*.test.as.ivdp.dash.stellantis.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 05:7e:9a:f7:56:8d:3b:0c:f0:25:30:4d:2c:0b:53:f2 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.test.as.ivdp.dash.stellantis.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:7e:9a:f7:56:8d:3b:0c:f0:25:30:4d:2c:0b:53:f2
Serial Number (int): 7303512470321519269739598389734757362
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 14:c4:fd:5a:79:00:a1:b7:3a:47:a7:13:51:49:44:2c:f3:8c:0c:17
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 80:22:6f:b8:dd:78:2e:a7:a7:d9:87:b6:05:c9:73:08:31:97:d8:96
Fingerprint (sha256): 08:49:29:1e:e8:ee:d4:ec:d4:63:c3:f4:31:e4:ca:e4:6d:49:eb:a5:60:e3:d9:9c:53:b6:8d:3e:c4:3d:68:a8

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.test.as.ivdp.dash.stellantis.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.test.as.ivdp.dash.stellantis.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.test.as.ivdp.dash.stellantis.com
test.as.ivdp.dash.stellantis.com

Other certificates including the domain name stellantis.com

(limited to 100 certificates)
staging1.fcagroup.com
stage.digitalme.stellantis.com
diabase.stellantis.com
test.k2.extra.stellantis.com
dash.stellantis.com
oms-ui-stage.stellantis.com
isba.stellantis.com
www.fcagroup.com
be.idhub.test.stellantis.com
aemdevms4-connectivity.alfaromeo.com
alpha.nea.wrt.stellantis.com
aemstagems4-connect.alfaromeo.com
be.idhub.stellantis.com
incubator.stellantis.com
workbench.stellantis.com
secure5s.scene7.com
linkentry.fiat.com
git.stellantis.com
vpn-mobile-preprod.stellantis.com
*.stellantis.com
aemstagems4-connect.alfaromeo.com
oms-ui-dev.stellantis.com
commercial-needs.stellantis.com
admin3-medialibrary.stellantis.com
abarth.pt
audiencemanager.stellantis.com
www.stellantis.com
prod.sfp.stellantis.com
comconnect.stellantis.com
imc.test.com-activities.stellantis.com
teamcity.stellantis.com
itdealersupport.stellantis.com
dpromo.abarth.it
login-stage.sapcdc.stellantis.com
san-16-s51.tlsprovisioning.exacttarget.com
management.diagboxcloud.stellantis.com
uat3.alfaromeousa.com
nea.wrt.test.stellantis.com
*.test.as.ivdp.dash.stellantis.com
itdealersupport.pre.stellantis.com
abarth.pt
spu-dev.stellantis.com
idpm.stellantis.com
abarth.pt
cloud.web.stellantis.com
www.fiat.com
nocache.media.stellantis.com
isba.staging.stellantis.com
staging1.fcagroup.com
aemstagems4-connect.alfaromeo.com
oms-ui-stage2.stellantis.com
aftersales-solutions-test.stellantis.com
thehub.stellantis.com
ppr.ppw.stellantis.com
carcomp.stellantis.com
email.lumapps.thehub.stellantis.com
privacyportal.stellantis.com
docma.stellantis.com
targethub.test.stellantis.com
cars-tms.stellantis.com
secure5s.scene7.com
click.web.stellantis.com
secure5s.scene7.com
fed.docmacert.stellantis.com
san-7-s10.tlsprovisioning.exacttarget.com
uat3.alfaromeousa.com
abarth.pt
*.stellantis.com
abarth.pt
dashboards.stellantis.com
admin2-medialibrary.stellantis.com
aemdevms4-connectivity.alfaromeo.com
www.jeep.com
email.lumapps.thehub.stellantis.com
abarth.pt
secure5s.scene7.com
diagboxcloud.stellantis.com
my.des.stellantis.com
admin.idhub.test.stellantis.com
carconfigurator.fcagroup.it
cloud.iap-crm.stellantis.com
www.fiat.com
integration-diagcloud.stellantis.com
www.fiat.com
*.stellantis.com
test.ccl-event.stellantis.com
dpromo.abarth.it
aemdevms4-connectivity.alfaromeo.com
digitalme.stellantis.com
edoc-partners.stellantis.com
mcstaging.stellantis.com
autodiscover.external.stellantis.com
api.ccl-event.stellantis.com
careers.stellantis.com
stellantis.com
stage1-www.opel.de
oms-ui-stage3.stellantis.com
alpha.nea.wrt.test.stellantis.com
askstella.stellantis.com
oms-ui-stage2.stellantis.com

Certificate

The complete raw certificate details for *.test.as.ivdp.dash.stellantis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7WtW8KrNbD3z1u5Ku3XM
qAK79Fyc+yhuhZvUDlC8O7rqatT9uY2J+JgWtuqGlJQ70o8/+pNGEHUpgQYPy4yk
lKnRJUovpGmkTVnv92QbNpQGe+nLaFx/VW0hWTf+wq6t7wJYANXvEhglDsa+YD/v
eyRQei0DBgRVqRjjsVDei9Rj1rRI3p+YLV/LLHr7gAK7kvpc6o6QfWWMe0IBxgxt
k4hLqlhA6+DlRpnrdb6VMtOixFYvmyFDzTS5/MDIUgkTIzywBuOmVDiiSMIF+QQO
zCLfUm982iXgaLI5N7bZQD7YZsY4l9zWD5I+FqwgFdVuTLysvhx5/4vPhEDLNtgu
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7303512470321519269739598389734757362
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.test.as.ivdp.dash.stellantis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29971409411313732973209324142911085226047785267013810903327543457458765194986996412154050058397069179238001515294308140819349858012129916627822907006223764674582560461444525724691211325121139328972590680096957002773247449831280626301689922214191986998271770262876728742960239477731634963386703772423272255638154204613532859496151274015692622519867189498789069820410029927139460482403461826304833782110437432689939209108190162777207293096616456095369029013087631038011536645360763804928186565083084520882024121511789935946832862836997489329517562274029952207229163037156738173206254201112909559292727426168012175584791
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							14c4fd5a7900a1b73a47a7135149442cf38c0c17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.as.ivdp.dash.stellantis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.as.ivdp.dash.stellantis.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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