grenzach-scan2-sap.qa.mx.dsm.app

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:97:60:f5:bf:ca:f0:ef:e5:99:aa:d9:18:23:eb:83 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=grenzach-scan2-sap.qa.mx.dsm.app

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:97:60:f5:bf:ca:f0:ef:e5:99:aa:d9:18:23:eb:83
Serial Number (int): 19395195348206325432396041250698161027
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: cb:de:ff:a3:12:30:0d:33:0a:3a:63:ad:58:e6:86:33:24:69:62:30
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): c3:02:5b:cf:ec:1c:30:69:cb:3f:2a:42:f6:98:c3:18:b7:23:86:35
Fingerprint (sha256): 26:39:8d:f0:41:e1:fe:85:81:c8:ec:ec:cf:a4:60:83:33:21:d4:9d:8e:a5:88:a5:a6:b6:a2:1c:90:24:d7:95

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate grenzach-scan2-sap.qa.mx.dsm.app

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for grenzach-scan2-sap.qa.mx.dsm.app

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

grenzach-scan2-sap.qa.mx.dsm.app

Other certificates including the domain name dsm.app

(limited to 100 certificates)
pss-blocks.qa.mx.dsm.app
drf-pricing.qa.mx.dsm.app
drf-kpi.qa.mx.dsm.app
hof-ic.qa.mx.dsm.app
delvotest.qa.mx.dsm.app
creditportal.qa.mx.dsm.app
hrss-vacation.dev.mx.dsm.app
yellow-rim.qa.mx.dsm.app
dnpcustomercare.mx.dsm.app
supplychain.qa.mx.dsm.app
drf-pricing.qa.mx.dsm.app
pss-utt-enhance.dev.mx.dsm.app
trust-it.mx.dsm.app
drf-kpi.qa.mx.dsm.app
pss-utt-enhance.qa.mx.dsm.app
deskq.dev.mx.dsm.app
ip-portal.mx.dsm.app
dicivaluereport.qa.mx.dsm.app
*.dev.mx.dsm.app
dfs-materials.qa.mx.dsm.app
pss-blocks.qa.mx.dsm.app
drf-kpi.qa.mx.dsm.app
anh-quotations.qa.mx.dsm.app
mdm-csu.qa.mx.dsm.app
hrss-vacation.qa.mx.dsm.app
ra-ps-request.qa.mx.dsm.app
drf-kpi.qa.mx.dsm.app
dnp-orderportal.qa.mx.dsm.app
dnp-orderportal.dev.mx.dsm.app
mx8-test.qa.mx.dsm.app
uh-spc-chart.dev.mx.dsm.app
complaintmgmt.mx.dsm.app
ip-portal.qa.mx.dsm.app
dnplubtrack.dev.mx.dsm.app
drf-kpi.qa.mx.dsm.app
drf-pricing.mx.dsm.app
phagebook.dev.mx.dsm.app
cultureai.crp-dt-biotech.prj.analytics.dsm.app
dfs-materials.dev.mx.dsm.app
pcafa.qa.mx.dsm.app
dfs-materials.mx.dsm.app
simple-scan.qa.mx.dsm.app
drf-kpi.qa.mx.dsm.app
c4c-hr.qa.mx.dsm.app
quantumadvisor.qa.mx.dsm.app
dnplubtrack.dev.mx.dsm.app
sif-share.qa.mx.dsm.app
contractadmin.dev.mx.dsm.app
anh-quotations.qa.mx.dsm.app
nutriview.dev.mx.dsm.app
drf-kpi.qa.mx.dsm.app
trust-it.mx.dsm.app
drf-pricing.mx.dsm.app
cer-tool.qa.mx.dsm.app
dsmdashboard.dev.mx.dsm.app
drf-pricing.qa.mx.dsm.app
trust-it-v2.qa.mx.dsm.app
quotations.qa.mx.dsm.app
test-offline.dev.mx.dsm.app
sitevisitor.qa.mx.dsm.app
dmfs.dev.mx.dsm.app
drf-pricing.qa.mx.dsm.app
batchtracking.qa.mx.dsm.app
c4c-crm.qa.mx.dsm.app
she.qa.mx.dsm.app
drf-kpi.qa.mx.dsm.app
quotations.mx.dsm.app
budelpack.qa.mx.dsm.app
hof-approvals.mx.dsm.app
airfreight.dev.mx.dsm.app
air-freight.dev.mx.dsm.app
pss-mail.mx.dsm.app
dep-mdw.qa.mx.dsm.app
sif-share.mx.dsm.app
dd-notify.mx.dsm.app
dsmdashboard.qa.mx.dsm.app
blv-trace.qa.mx.dsm.app
hrss-learning.qa.mx.dsm.app
drf-pricing.qa.mx.dsm.app
dev.roburot.crp-dt-biotech.prj.analytics.dsm.app
drf-pricing.qa.mx.dsm.app
drf-pricing.qa.mx.dsm.app
seclin-pr.qa.mx.dsm.app
complaintmgmtbr.dev.mx.dsm.app
horizon-mdm.qa.mx.dsm.app
hnh-cn-forecast.dev.mx.dsm.app
budelpack.dev.mx.dsm.app
budelpack.qa.mx.dsm.app
hof-ic.qa.mx.dsm.app
gpb-board.qa.mx.dsm.app
po-ess.mx.dsm.app
kpi-tool.qa.mx.dsm.app
pss-mail.qa.mx.dsm.app
dep-colorcode.dev.mx.dsm.app
dep-notify.qa.mx.dsm.app
dicivaluereport.mx.dsm.app
x-time.dev.mx.dsm.app
pss-mail.qa.mx.dsm.app
anh-pricing.qa.mx.dsm.app
hrss-learning.qa.mx.dsm.app

Certificate

The complete raw certificate details for grenzach-scan2-sap.qa.mx.dsm.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjlWiCEybtj/K09dx8TQv
YNhCyvrp9sPUOvM1JdHy+aLpSejQ8ABODzcU5RdBJBWAKtgBxifQ7Tku51p9PssJ
6C6GvXSt1hcdTlVu9vxUGIAddh1A8CtvkNXIhEYC4GqKzSe9nQQHOnRi61m1NZd2
xO98IpEFU5X18vzGMijhOZwnxxs1+RwVlz6iJhYV1z7vk/RWf73aqfwSjUKCLUCk
c1EPQzcX3XZIE2v8GHQ6cYf+OhL1q5Aeml03Y0TXDuwI1nWn9/VJxSk9g9P583YR
UFgxqLnS7xGUqt8+puGuNPu4x4/mzJb6uF+Zze6pHsUQ63OPNPJnfG0uVo4RooW1
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19395195348206325432396041250698161027
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'grenzach-scan2-sap.qa.mx.dsm.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17968066481296949164440145848134153122502918761645745938994332052447634105295509762489325854996065246593848563519533960178207902864720332287896856072955524805036322953862917542331526301458234652522819198759343284297288465860838391337668104074726052689108197370134116647285452588864164292748470283654741523267659416420537540501722947240422145335105744390640375574024227598366292614852686183989208562108927006933898498632289488118532637132544402272045846857552577934910631714299627293930603919607361802901848178520426322282430441854592119894746732767555303323113082704768735984575002861551273204430112036912095732020539
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cbdeffa312300d330a3a63ad58e6863324696230
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grenzach-scan2-sap.qa.mx.dsm.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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