*.wrd-aws.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 05:9d:05:d0:ca:39:c8:02:71:72:00:33:bf:be:d1:3e was issued on by Amazon.

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.wrd-aws.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:9d:05:d0:ca:39:c8:02:71:72:00:33:bf:be:d1:3e
Serial Number (int): 7461448539806193801527058736204403006
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 83:38:e9:33:45:7a:a6:e3:71:ad:59:e6:e3:2f:01:53:cd:62:3d:fd
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 45:de:32:43:bf:46:f0:7b:95:d3:ea:5b:68:b7:23:dc:01:0d:c0:00
Fingerprint (sha256): 13:fc:ca:1e:6e:22:c9:09:f4:02:d3:b1:49:ce:41:7d:93:f0:4a:36:f7:4e:da:02:f9:71:4b:6f:00:9f:b5:7d

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate *.wrd-aws.com

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.wrd-aws.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.wrd-aws.com
renew.auto
renault.fr
www.myrenault.fr
renault-occasions.fr
www.renault-occasions.fr
my-renault.fr
www.myr.renault.fr
renault-shop.fr
myrenault.fr
renaultshop.fr
*.renault-shop.fr
meganeetech.guide.myr.renault.fr
*.renew.auto
*.renault.fr
cote.professionnels.renault.fr
www.renaultshop.fr
www.professionnels.renault.fr
www.cote.renault.fr
www.my-renault.fr
www.occasion.renault.fr

Other certificates including the domain name wrd-aws.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.wrd-aws.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+hW2HBOMxYYGvuOl6sSx
1GPFUrrD7L4p7TVsiUEZSniZ692hWA3OhIImL9y0/0g1uIVk2MY27Ir+hflE56q2
WXYDUneek2+D4fnzOrYsmLdI9VMkHyO9juZ5LZqU9RXs+WJCP/MEVIyDE0FqXtnr
y+mQw411LsJfXRsJ4xhUHjwyd4tpT6oEibx93qs/5KbhKDtIRNyaZpbb9igYaTmf
t7/imH3XneI7gOOH4d6TInaUKt6WVu+vmp7mnYcpnUl7xRr3con8J57juIOaq6z6
VVP/OLwXbM8+RUN/m5lYcyGIBj8+GrQeK/5TYEzcfm+EboqsxMaICVaNhxhhjXaB
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7461448539806193801527058736204403006
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.wrd-aws.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31570282515073826241328824284967460034333749771923148749115287669924858310668942272907161011288612467491356330842332693167460425585404953384259083753467676999485870945673436894524712298850316353557950670152634132105539998360346417680199944130092726260147369474005645589017950948480121541811588544142711153992870726147414479878875371585551310937266944962712858483766818953315181065610646079767193249604785838613949232393230423260890046039912070108641268550456234365972905445089191003235710906026080191658468546689160839199920806675365877545163439148445818841688947774307062707665810278256251748542535688678813864460703
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8338e933457aa6e371ad59e6e32f0153cd623dfd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (420 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wrd-aws.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renew.auto'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renault.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myrenault.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renault-occasions.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.renault-occasions.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-renault.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myr.renault.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renault-shop.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myrenault.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renaultshop.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renault-shop.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meganeetech.guide.myr.renault.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renew.auto'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.renault.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cote.professionnels.renault.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.renaultshop.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.professionnels.renault.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cote.renault.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-renault.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.occasion.renault.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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