2y9D85KLL1vWoAaMhtFe2Oqsxh3JPN2Ue+HXQ9
3T3GinfOelWyd78ah0xtjuGSth2ppQZwJjUKs1/qkBclMtcRXkGDCrHeYCDrl9oS
Ea2lhDuNUEK5FqSvXFl9ZvLKBueKLRTFfOlYCre8aP3FWvWoNU11JCZDJGCao1D4
l8ABqrTJu88GdM4Fj2PlVMS1tmM49t5Rqm7KfBu2z7uTLYPa6vERi76pIfo3gWOD
vUMXiaR2ijtURT73gNHEAAckVUWCDnQx7kdzNLBKqP9WA8i87gftKx4p1sUrrQ8W
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20829489617943242259761865305107764230
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'status.dev.rkaizen.ricoh.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22818004381239110449002434774651378181730427348493457900227970436459564658521055428301234210778054109395961956091806028826993814066843290581675688410722527920061283352774216419966564879699278756991395875287339284242579462104362567961149265639092122758620910525353047500675249406133254478499584905581222353125114749380292115328221105850780683245825522173842402764707926830277893201179717901165682323112628265946061001172313177743236777856374366940450080236529389608834379213785216064159511053578148918295692013435352595267810258900453697312738072742267622562351178839000575798163843502301457268320985029809814855685839
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9c76d99ad111e6076a626004b5ce9fea5403d26c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.dev.rkaizen.ricoh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.status.dev.rkaizen.ricoh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'status.stage.dev.rkaizen.ricoh.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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