mcstaging.gear.jeep.com

Issued by R3

About this certificate

This digital certificate with serial number 03:34:58:16:b1:0d:83:d4:68:6b:f8:80:53:13:25:b9:05:d8 was issued on by Let's Encrypt.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mcstaging.gear.jeep.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:34:58:16:b1:0d:83:d4:68:6b:f8:80:53:13:25:b9:05:d8
Serial Number (int): 279148630760386765683699818956831531271640
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 88:f0:b9:95:69:92:e6:b8:52:e8:b1:3b:e9:6d:44:85:7a:52:8c:ff
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 62:5d:a8:3c:43:44:21:7f:ce:eb:03:c6:40:20:a3:45:d9:c7:b5:45
Fingerprint (sha256): 31:ea:19:2c:f3:85:87:54:5b:59:2d:73:06:22:61:e3:58:f3:8a:53:d9:c2:ff:18:40:2f:0e:d9:ab:17:8e:c0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mcstaging.gear.jeep.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mcstaging.gear.jeep.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mcstaging.collection.chrysler.com
mcstaging.e-store.fiatusa.com
mcstaging.gear.jeep.com
mcstaging.life.dodge.com
mcstaging.outfitter.ramtrucks.com
mcstaging.shopalfaromeousa.com
mcstaging.shopbeechcraftgifts.com
mcstaging.shopcessnagifts.com
mcstaging.shophawkergifts.com
mcstaging.wearmopar.com

Other certificates including the domain name jeep.com

(limited to 100 certificates)
www.jeep.co.uk
staging1.fcagroup.com
magentocloud20.map.fastly.net
abarth.pt
jeep.moparvip.com
jeep-uat.moparvip.com
magentocloud20.map.fastly.net
www.chrysler.com
wearmopar.com
promo.fiat.com
www.jeep.com
www.fcagroup.com
www.chrysler.com
dpromo.abarth.it
www.jeep.com
magentocloud20.map.fastly.net
aemdevms4-connectivity.alfaromeo.com
aemstagems4-connect.alfaromeo.com
dpromo.abarth.it
login-dev-iap.jeep.com
uat-blog.chrysler.com
shopcessnagifts.com
www.jeep.com
magentocloud20.map.fastly.net
auth.carconfigurator.jeep.com
www.fiat.com
promo.fiatprofessional.com
aemstagems4-connect.alfaromeo.com
abarth.pt
uat3.alfaromeousa.com
uat3.alfaromeousa.com
abarth.pt
www.fcagroup.com
uat3.chrysler.com
uat3.alfaromeousa.com
uat3.chrysler.com
uat3.chrysler.com
www.chrysler.com
preview.owners.jeep.com
www.chrysler.com
magentocloud20.map.fastly.net
uat3.alfaromeousa.com
dpromo.abarth.it
uat-sdp.chrysler.com
www.jeep.com
magentocloud20.map.fastly.net
ppr-admin.services-store.jeep.fr
uat.app.chrysler.com
www.chrysler.com
mcstaging.wearmopar.com
www.chrysler.com
abarth.pt
stage.shopquicklane.com
www.fcagroup.com
dpromo.abarth.it
abarth.pt
magentocloud20.map.fastly.net
staging1.fcagroup.com
maint.gear.jeep.com
abarth.pt
www.jeep.com
www.fiat.com
staging1.fcagroup.com
www.fcagroup.com
aemstagems4-connect.alfaromeo.com
uat-sdp.chrysler.com
uat-sdp.chrysler.com
uat3.chrysler.com
promo.alfaromeo.com
abarth.pt
auth.carconfigurator.jeep.com
uat-sdp.chrysler.com
login-dev.jeep.com
www.chrysler.com
uat3.chrysler.com
www.jeep.com
email.fcagroup.com
dealer-mideast.jeep.com
magentocloud20.map.fastly.net
uat3.alfaromeousa.com
www.jeep.com
www.chrysler.com
abarth.pt
login-us.jeep.com
abarth.pt
gear.jeep.com
aemdevms4-connectivity.alfaromeo.com
www.jeep.com
abarth.pt
www.gear.jeep.com
auth.carconfigurator.jeep.com
stage.shopquicklane.com
dev.shopquicklane.com
abarth.pt
www.jeep.com
carconfigurator.fcagroup.it
www.fiat.com
services-store.jeep.fr
www.fiat.com
www.jeep.co.uk

Certificate

The complete raw certificate details for mcstaging.gear.jeep.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIBHR2pDciFQjK33jKCy
D7hsnaHiJtOEVD1PBC1SWasnNEwKbbKudgAQx8TSwC8gGQIghtyZIAxolhP5zUBV
xe+NrgQFpqoT6SINdK5RwXQOzTMRlt/+rdxbo2InTnqrDXD7+WgqdLZrux1BHO50
/5V49MRLDmSe/oDk10TTPkqbiz5iSRcpXNQ12HMqj41gFzPfj+Z6IsGQTVEWAg97
zicGPfS+Dlq9WhXetUvvX4QkfEcUCW9JDs4cFTOeusF5YYNVy9PpZXZ1cMrZMhmv
MCdZFPO8vWIsQVSTAEHzjsq+1zVkQtHS0XFUFhmBTh94Em8huiuYEM+R3fDsPHbk
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279148630760386765683699818956831531271640
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-29 08:40:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-28 08:40:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mcstaging.gear.jeep.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24805964226485835444228473635360330308219160946348280678161645862653016037772374957504351622439716809747392062094247929682731519345514035294830259927830598478924096896618815374053629431577746917632564915910516840209929425536626533459396575636071332388161174013236597215006566087161547517708091197625196348661885226883186201588756402824892533940029457515156606490648342296920719741446043658557018947639888257363794631336621855902191913214369198215083142665828450968296406569034253174161941053923701285688395320807818489783880056330720802593507177222517898636975741119197996929875485485942652550568387188443029995709471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							88f0b9956992e6b852e8b13be96d44857a528cff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (310 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcstaging.collection.chrysler.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcstaging.e-store.fiatusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcstaging.gear.jeep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcstaging.life.dodge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcstaging.outfitter.ramtrucks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcstaging.shopalfaromeousa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcstaging.shopbeechcraftgifts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcstaging.shopcessnagifts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcstaging.shophawkergifts.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcstaging.wearmopar.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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