formulare.dealermaster-de.bmw

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0f:79:37:1b:0e:ed:8f:67:21:85:fe:73:dd:31:f7:01 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=formulare.dealermaster-de.bmw

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:79:37:1b:0e:ed:8f:67:21:85:fe:73:dd:31:f7:01
Serial Number (int): 20567805532965023721204532661189736193
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d1:85:61:8a:04:9f:03:6e:12:e6:5a:db:8f:a0:6e:d1:f9:11:bb:f9
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 59:a9:4b:50:62:06:e9:e1:09:60:c7:3c:b0:69:42:f7:12:56:dd:6b
Fingerprint (sha256): 2f:f8:cd:21:c3:98:3a:e9:63:f6:2c:55:19:ae:11:9b:c2:a9:e4:bc:e0:e3:2f:11:e9:ed:d3:99:ef:45:f6:ba

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate formulare.dealermaster-de.bmw

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for formulare.dealermaster-de.bmw

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

formulare.dealermaster-de.bmw

Other certificates including the domain name dealermaster-de.bmw

(limited to 100 certificates)
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
formulare.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
mini-retail-ebooks.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
bmw-retail-ebooks.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
alb-dev.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
cosy-configurator.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
cosy-configurator.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
bmw-muenchen-motorrad-rundgang.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
mini-stuttgart-rundgang.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
bmw-motorrad-vorteilsrechner.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
integration.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
alb-prod.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
bmw-stuttgart-rundgang.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw

Certificate

The complete raw certificate details for formulare.dealermaster-de.bmw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtcsdgNzA1SNzdN11i2S
HUj6I0KeL7eQHOV68MTF3eUQdtvr/WvK5JH+oijn0/WawK6LDobyT9mWim9Y+CKl
On2emGOfdgz3vl99COeTdW/+6VKJXJ3bptkz+iYvHGPNe0KVbIk7CAK0PidvPV5x
pemDnnsDciTExAaY8FCJL/FK0LWJNK5KMAAgWVJ4tVhcDE0s7GaGKNuQHCilXiSX
+mjbXUt0Q5uW8j1VGWiSA2ggEIDxnAVExauNWGD1ZPWqoKLNKg1yMZGZRSVHFdE9
qFUn/1H4HbFri9auAqyiXLc3mJAzoUE2lYI+RIPE2fxHiFColmtJ/+pseFS/fsVl
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20567805532965023721204532661189736193
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'formulare.dealermaster-de.bmw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24596337257552384470860185824562179150555198532881809513891842962269498720087198325060738738493585510230017614888102002639053799968194144485878236315056210286173912823987122943806666732711370601677337792885754825618606501731104092524314590145896285947883144485556950571555682229665399373269650663316660108030597900497085732893976457925164521279615500029622969236811633787398855617731869903509139067328537274526726550882112463838778558317396240492885928670182689558083282927087076515630574823873634531710826620870850504582599594100508367795000328159260473081400326215447277439041634225361627276170252751162038173394363
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d185618a049f036e12e65adb8fa06ed1f911bbf9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formulare.dealermaster-de.bmw'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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