apf-api.prd.vn.cloud.tesla.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:a8:09:7c:3f:6a:9d:58:20:1c:37:cc:99:51:c3:a5 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=apf-api.prd.vn.cloud.tesla.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:a8:09:7c:3f:6a:9d:58:20:1c:37:cc:99:51:c3:a5
Serial Number (int): 19481690198827702688847064055311090597
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c0:e7:9c:21:d0:71:6c:55:83:fb:9e:b5:50:52:00:1c:da:dd:2a:6b
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): a6:0d:2b:e5:67:51:05:ee:b7:24:6f:83:97:ef:d0:bb:7b:05:71:b6
Fingerprint (sha256): 0b:24:02:2d:00:11:ec:0f:4f:29:8b:1e:23:2f:79:36:a1:86:5f:ee:25:83:d4:c3:2d:79:c7:ef:34:bf:5d:53

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate apf-api.prd.vn.cloud.tesla.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apf-api.prd.vn.cloud.tesla.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apf-api.prd.vn.cloud.tesla.com

Other certificates including the domain name tesla.com

(limited to 100 certificates)
*.tesla.com
teslacmgap01.tesla.com
akamaisecure3.qualtrics.com
s7-sni.cloudinary.com
support.techfirstgulf.com
vehicle-files.eng.usw2.vn.cloud.tesla.com
s2-sni.cloudinary.com
mobile-links.prd.vn.cloud.tesla.com
*.de.tesla.com
akamai-san22.exacttarget.com
s7-sni.cloudinary.com
s5-sni.cloudinary.com
s7-sni.cloudinary.com
s5-sni.cloudinary.com
supporttest.frutostech.com
testportal.dlocal.com
help.rmgcardservices.org
support.fuseits.com
toolbox.tesla.com
akamai-san22.exacttarget.com
github-fw.tesla.com
referral.tesla.com
*.tx.tesla.com
*.de.tesla.com
digitalassets.tesla.com
support.techfirstgulf.com
s7-sni.cloudinary.com
toolbox.tesla.com
digitalassets-secure.tesla.com
solutions.lenovocloudsoftware.com
support.cel-global.com
dgf.tesla.com
referral.tesla.com
apacvpn1.tesla.com
akamai-san22.exacttarget.com
soporte.exalta.com.mx
www.teslamotors.com
s7-sni.cloudinary.com
digitalassets-accounts.tesla.com
s5-sni.cloudinary.com
support.cel-global.com
support.rivercityitpros.com
ciscoguest.tesla.com
digitalassets-secure.tesla.com
tripx.eng.usw2.vn.cloud.tesla.com
kronosdb.tesla.com
testportal.dlocal.com
*.tesla.com
support.retransform.com
s7-sni.cloudinary.com
cryptopay2.tesla.com
s5-sni.cloudinary.com
teslaquila.tesla.com
autobidder.powerhub.energy.tesla.com
marketing.tesla.com
s7-sni.cloudinary.com
*.tesla.com
view.emails.tesla.com
s2-sni.cloudinary.com
leapfrog-ssl-25.gcs-web.com
akamai-san22.exacttarget.com
leapfrog-ssl-25.gcs-web.com
s5-sni.cloudinary.com
support.launchify.net
engage.tesla.com
support.cel-global.com
support.zendure.com
s5-sni.cloudinary.com
*.de.tesla.com
leapfrog-ssl-25.gcs-web.com
apf-api.prd.vn.cloud.tesla.com
s5-sni.cloudinary.com
mobile-links.eng.vn.cloud.tesla.com
autobidder-preprd.powerhub.energy.tesla.com
support.fuseits.com
akamaisecure3.qualtrics.com
s6-sni.cloudinary.com
teslatequila.tesla.com
s5-sni.cloudinary.com
bctpay.tesla.com
githubmirroraus08.tesla.com
sso.tesla.com
mobile-links.eng.vn.cloud.tesla.com
gridlogic.powerhub.energy.tesla.com
support.fuseits.com
fleet-api.prd.na.vn.cloud.tesla.com
engage.tesla.com
support.cel-global.com
www.teslamotors.com
events.tesla.com
s5-sni.cloudinary.com
cnvpn.tesla.com
www.teslamotors.com
ug.tesla.com
s2-sni.cloudinary.com
s7-sni.cloudinary.com
vehicle-files.prd.euw1.vn.cloud.tesla.com
mobile-links.prd.vn.cloud.tesla.com
*.de.tesla.com
s6-sni.cloudinary.com

Certificate

The complete raw certificate details for apf-api.prd.vn.cloud.tesla.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH27crWaoYhi07Qw7Lfh
4IZgHdXcp6XG6VrNX/9wpOqfRzHkUftIZR+bcKI0Ge3SoakeStQTEcXAIxOREgre
dep27KyrZWjSucayJRcF5639Zccxj6XruhQxpb+aF66kY1qRPfCfomqJGS4MNNRx
GqsjZqTVCmDfM4FAjz04G6ZkN54r0uJqTBJuLbDI2yItA0g8EHJVgxVuvYLQZKej
QaPl0EGjFEAzRyOPFOOQs0Mj7AefGu9FZIH10gfNgFuTugx1uYrrrMcZp8tqVp0Q
fxfcxoVaqRGukUGalFKqxCzhvzms8O9d5O3VCCLiu+9g+NENf4ehpSA0nYe58c0f
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19481690198827702688847064055311090597
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apf-api.prd.vn.cloud.tesla.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21270036102328416725994149011792901823283584927100700363480655784050339879589459711224443711643766420982447217933158784539439036637427318850569639548851966935954123471100425238391691466395628176433103013995386325910170953285816703021640477342783399188004443930463066953538500487713278869514244382001054427652063706171025350714854282041102065752475374758623350930267328550865183894316789902721974485508229025696012992114630088456799392463452488262407385294657314069920041044330144511410747923678815960054493459924373621162589944293865703849379525568914890164144784214064432239606711012768567398771249903376416428072929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c0e79c21d0716c5583fb9eb55052001cdadd2a6b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apf-api.prd.vn.cloud.tesla.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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