itdealersupport.pre.stellantis.com

Issued by R3

About this certificate

This digital certificate with serial number 04:aa:89:83:96:e4:23:4e:d5:ae:d1:7e:09:e6:00:53:ca:39 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=itdealersupport.pre.stellantis.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:aa:89:83:96:e4:23:4e:d5:ae:d1:7e:09:e6:00:53:ca:39
Serial Number (int): 406479933590347915793925839751649825114681
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c6:26:5d:36:18:76:59:14:a2:f1:3f:49:dd:12:6e:b5:81:7e:98:cb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e0:51:ec:a9:7b:a6:ab:35:54:74:01:79:be:4b:1c:c1:c0:cf:88:27
Fingerprint (sha256): 09:5d:a1:49:39:79:df:75:21:25:85:19:04:b2:c4:4a:cf:95:63:d1:17:3f:0d:1a:53:65:41:9f:ce:5d:51:98

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate itdealersupport.pre.stellantis.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for itdealersupport.pre.stellantis.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

itdealersupport.pre.stellantis.com

Other certificates including the domain name stellantis.com

(limited to 100 certificates)
staging1.fcagroup.com
stage.digitalme.stellantis.com
diabase.stellantis.com
test.k2.extra.stellantis.com
dash.stellantis.com
oms-ui-stage.stellantis.com
isba.stellantis.com
www.fcagroup.com
be.idhub.test.stellantis.com
aemdevms4-connectivity.alfaromeo.com
alpha.nea.wrt.stellantis.com
aemstagems4-connect.alfaromeo.com
be.idhub.stellantis.com
incubator.stellantis.com
workbench.stellantis.com
secure5s.scene7.com
linkentry.fiat.com
git.stellantis.com
vpn-mobile-preprod.stellantis.com
*.stellantis.com
aemstagems4-connect.alfaromeo.com
oms-ui-dev.stellantis.com
commercial-needs.stellantis.com
admin3-medialibrary.stellantis.com
abarth.pt
audiencemanager.stellantis.com
www.stellantis.com
prod.sfp.stellantis.com
comconnect.stellantis.com
imc.test.com-activities.stellantis.com
teamcity.stellantis.com
itdealersupport.stellantis.com
dpromo.abarth.it
login-stage.sapcdc.stellantis.com
san-16-s51.tlsprovisioning.exacttarget.com
management.diagboxcloud.stellantis.com
uat3.alfaromeousa.com
nea.wrt.test.stellantis.com
*.test.as.ivdp.dash.stellantis.com
itdealersupport.pre.stellantis.com
abarth.pt
spu-dev.stellantis.com
idpm.stellantis.com
abarth.pt
cloud.web.stellantis.com
www.fiat.com
nocache.media.stellantis.com
isba.staging.stellantis.com
staging1.fcagroup.com
aemstagems4-connect.alfaromeo.com
oms-ui-stage2.stellantis.com
aftersales-solutions-test.stellantis.com
thehub.stellantis.com
ppr.ppw.stellantis.com
carcomp.stellantis.com
email.lumapps.thehub.stellantis.com
privacyportal.stellantis.com
docma.stellantis.com
targethub.test.stellantis.com
cars-tms.stellantis.com
secure5s.scene7.com
click.web.stellantis.com
secure5s.scene7.com
fed.docmacert.stellantis.com
san-7-s10.tlsprovisioning.exacttarget.com
uat3.alfaromeousa.com
abarth.pt
*.stellantis.com
abarth.pt
dashboards.stellantis.com
admin2-medialibrary.stellantis.com
aemdevms4-connectivity.alfaromeo.com
www.jeep.com
email.lumapps.thehub.stellantis.com
abarth.pt
secure5s.scene7.com
diagboxcloud.stellantis.com
my.des.stellantis.com
admin.idhub.test.stellantis.com
carconfigurator.fcagroup.it
cloud.iap-crm.stellantis.com
www.fiat.com
integration-diagcloud.stellantis.com
www.fiat.com
*.stellantis.com
test.ccl-event.stellantis.com
dpromo.abarth.it
aemdevms4-connectivity.alfaromeo.com
digitalme.stellantis.com
edoc-partners.stellantis.com
mcstaging.stellantis.com
autodiscover.external.stellantis.com
api.ccl-event.stellantis.com
careers.stellantis.com
stellantis.com
stage1-www.opel.de
oms-ui-stage3.stellantis.com
alpha.nea.wrt.test.stellantis.com
askstella.stellantis.com
oms-ui-stage2.stellantis.com

Certificate

The complete raw certificate details for itdealersupport.pre.stellantis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 406479933590347915793925839751649825114681
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-14 11:36:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-13 11:36:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'itdealersupport.pre.stellantis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 831741847166183733904963481262097349600835950546933255358598879725937753185371596931796329604383113921875856657709257902285667189306043599312680799604034160948596303889656142317025646325826337896054112529972499916463434927388845324347527280718186365918623122629394498000991934507490771255008351690633376869322918188748844199009984918610038275025904433455265277422234386993797693573635326403624580233607334668733867249724457228815973775663767473347686364883679373470522481336901944362730711282494069978528242854265866305832111120343592201198807673410196242295356783433916656214049531955196008119453903332351658919997054925462961099533984100518526214775713060488221190182312466696679330913965723032539177254610719229927501800616461177989392087463080558373376961886717842569922446321322349810962875600961753738606317073317497758806179160538937417101711094824308862250359259286531393693646617933856458938910943068817057051307268752895041166353325922116718755480302261179533300378794496334689437665791186659816995915314131165687198808710647884754395411274359714822999858674250600978392477573811329112807724282110624349760156725040854729078235787492046640447107487205842998497895972309625498012624937615125054460778171840617354947212647311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c6265d3618765914a2f13f49dd126eb5817e98cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itdealersupport.pre.stellantis.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018edc9c4ad70000040300473045022100eab9254ba1d5e6cb49edab51aaf9b073936a9461e17b784a18fed8f5c11044bc022002c75187a4b132676ab6101a5338f7ebc503a5bf46e00e3ec248b876c78bc4fc0076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018edc9c4ae60000040300473045022100a0a7b709a43be6cdc48cb07d906130bb8ea2967613cad089ab022218c23b01ca022059ea78a4d05ec0e95ed25c557589cc7829e5ef7258f51f02f235574886203210
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000bff165fdee8ffcb3d56a6b532ea15aea4bc369db073bad633c23976f03f48f75e8a757c960cfd801fb7b300fb83732e0cfc75a91fc900a79a3709d4bf62237c6ee920a62c4a973de1de4488de408b1e43d54932e050a69845f8483123095729c4c3a92bbfc6534eb0ce15c46ff8b9b4d8b9a0076922703235d29071991af11b932b6e58f7d58626f1f742b12d3064fce1b1bc4dded550d20c3628d42a786b7be8ee6633f90d94f5af5ffaf78d3f5781a8e953d825d111dbd9d81f922bb88f68ceb87299f346d7f213c6ab7d79cef0b5126c26a15ee734d3a343294cd8afa5bc3d1bea505a17b27dffd733dcdc8cedef021ab0bf3105f48a271bd9971400a14c