intervention-api.hp.m-ve.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0a:41:4d:27:dc:dc:b9:25:55:3c:b4:09:c8:08:d2:cc was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=intervention-api.hp.m-ve.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:41:4d:27:dc:dc:b9:25:55:3c:b4:09:c8:08:d2:cc
Serial Number (int): 13631344157445281927306340046201213644
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 96:a4:49:87:9e:23:7c:89:b0:d0:84:58:3f:f8:16:ec:77:e8:73:3c
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 2d:1b:dc:ef:8c:94:8a:af:a9:15:ed:9d:17:96:d1:91:e8:fc:d6:ee
Fingerprint (sha256): 2b:73:d5:fd:2f:e2:0d:d7:c3:d5:86:ad:f0:12:85:5d:06:81:fd:e7:77:c4:89:dd:85:50:1c:11:99:57:c3:04

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate intervention-api.hp.m-ve.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for intervention-api.hp.m-ve.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

intervention-api.hp.m-ve.com

Other certificates including the domain name m-ve.com

(limited to 100 certificates)
rec-pp-fr.hp.m-ve.com
pilote-fr.m-ve.com
pprd-travo.m-ve.com
lerne-backend-rec.hp.m-ve.com
int-backend-pp.hp.m-ve.com
www.m-ve.com
moveo-api-for.hp.m-ve.com
prd-map-server.m-ve.com
qual-map-server.hp.m-ve.com
prod-backend-pp.m-ve.com
rec2-pp.hp.m-ve.com
lineo-national.m-ve.com
lerne-rec.indus.m-ve.com
qualif.m-ve.com
rec4-travo.hp.m-ve.com
qrstock-int.hp.m-ve.com
test.m-ve.com
pprd.m-ve.com
pre2-ael-externe.m-ve.com
dev-backend-teleo-pat.hp.m-ve.com
prd-canopeeadminws.m-ve.com
socle-alertes-api-qual.hp.m-ve.com
alarmes.hp.m-ve.com
portail-planif.m-ve.com
portail-planif.m-ve.com
rlv.m-ve.com
hpd-canopee-arcgisserverxx.hp.m-ve.com
formation.m-ve.com
rlv.m-ve.com
prd-canopee-arcgisserverxx.m-ve.com
recette2.hp.m-ve.com
pre-ael-externe.m-ve.com
travo.m-ve.com
vams-tst.m-ve.com
op-oracle-db.hp.m-ve.com
picru-api.hp.m-ve.com
backend-teleo-rem.m-ve.com
socle-alertes-api-rec.hp.m-ve.com
recf-canopee-mapwebws.hp.m-ve.com
rec-ael-internal.hp.m-ve.com
rlv.m-ve.com
api-docs.m-ve.com
qualif.m-ve.com
rec-monportail.hp.m-ve.com
recf2-canopee-frontal.hp.m-ve.com
teleo-monitoring-qualif.hp.m-ve.com
pilote.m-ve.com
recette-backend-pp-fr.hp.m-ve.com
lineo-dev.hp.m-ve.com
sav.hp.m-ve.com
prepar.m-ve.com
travo-qualif.hp.m-ve.com
www.m-ve.com
for-backend-pp-fr.hp.m-ve.com
rec2-backend-pp.hp.m-ve.com
rec-backend-teleo-rem.hp.m-ve.com
pprd.m-ve.com
teleo.m-ve.com
dev-backend-teleo-pat.hp.m-ve.com
lerne-backend-rec.indus.m-ve.com
ael-rec-alb.hp.m-ve.com
*.indus.m-ve.com
rec-rlv.hp.m-ve.com
rec-backend-teleo-pat.hp.m-ve.com
lerne.indus.m-ve.com
intervention-api.hp.m-ve.com
www2.m-ve.com
prd-canopeeadminws.m-ve.com
prd-canopee-jenkins.m-ve.com
energy-lab.veolia.fr
dev-backend-teleo-pat.hp.m-ve.com
moveo-int.hp.m-ve.com
poc-canopee-arcgisserverx.hp.m-ve.com
moveo-for.hp.m-ve.com
opus.m-ve.com
api-docs-backend.m-ve.com
pilote.m-ve.com
recette-backend-pp-fr.hp.m-ve.com
int-map-server.hp.m-ve.com
rec-backend-teleo-pat.hp.m-ve.com
dev-backend-teleo-pat.hp.m-ve.com
pre-rlv.m-ve.com
map.m-ve.com
www.m-ve.com
hme-website.hp.m-ve.com
recette.m-ve.com
map.m-ve.com
recette2.hp.m-ve.com
backend-gdc-setom-rec.hp.m-ve.com
int-travo.hp.m-ve.com
teleo-monitoring.m-ve.com
pilote.m-ve.com
token.m-ve.com
www.m-ve.com
api-docs.m-ve.com
rem-dev.hp.m-ve.com
pilote-portail-planif.m-ve.com
rec-pp-fr.hp.m-ve.com
travo.m-ve.com
recette-fr.hp.m-ve.com

Certificate

The complete raw certificate details for intervention-api.hp.m-ve.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKUhzk5QRbZC0+QmgbKt
rhBG6hbrbfOqAGA1nA4727sbPyhV+JS87a7K/Dl6IHEfaaX7ked1x403cAw/j8er
A33AdKCCmYRWZy4CQt2aMAjuOm+NlOmGj+5yiiGNOWIOLpCWUYrfRz0HYG28l9Nl
cvK5mJc3i2Wg79A+KFEsUb+r6WWODITFHdhMBAQkeQjqz3yGAYPwbXvruumdGrAN
gJYvfS4qIb4UB6DEAynMe1Wb28uZF3ufMNGdu70lvN2ss1CvC/7OHHzou1C948+1
blGJ1zZXvA2+eie5c6pC8sUuNTbBkGqxoGSVxMHoU5Oy/mCUforOiw50ZZfwOXTD
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13631344157445281927306340046201213644
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-30 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'intervention-api.hp.m-ve.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20784511665298287356418449476291325648024287174848567418641632218790325676799634735689870747267900426416658756140943823515708346209020323819568131025052751910798269945023403403187395219376011699282135813633085973503890769641445536194171516433457250708889133271583464614939451875943048226956037651402420575177554111373222321897715363195811863923402246794012292758553377791455438590733998371883230766277426498930144272215839355627038571350962730812825483510371416278175498976928680102323062027576162285472184830802603003893557243979685060662998764857261629446803216696836813764639517857254866416815090846338027498029937
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							96a449879e237c89b0d084583ff816ec77e8733c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intervention-api.hp.m-ve.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016ce1674f700000040300483046022100a3d182d267772a88d2dead5c855530aae638b819955f5495d03f189f87c039a3022100a1c7090ba415116ddfff82485789bb2f432a204249fa9b178bd0351dbe2f81ca0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016ce1674ffb000004030046304402207119a29f3872b0d50157139f4e15af26464c0e5528444cf2120053cfc643244f0220134d8d72bb5935b3447f18f0530c88f874f1a5662a3294903278412a5a859f79
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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