cdhx314quicksight-updater.iam-dev.data.bmw.cloud

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0d:ff:28:8d:82:8a:0e:c1:f7:e2:ca:98:bd:28:b6:aa was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cdhx314quicksight-updater.iam-dev.data.bmw.cloud

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:ff:28:8d:82:8a:0e:c1:f7:e2:ca:98:bd:28:b6:aa
Serial Number (int): 18604822152085300702209432918113695402
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 57:d4:ce:0b:a4:a3:33:5b:f8:2c:37:1e:33:2e:93:d5:ed:33:71:8e
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): a1:21:c3:4c:a3:16:de:0d:99:ff:27:15:ec:6c:76:80:a4:73:f4:0e
Fingerprint (sha256): 0a:0c:7c:04:1c:51:e0:2e:c7:1b:15:05:fd:d0:18:bf:b5:6c:98:1e:ba:ea:c8:44:e8:32:e4:3a:d2:42:11:55

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate cdhx314quicksight-updater.iam-dev.data.bmw.cloud

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cdhx314quicksight-updater.iam-dev.data.bmw.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdhx314quicksight-updater.iam-dev.data.bmw.cloud

Other certificates including the domain name bmw.cloud

(limited to 100 certificates)
drhub-i.aws.bmw.cloud
api.emea.deperso-dev.data.bmw.cloud
admin.smoss.apac.bmw.cloud
cdp.hst-dev.bmw.cloud
cdhxchrfederation-test-service.iam-oss.data.bmw.cloud
cdhxcoreexternal-authentication.iam-oss.data.bmw.cloud
cdhxlpaexternal-authentication.iam-oss.data.bmw.cloud
sf-mco.aws.bmw.cloud
resources-dev9.data.bmw.cloud
impxmv1.impact-connector-dev.data.bmw.cloud
api.loyalty-dev.my.bmw.cloud
cdhxdev14idp.iam-int.data.bmw.cloud
api.aiforeng.aws.bmw.cloud
b2cds-neo-storybook.int.b2cds.eu-central-1.aws.bmw.cloud
rvm-test.aws.bmw.cloud
api.rita-dev.azure.bmw.cloud
data-middleware.aws.bmw.cloud
cdhxlu2.api-dev.data.bmw.cloud
us-east-1.api-dev.data.bmw.cloud
graphql.orbit-selfservice-test.aws.bmw.cloud
qa-wcmp.wcp-int.bmw.cloud
establish.test.digital-trust.bmw.cloud
bmw-int1.com
ktd.aws.bmw.cloud
compare.int.stolo.eu-central-1.aws.bmw.cloud
ispi-dev.azure.bmw.cloud
b2b.prod.trainingsmedia.bmw.cloud
cdhxdev8authorization.iam-int.data.bmw.cloud
user-api.int.manage.aws.bmw.cloud
api.eu-central-1.playground.personalization.aws.bmw.cloud
authorization.fsspk2-iam.scratch.cdh-oss.bmw.cloud
sql-dev9.data.bmw.cloud
engage-th-uat.apac.bmw.cloud
frontend-api.chengdu.manage.aws.bmw.cloud
cdhxkguquicksight-updater.iam-dev.data.bmw.cloud
content-e2e.bch-ipa.aws.bmw.cloud
graph-dev7.data.bmw.cloud
dvs-css-frontend.st4.dvscss.eu-central-1.aws.bmw.cloud
cdhxkgu-gutherkfederation-test-service.iam-oss.data.bmw.cloud
fsspk1.fsspk1-api.scratch.cdh-oss.bmw.cloud
pr2quicksight-updater.iam-oss.data.bmw.cloud
lb.int.cosy.bmw.cloud
mini-next.configurator.bmw.cloud
mhx000metahub-config.metahub-dev.data.bmw.cloud
svmd.msdynamics.azure.bmw.cloud
crm-adapter.aws.bmw.cloud
api.blava-int.aws.bmw.cloud
dev3.ingest-dev.data.bmw.cloud
subscriptions-dev3.data.bmw.cloud
cdhxmorgraphql-api-dummy.iam-oss.data.bmw.cloud
bmw-int1.com
portal.nkam-sit.azure.bmw.cloud
rvm-int.aws.bmw.cloud
cdhxdev10idp.iam-int.data.bmw.cloud
openvidu.viper.bmw.cloud
demo.tst.us-east-1.cgpb-test.aws.bmw.cloud
dfms.bmwna-dealer-cms-reimagine-prod.us-east-1.aws.bmw.cloud
cdhxjr2.api-dev.data.bmw.cloud
media.assets.dev.nft.aws.bmw.cloud
cdhxcoreperformance-data.iam-oss.data.bmw.cloud
qa.mu.int.rossi-italy.bmw.cloud
configure.mini.com
cdhxdev3authentication.iam-int.data.bmw.cloud
pr0quicksight-assets.iam-oss.data.bmw.cloud
cdhxblsgraphql-api-dummy.iam-oss.data.bmw.cloud
admin-dev.azure.bmw.cloud
graph-dev13.data.bmw.cloud
pr1quicksight-updater.iam-oss.data.bmw.cloud
bmw-int1.com
api.smms.apac.bmw.cloud
portal.data.bmw.cloud
issue-func.test-lppackagingapproval.azure.bmw.cloud
bmw-int1.com
impxmat.impact-connector-dev.data.bmw.cloud
authentication.fssww1-iam.scratch.cdh-oss.bmw.cloud
italy.manage.aws.bmw.cloud
mybmwweb-app.e2e.mybmwweb.eu-central-1.aws.bmw.cloud
cdhxkguidp.iam-dev.data.bmw.cloud
api.manage.aws.bmw.cloud
prodlib-ev-aggregator-prod.prodlib-prod.aws.bmw.cloud
int.nbc.bmw.cloud
cdh-api.dev.simpledata.bmw.cloud
impxjro.impact-connector-dev.data.bmw.cloud
cdhx008.api-dev.data.bmw.cloud
server.ispi.azure.bmw.cloud
intranetkr-dev.aws.bmw.cloud
bmwgroupdesignworks.com
status.codecraft.bmw.cloud
bts-webshop-int.aws.bmw.cloud
api.smoss-qa.apac.bmw.cloud
cdhxdev13docs.iam-int.data.bmw.cloud
ccr-x-dev.aws.bmw.cloud
app.engage-my-uat.apac.bmw.cloud
quizit.azure.bmw.cloud
us-east-1.api.core.data-int.bmw.cloud
cdhxmordocs.iam-dev.data.bmw.cloud
fabric.rita-dev.azure.bmw.cloud
dev.sales-steering-reporting.aws.bmw.cloud
cdhxdev4quicksight-updater.iam-int.data.bmw.cloud
clouddays.data.bmw.cloud

Certificate

The complete raw certificate details for cdhx314quicksight-updater.iam-dev.data.bmw.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4rPNDQf8q55ux2/e5WfS
34k66wg+WLjMiZUVF4u5N4xhgeF+JnS3F63L6EqQvxCypjBpE30jfyUSWw5BDWB5
kmL5eZnUZxc/NxRsanbW/hk202ZjIwQX22iKfM20kl3GVGObiQG2pjTzzEmPP/kP
llWlmLgpf+CS+JJlWSDIXchBcdo7lD1GrSwsCooSZdlJEbes2Ypbb1KPTK/F3gsu
UVkEIwIr8VdmV/FaTHmr+ypPQ822rNK2GRr553AzsEl3njfvf94MxQ1WbDVW9Lk6
aYGLzQF3CQYGht3jcS5oR5KVcAktsjB66czXhkDL0KQ747HX4lfx6tGZoT9SfEQ8
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18604822152085300702209432918113695402
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdhx314quicksight-updater.iam-dev.data.bmw.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28618520090133303387430968335671936622047658591081475890349140294350983405437564849224155353321594774925714810467227798352788710502053332989236717290767025769420367481170715789959384682638758173305730460219463581539918017857421048139434104136434161337076129799917612013870348957010910774472466957617852828165571809339651281916430444875286784162435965833136212442616755434767984906998279573665026835495136707639283022110022521033456235479489242501811578765488413658707783369660178589486629105335073012789063501994389031047652895315294102306535556969035568276318888119814368360946641186814855975999767472248257167768579
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							57d4ce0ba4a3335bf82c371e332e93d5ed33718e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdhx314quicksight-updater.iam-dev.data.bmw.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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