sso.bruker.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 07:a9:df:4f:84:66:a7:14:e1:7b:88:65:5b:95:3c:c7 was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sso.bruker.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:a9:df:4f:84:66:a7:14:e1:7b:88:65:5b:95:3c:c7
Serial Number (int): 10186623416929370679339005430621093063
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: c0:bb:90:c7:8b:d8:35:29:f1:58:a6:41:be:ef:d8:fc:a2:26:24:df
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): c5:8f:2a:ea:e4:f6:96:06:01:ae:18:3a:4c:45:5a:64:3e:92:4d:6c
Fingerprint (sha256): 16:bc:84:2e:91:5f:b9:f2:fa:04:28:12:a3:2e:2a:89:45:63:29:92:a5:30:5c:23:1f:5a:9f:7f:e5:8f:6d:68

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate sso.bruker.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sso.bruker.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sso.bruker.com
prod.bruker-sso.netcentric.biz
prod-orig.bruker-sso.netcentric.biz

Other certificates including the domain name bruker.com

(limited to 100 certificates)
bruker.com
*.autodiagnose.bruker.com
bruker.com
*.adiag-qa.bruker.com
mbna.bruker.com
licensecentral-bdal.bruker.com
*.autodiagnose.bruker.com
*.adiag-qa.bruker.com
store-stage.bruker.com
www.bruker.com
mbns.bruker.com
*.bruker.com
cibrubwp07.bruker.com
www.bruker.com
*.bruker.com
*.adiag-dev.bruker.com
www.bruker.com
*.bruker.com
guestportal.bruker.com
sso.bruker.com
bruker.com
licensecentral-bbio.bruker.com
mbna.bruker.com
mc.bruker.com
*.bruker.com
fileshare-calid.bruker.com
bruker.com
ir.bruker.com
fileshare-calid.bruker.com
bruker.com
ir.bruker.com
autodiscover.bruker-nano.com
webmail.bruker.com
mbna.bruker.com
www.opticsblog.bruker.com
mbopt.bruker.com
monitoring-mrs.bruker.com
fileshare-nano.bruker.com
mbns.bruker.com
knoluvit.adiag-dev.bruker.com
monitoring-mrs.bruker.com
www.bruker.com
licensecentral-bopt.bruker.com
mhmp.bruker.com
*.autodiagnose.bruker.com
*.adiag-dev.bruker.com
www.opticsblog.bruker.com
mbopt.bruker.com
bruker.com
login.bruker.com
*.autodiagnose.bruker.com
ok.bruker.com
*.autodiagnose.bruker.com
*.adiag-qa.bruker.com
ok.bruker.com
*.bruker.com
cibrubwp07.bruker.com
bruker.com
mc.bruker.com
guestportal-01-emea.bruker.com
monitoring-mrs.bruker.com
ibcm.bruker.com
licensecentral-bbio.bruker.com
fileshare-nano.bruker.com
fileshare-nano.bruker.com
*.adiag-qa.bruker.com
fileshare-nano.bruker.com
bruker.com
www.bruker.com
repo-bbio.bruker.com
mc.bruker.com
opticsblog.bruker.com
bruker.com
*.bruker.com
www.opticsblog.bruker.com
fileshare-nano.bruker.com
*.bruker.com
bruker.com
guestportal-02-emea.bruker.com
www.opticsblog.bruker.com
www.opticsblog.bruker.com
www.bruker.com
licensecentral-baxs.bruker.com
cibrubwq05.bruker.com
login.bruker.com
login.bruker.com
cibrubwp07.bruker.com
licensecentral-baxs.bruker.com
*.bruker.com
mc.bruker.com
fileshare-nano.bruker.com
ir.bruker.com
autodiscover.bruker-nano.com
fileshare-calid.bruker.com
mhmp.bruker.com
autodiscover.bruker-nano.com
cibrubwp07.bruker.com
fileshare-calid.bruker.com
www.bruker.com
fileshare-calid.bruker.com

Certificate

The complete raw certificate details for sso.bruker.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxL5B0gzmdjas40l06XPM
3LEF8156ORoMOrI1zP0oRMwj6OkHFyPoqttdt4lqWygLwcUa4U4xmT7VtSY/BjiX
Ug4U1MQc0Rrdmvgu9sRwsTeYfePbSa3iMHsRD7mbtneIcrFfQfoknL6xt9naeUi4
NFybjbqIOfrmKjJvQLvR6OTsWH6a6PX7rr2FMqk+1T8JC9AiJz9FgadAHIuaAph6
gYZ2v2f3djDRajEkXjelDGBvljVQ4nwLBLybGlKWA+MgDSHYx6KeHRr+tVjh2Oo4
vqDKz3Nx6DQdYKU8u1BNnAE0qAmO5C8TP879SzbW0rSRuGahNNT4o+a+Wo/tX0Fo
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10186623416929370679339005430621093063
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sso.bruker.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24836527051653771027962138829544642193892867343685355115658898178847234509735015402278080744528210002787046612521095042260767735057224469992155345589915996946059968996087096619986658808442000313442433980356669602874265421810487329760049723843377987614714734790247883332539958823774840237244817788987720799538051762639228938467880525839359548277363822170402353644997909865223530918197218900589857146237956147455730413542300987821956380709917800277898493544783371048997102122955665962419097914344100491768269047806750501958287806291490664351324263115531220639836289956998042226038269612979916469320202437104268493285473
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c0bb90c78bd83529f158a641beefd8fca22624df
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.bruker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.bruker-sso.netcentric.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-orig.bruker-sso.netcentric.biz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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