uat-admin.services-store.alfaromeo.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0d:62:ba:a1:a7:28:37:56:16:14:73:62:e8:9f:61:46 was issued on by Amazon.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=uat-admin.services-store.alfaromeo.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:62:ba:a1:a7:28:37:56:16:14:73:62:e8:9f:61:46
Serial Number (int): 17792594372993378453719470423773503814
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b9:86:21:68:61:eb:51:94:36:8c:39:92:2e:f2:51:64:0a:af:07:9d
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 64:0b:e0:e4:c8:90:c9:65:40:05:8a:a3:da:ea:30:6a:da:25:c6:99
Fingerprint (sha256): 16:79:1b:25:de:32:30:02:6a:cd:73:4a:4a:49:cb:dc:06:89:0d:e5:42:b6:f6:c6:67:84:18:45:ef:ef:b3:0a

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate uat-admin.services-store.alfaromeo.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uat-admin.services-store.alfaromeo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

uat-admin.services-store.alfaromeo.com
uat-admin.services-store.fiatprofessional.com
uat-admin.services-store.lancia.com
uat-admin.services-store.fiat.com
uat-admin.services-store.jeep.com
uat-admin.services-store.abarth.com

Other certificates including the domain name alfaromeo.com

(limited to 100 certificates)
abarth.pt
sappwb.fiat.com
www.fcagroup.com
dpromo.abarth.it
uat.services-store.alfaromeo.com
aemdevms4-connectivity.alfaromeo.com
aemstagems4-connect.alfaromeo.com
dpromo.abarth.it
testauth.carconfigurator.alfaromeo.com
www.fiat.com
www.fiat.com
aemstagems4-connect.alfaromeo.com
abarth.pt
abarth.pt
www.fcagroup.com
www.fcagroup.com
dpromo.abarth.it
uat-admin.services-store.alfaromeo.com
staging2.fcagroup.com
www.fiat.com
abarth.pt
www.fcagroup.com
dpromo.abarth.it
abarth.pt
abarth.pt
4c.alfaromeo.com
www.fiat.com
www.fiat.com
www.fcagroup.com
www.fiat.com
aemstagems4-connect.alfaromeo.com
www.fiat.com
promo.alfaromeo.com
abarth.pt
www.fcagroup.com
abarth.pt
abarth.pt
aemdevms4-connectivity.alfaromeo.com
www.fiat.com
www.fiat.com
abarth.pt
www.fiat.com
www.fiat.com
abarth.pt
carconfigurator.fcagroup.it
store.alfaromeo.com
sapqwb.fiat.com
enroll-dev-us.alfaromeo.com
www.fiat.com
www.fiat.com
aemdevms4-connectivity.alfaromeo.com
www.fiat.com
enroll-dev-us.alfaromeo.com
www.fcagroup.com
uat-admin.services-store.alfaromeo.com
abarth.pt
www.fiat.com
auth.carconfigurator.alfaromeo.com
www.fiat.com
abarth.pt
auth.cert3.alfaromeo.com
www.4cownersclub.alfaromeo.com
www.fiat.com
abarth.pt
abarth.pt
abarth.pt
www.fiat.com
www.fiat.com
www.fiat.com
www.fiat.com
abarth.pt
dpromo.abarth.it
www.fiat.com
dpromo.abarth.it
abarth.pt
www.fcagroup.com
carconfigurator.fcagroup.it
www.fcagroup.com
abarth.pt
www.fcagroup.com
promo.alfaromeo.com
store.alfaromeo.com
dpromo.abarth.it
www.fcagroup.com
aemstagems4-connect.alfaromeo.com
testauth.carconfigurator.alfaromeo.com
aemdevms4-connectivity.alfaromeo.com
www.fcagroup.com
promo.alfaromeo.com
auth.stockinventory.fiat.com
abarth.pt
auth.carconfigurator.alfaromeo.com
auth.cert4.alfaromeo.com
www.fcagroup.com
abarth.pt
abarth.pt
www.fcagroup.com
email.fiatgroup.com
testauth.carconfigurator.alfaromeo.com
www.fcagroup.com

Certificate

The complete raw certificate details for uat-admin.services-store.alfaromeo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1r3AOW5fmH96LQYJKvsR
KYGMvj9MxxVY47fLJ/SVdpKEGUAyxCeNz8lVpdsrYuCAqI3Vtkx2CLjhtDZeuzJ8
HXWlraL2tfi2VOHtFK2tYEINBZfdq/OWri7pPjrrguEIi+6om0TL4aZKG8cQhS7E
5LHG7UjXZbMs3Vyy1trqS6N5HrX03yzzNCJ6VfZTzRPSXLlq6iY21cYGNlSJ8i+/
VeoKAMzIDE2L4iJLaergy5ijv/edesQPqV2ja/qHN1l4uuMiYyutQXNvO/nbVaef
ypwtHbUlc0wq9r6QModDCVwxbcg2K0kellQM4fbtRYVaiaL0/fr0cO3rIvVhYI+r
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17792594372993378453719470423773503814
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uat-admin.services-store.alfaromeo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27108566907243151554931981484893154765455913640655179508637159762065763224427054256073858643682015638593226601663204082583647064089623544412036698182754050579448209020121750568376095127087462663348388514407037572543779878330239973286151568665568360360860950930319100079534506293189427368224217830484640953412168429773992938361183890311019066946494629324563800269823998559813939952975639718464075644449600283455396903238730663555223494861014385860488717137262600981772924379506772276222817961663557542591564968246549379507073703346995788626023002393263906641448652391763729856551175565306916505553134742425120329935769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b986216861eb5194368c39922ef251640aaf079d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (234 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-admin.services-store.alfaromeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-admin.services-store.fiatprofessional.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-admin.services-store.lancia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-admin.services-store.fiat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-admin.services-store.jeep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat-admin.services-store.abarth.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a0077004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018da81f78080000040300483046022100ee593a6e508d8f1da0194810be15c10784b452a8b2c5fdde2166d93b1397473e022100a363186a29627914e5528cb6343679a1195775519b21bb7b2926df768be1d6240076007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018da81f784000000403004730450220483d69df170ef05fc030067d1efd23c7df9b1e3f93a0945b1a01dd2ea5c91c93022100c4df37851ba1c565cd3d58ff53902735e8e30470ae9e5617793064a0df25067c007700e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018da81f78690000040300483046022100e6eee7eec960c3a5a934e81ebd5cbff97ca19443295730183e4a29819a8e51ee022100f12c27a8f4515c2fb2b7db8625b5793fa6c8c8841f4d6b0971d5b61432d91ffb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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