services-store.jeep.fr

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 05:9d:5c:92:c3:60:0f:37:04:f0:35:36:3d:a8:a0:46 was issued on by Amazon.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=services-store.jeep.fr

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:9d:5c:92:c3:60:0f:37:04:f0:35:36:3d:a8:a0:46
Serial Number (int): 7463208195175515982739917808073220166
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 9d:e3:d1:15:ea:c2:ef:54:40:76:38:f9:64:dd:63:0a:b3:63:30:26
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 8e:92:94:b2:b8:2a:7d:22:f2:b6:7c:cb:02:9a:62:7b:7f:c3:68:81
Fingerprint (sha256): 13:bb:ec:3a:c9:d6:ad:29:bd:b3:26:04:78:78:83:dd:75:e4:ad:8f:a6:4b:a3:db:cd:d5:c2:a2:54:99:c9:76

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate services-store.jeep.fr

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for services-store.jeep.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

services-store.jeep.fr
services-store.jeep-official.it
services-store.jeep.co.uk
login-pivot.services-store.jeep.com
services-store.jeep.com

Other certificates including the domain name jeep.fr

(limited to 100 certificates)
www.jeep.co.uk
staging1.fcagroup.com
dpromo.abarth.it
magentocloud42.map.fastly.net
dpromo.abarth.it
inf-admin.services-store.jeep.fr
inf.services-store.jeep.fr
magentocloud42.map.fastly.net
dpromo.abarth.it
ppr-admin.services-store.jeep.fr
dpromo.abarth.it
staging1.fcagroup.com
staging1.fcagroup.com
www.fcagroup.com
magentocloud42.map.fastly.net
magentocloud42.map.fastly.net
services-store.jeep.fr
www.jeep.co.uk
magentocloud42.map.fastly.net
mdhhvc.jeep.fr
magentocloud42.map.fastly.net
login-stage.jeep-official.it
login-stage.jeep-official.it
magentocloud42.map.fastly.net
dpromo.abarth.it
www.services-store.jeep.fr
magentocloud42.map.fastly.net
inf-admin.services-store.jeep.fr
dpromo.abarth.it
www.ppr.services-store.jeep.fr
www.jeep.co.uk
www.jeep.co.uk
www.dev.services-store.jeep.fr
magentocloud42.map.fastly.net
www.jeep.co.uk
dpromo.abarth.it
www.fcagroup.com
services-store.jeep.fr
magentocloud42.map.fastly.net
www.jeep.co.uk
www.jeep.co.uk
www.fcagroup.com
www.fcagroup.com
magentocloud42.map.fastly.net
magentocloud42.map.fastly.net
magentocloud42.map.fastly.net
magentocloud42.map.fastly.net
www.fcagroup.com
www.jeep.co.uk
www.jeep.co.uk
ppr-admin.services-store.jeep.fr
ppr.services-store.jeep.fr
magentocloud42.map.fastly.net
dev.services-store.jeep.fr
magentocloud42.map.fastly.net
login.jeep-official.it
www.fcagroup.com
login.jeep-official.it
www.jeep.co.uk
laprima.fiat.at
magentocloud42.map.fastly.net
admin.services-store.jeep.fr
ppr-admin.services-store.jeep.fr
magentocloud42.map.fastly.net
www.pat.services-store.jeep.fr
magentocloud42.map.fastly.net
www.jeep.co.uk
www.fcagroup.com
magentocloud42.map.fastly.net
magentocloud42.map.fastly.net
staging1.fcagroup.com
inf.services-store.jeep.fr
magentocloud42.map.fastly.net
mdhhvc.jeep.fr
magentocloud42.map.fastly.net
magentocloud42.map.fastly.net
magentocloud42.map.fastly.net
magentocloud42.map.fastly.net
magentocloud42.map.fastly.net
magentocloud42.map.fastly.net
login.jeep.be
magentocloud42.map.fastly.net
www.fcagroup.com
magentocloud42.map.fastly.net
pat-admin.services-store.jeep.fr
ppr.services-store.jeep.fr
magentocloud42.map.fastly.net
www.jeep.co.uk
www.jeep.co.uk
magentocloud42.map.fastly.net
www.jeep.co.uk
magentocloud42.map.fastly.net
www.jeep.co.uk
dpromo.abarth.it
www.jeep.co.uk
magentocloud42.map.fastly.net
www.jeep.co.uk
www.jeep.co.uk
magentocloud42.map.fastly.net
www.fcagroup.com

Certificate

The complete raw certificate details for services-store.jeep.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyW11wa/JMyTfpqRRw6LH
3CsMYA6sjU/J90QTOyPWhky52+t/PGcGmkBqjS3Kk8Z2qbRMov+DCWnXPkNXV577
mNyIhbTd54wqRKsbh8oKhZjTzm3k4vQ6Zx1dsdZnsRcnsn1kNAog2lpiAOQ9Igwc
DOZZjTKv9mkG0PwfcBfj3LyCuBGs2LIhIdsAPqytoI+PfZUgtS8uvdZVCQ0CnDlh
lVVCBj6QxUGz8bvGC6lpnOR1/m8Zgx9RNdYIsf3mkOWajZMfpNRPDn4exeCl3fVw
v+GKbh7RTAUM9NWvQTiH+rsbhFROnttCv/fp+L1j9/HEykz7fwzwWTuJ7JoLRjlp
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7463208195175515982739917808073220166
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'services-store.jeep.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25427876029347027143323636735337597141164039680889137731296467771405291255880401553365616975773830710319179943616825611496932832798531492907505286889732007859429769848168413913011120483729409482079884005317197145575676551263006433638413469136797047563079387426277357114931589707562259963310457750905568176311291199269982300393918628862298114528615740002929247587167000683168352399935658432459579879135537045086962459126912962783807745131770806370953742683848602701629708262886729117116111779864139220433186005863737234191845483822567244296546976846598118916167448321252497638542775220727634477014538872379790002317701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9de3d115eac2ef54407638f964dd630ab3633026
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-store.jeep.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-store.jeep-official.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-store.jeep.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login-pivot.services-store.jeep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services-store.jeep.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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