dfs-materials.dev.mx.dsm.app

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:87:fa:f7:22:9d:0a:c9:77:5b:b0:9e:2f:76:36:9e was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dfs-materials.dev.mx.dsm.app

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:87:fa:f7:22:9d:0a:c9:77:5b:b0:9e:2f:76:36:9e
Serial Number (int): 19315242199360420519068567002531903134
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ff:45:c0:6e:16:4f:c8:0f:84:f6:4c:7a:78:cd:f8:6a:aa:e3:2f:8c
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 1a:30:0f:c5:d6:20:cf:ea:17:fd:f1:ab:e4:30:1d:0d:45:cc:e8:38
Fingerprint (sha256): 0f:5b:41:20:b7:21:88:f6:37:53:26:83:e0:a7:77:d6:3b:73:bb:ef:1e:8f:b5:5b:76:65:c1:f5:92:f4:00:16

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate dfs-materials.dev.mx.dsm.app

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dfs-materials.dev.mx.dsm.app

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dfs-materials.dev.mx.dsm.app

Other certificates including the domain name dsm.app

(limited to 100 certificates)
pss-blocks.qa.mx.dsm.app
drf-pricing.qa.mx.dsm.app
drf-kpi.qa.mx.dsm.app
hof-ic.qa.mx.dsm.app
delvotest.qa.mx.dsm.app
creditportal.qa.mx.dsm.app
hrss-vacation.dev.mx.dsm.app
yellow-rim.qa.mx.dsm.app
dnpcustomercare.mx.dsm.app
supplychain.qa.mx.dsm.app
drf-pricing.qa.mx.dsm.app
pss-utt-enhance.dev.mx.dsm.app
trust-it.mx.dsm.app
drf-kpi.qa.mx.dsm.app
pss-utt-enhance.qa.mx.dsm.app
deskq.dev.mx.dsm.app
ip-portal.mx.dsm.app
dicivaluereport.qa.mx.dsm.app
*.dev.mx.dsm.app
dfs-materials.qa.mx.dsm.app
pss-blocks.qa.mx.dsm.app
drf-kpi.qa.mx.dsm.app
anh-quotations.qa.mx.dsm.app
bls-assesment.mx.dsm.app
mdm-csu.qa.mx.dsm.app
hrss-vacation.qa.mx.dsm.app
ra-ps-request.qa.mx.dsm.app
drf-kpi.qa.mx.dsm.app
dnp-orderportal.qa.mx.dsm.app
dnp-orderportal.dev.mx.dsm.app
mx8-test.qa.mx.dsm.app
uh-spc-chart.dev.mx.dsm.app
complaintmgmt.mx.dsm.app
ip-portal.qa.mx.dsm.app
dnplubtrack.dev.mx.dsm.app
drf-kpi.qa.mx.dsm.app
drf-pricing.mx.dsm.app
phagebook.dev.mx.dsm.app
cultureai.crp-dt-biotech.prj.analytics.dsm.app
dfs-materials.dev.mx.dsm.app
pcafa.qa.mx.dsm.app
dfs-materials.mx.dsm.app
simple-scan.qa.mx.dsm.app
drf-kpi.qa.mx.dsm.app
c4c-hr.qa.mx.dsm.app
quantumadvisor.qa.mx.dsm.app
dnplubtrack.dev.mx.dsm.app
sif-share.qa.mx.dsm.app
contractadmin.dev.mx.dsm.app
anh-quotations.qa.mx.dsm.app
nutriview.dev.mx.dsm.app
drf-kpi.qa.mx.dsm.app
trust-it.mx.dsm.app
drf-pricing.mx.dsm.app
cer-tool.qa.mx.dsm.app
dsmdashboard.dev.mx.dsm.app
drf-pricing.qa.mx.dsm.app
trust-it-v2.qa.mx.dsm.app
quotations.qa.mx.dsm.app
test-offline.dev.mx.dsm.app
sitevisitor.qa.mx.dsm.app
dmfs.dev.mx.dsm.app
bls-assesment.mx.dsm.app
drf-pricing.qa.mx.dsm.app
batchtracking.qa.mx.dsm.app
c4c-crm.qa.mx.dsm.app
she.qa.mx.dsm.app
drf-kpi.qa.mx.dsm.app
quotations.mx.dsm.app
budelpack.qa.mx.dsm.app
hof-approvals.mx.dsm.app
airfreight.dev.mx.dsm.app
air-freight.dev.mx.dsm.app
pss-mail.mx.dsm.app
dep-mdw.qa.mx.dsm.app
sif-share.mx.dsm.app
dd-notify.mx.dsm.app
dsmdashboard.qa.mx.dsm.app
blv-trace.qa.mx.dsm.app
hrss-learning.qa.mx.dsm.app
drf-pricing.qa.mx.dsm.app
dev.roburot.crp-dt-biotech.prj.analytics.dsm.app
drf-pricing.qa.mx.dsm.app
drf-pricing.qa.mx.dsm.app
seclin-pr.qa.mx.dsm.app
complaintmgmtbr.dev.mx.dsm.app
horizon-mdm.qa.mx.dsm.app
hnh-cn-forecast.dev.mx.dsm.app
budelpack.dev.mx.dsm.app
budelpack.qa.mx.dsm.app
hof-ic.qa.mx.dsm.app
gpb-board.qa.mx.dsm.app
po-ess.mx.dsm.app
kpi-tool.qa.mx.dsm.app
pss-mail.qa.mx.dsm.app
dep-colorcode.dev.mx.dsm.app
dep-notify.qa.mx.dsm.app
dicivaluereport.mx.dsm.app
x-time.dev.mx.dsm.app
pss-mail.qa.mx.dsm.app

Certificate

The complete raw certificate details for dfs-materials.dev.mx.dsm.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxm4w8hKrNIjwbNQxpsl
K0qAN9eOitHCGwvAQZLaI6GF97oYgoo7YmouyzgMgReqZnyGNyVm3y+XMRLha8uA
KPPkyp6lRO+XtOfEgvt5+cKo3HQVrHmN36O21TSXo/69b0k8I0tXlal9xG2xE6do
zYtgGjdqd3OOi90FcbBa/9BdbcyjRWxUqBsB45WFmoVWx/J3XgHShuz2Q8wovGZj
phVwacdcJSXfTqudJsblfhv75hdMtxWLj8vsLa41XQ/Tff444cCKehtQRiXdKGTO
IYPER9WENP5M8Ikf0aOnlzgnGGVKyunywNcAvmngVyoDPClDcS36+6N1Qv9tpT+k
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19315242199360420519068567002531903134
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dfs-materials.dev.mx.dsm.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24629153329828437699714205372317054719404172032217796329796587394399396953977847552217992527713802199256982850287435440447059115637570513587581162533702660145412033530914325351020442079590117131842463941015170097979274052498237814025278579622945183025149013201420637202976288182390087864159754696878354866345715464230353052501174622525866106670174124043347684467352140526816033138045212063721148802054162864908863157058549634178870191860581655112362429107807878228122528270236770241370337741217005602179034966645378295513983343381032241765050153220543245787024709180484684350025075433647281148153008792254412830516359
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ff45c06e164fc80f84f64c7a78cdf86aaae32f8c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfs-materials.dev.mx.dsm.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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