*.dsoautomation.net

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0b:e7:6c:58:31:7f:d6:b9:5d:a8:b1:76:4b:3c:a0:e7 was issued on by Amazon.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.dsoautomation.net

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:e7:6c:58:31:7f:d6:b9:5d:a8:b1:76:4b:3c:a0:e7
Serial Number (int): 15823126015590428485960710026426097895
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 83:9b:50:34:14:e3:41:6f:80:36:d8:31:60:f1:d2:56:a6:29:7a:99
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 3d:3d:db:6b:1e:1c:36:96:13:50:41:91:ce:7e:89:70:2e:1a:cc:35
Fingerprint (sha256): 15:ef:1a:68:21:25:28:0f:c9:98:0c:2b:27:56:c8:72:b7:c9:00:c0:0b:3c:11:de:5d:84:ce:0c:60:07:94:0b

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate *.dsoautomation.net

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.dsoautomation.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.dsoautomation.net
stg.enrich-kbi.api.bcg.com
qa.enrich-kbi.api.bcg.com
*.kbi-dev.eu-central-1.eks.dsoautomation.net
dev.enrich-kbi.api.bcg.com
*.kbi-qa.eu-central-1.eks.dsoautomation.net
*.kbi-stg.eu-central-1.eks.dsoautomation.net
enrich-kbi.api.bcg.com
*.kbi-prod.eu-central-1.eks.dsoautomation.net

Other certificates including the domain name dsoautomation.net

(limited to 100 certificates)
*.dsoautomation.net
*.dev.eu-central-1.eks.dsoautomation.net
*.dsoautomation.net
enrich-legacy-dev.dsoautomation.net
*.dsoautomation.net
enrich-cms-docviz.bcg.com
*.dsoautomation.net
enrich-legacy-dev.dsoautomation.net
*.dsoautomation.net
dev2.newnavigator.bcg.com
pages-qa.navigator.bcg.com
pages-dev.navigator.bcg.com
*.kbi-dev.eu-central-1.eks.dsoautomation.net
enrich-jarvis.api.bcg.com
tams-dev.bcg.com
*.dsoautomation.net
pages.navigator.bcg.com
dev1.newnavigator.bcg.com
*.dsoautomation.net
jarvis.dsoautomation.net
kbi-video-streaming-stg.dsoautomation.net
qa.newnavigator.bcg.com
prodnew-tier1.bcg.com
enrich-cms-docviz-qa.bcg.com
*.dsoautomation.net
qa.navigator.bcg.com
devnew-chargetrack.bcg.com
*.dsoautomation.net
profiles2-dev.navigator.bcg.com
pages.navigator.bcg.com
pages-stg.navigator.bcg.com
enrich-cms-docviz-stg.bcg.com
*.dsoautomation.net
*.dsoautomation.net
enrich-cms-materials-qa.bcg.com
*.dsoautomation.net
*.dsoautomation.net
enrich-jenkins.bcg.com
*.dev.eu-central-1.eks.dsoautomation.net
profiles2-stg.navigator.bcg.com
enrich-cms-materials-dev.bcg.com
enrich-jarvis.api.bcg.com
devnew-chargetrack.bcg.com
api-protected.integration.dsoautomation.net
dev-pacontacts-navigator.bcg.com
*.prod.ap-southeast-1.eks.dsoautomation.net
*.dsoautomation.net
newnavigator.bcg.com
*.dsoautomation.net
enrich-cms-docviz-dev.bcg.com
enrich-legacy-dev.dsoautomation.net
*.dsoautomation.net
sinequa-test.dsoautomation.net
profiles.navigator.bcg.com
*.dsoautomation.net
newnavigator.bcg.com
pages.navigator.bcg.com
*.dsoautomation.net
profiles-stg.navigator.bcg.com
qanew-chargetrack.bcg.com
ktdashboard-dev.bcg.com
tams-qa.bcg.com
pipepack-dev.bcg.com
*.dsoautomation.net
pa-affiliation-dev.bcg.com
enrich-cms-materials.bcg.com
dev-pacontacts-navigator.bcg.com
*.dsoautomation.net
enrich-cms-materials-dev.bcg.com
sinequa-test.enrich.dsoautomation.net
*.dsoautomation.net
cfstools.bcg.com
*.dsoautomation.net
cfs-tools-stg.bcg.com
enrich.api.bcg.com
*.dsoautomation.net
cfs-tools-dev.bcg.com
cfs-tools-qa.bcg.com
*.dsoautomation.net
enrich-cms-materials-stg.bcg.com
enrich-cms-materials.bcg.com
enrich-cms-docviz.bcg.com
*.dsoautomation.net
enrich.api.bcg.com
*.eu-central-1.sitecore.internalstg.dsoautomation.net
stg.newnavigator.bcg.com
profiles2-qa.navigator.bcg.com
enrich-cms-materials.bcg.com
jarvis.dsoautomation.net
*.dsoautomation.net
dev5.newnavigator.bcg.com
pipepack-qa.bcg.com
testtemporary.dsoautomation.net
*.dsoautomation.net
profiles.navigator.bcg.com
newnavigator.bcg.com
*.eu-central-1.sitecore.internalstg.dsoautomation.net
enrich-cms-docviz-stg.bcg.com
enrich-cms-materials-stg.bcg.com
*.sitecore.dsoautomation.net

Certificate

The complete raw certificate details for *.dsoautomation.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8xRtvIV6e7TNO+N1blU
QzbmGSTukgSLx5a+BdIv1fOEFjJlpwukNB7Whx0dmtvSEXrVhaPtnZLNthCzabNL
JhwuGEVchneH2D6JQRtZj067IDmI6aZk1hMWbJffOxqTODdYwpbXcw+UESVTnaK2
SfnDyRCf0+Ia5mxamv0FeVSGYuYG9dYYinrE03UaNCuYhboq/bLK76p6FaAIjbVv
x5wWzBWEA9E+cuZd0a2yVIvsyKnf2BjlxXDRUke6kGpJXew7SIvu51UA0Ve7by3T
By8BQ8uofzK+H8OUzTEAZROR9yBrOdCbThB55fMY222QC55bPsFnnRWy5CwSeX2V
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15823126015590428485960710026426097895
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.dsoautomation.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26232082679535268971634472306524307144040275394356690249767808586518662390125815869986121823253177276268768950189656123129219443982985068749218256979836846885708691445869545282443463486039340100114958297609409215545216657440626136837347513975419890209556925180505694354781482454204537197341954953668456418472507770614637159591394119738045702625040891132138000523592751757135148774363080623052405406544898599075751404441789595955806887599292291207517997811102172947379997654418040963070493202989224607386967245963235141450721358197998323578209003194161569795803313728311767320123121031030621336351994002096608448976271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							839b503414e3416f8036d83160f1d256a6297a99
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (316 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dsoautomation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg.enrich-kbi.api.bcg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.enrich-kbi.api.bcg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kbi-dev.eu-central-1.eks.dsoautomation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.enrich-kbi.api.bcg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kbi-qa.eu-central-1.eks.dsoautomation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kbi-stg.eu-central-1.eks.dsoautomation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enrich-kbi.api.bcg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kbi-prod.eu-central-1.eks.dsoautomation.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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