drivingelectric.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 05:03:f2:ce:23:04:96:0d:fe:3d:63:d6:22:12:3b:76 was issued on by Amazon.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=drivingelectric.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:03:f2:ce:23:04:96:0d:fe:3d:63:d6:22:12:3b:76
Serial Number (int): 6666641544463265150226314252885572470
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: f7:19:47:b6:47:83:f6:3c:16:84:a8:59:fb:eb:e3:dc:b5:1b:fd:79
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): ee:cf:6d:d7:fe:a5:54:df:5e:59:45:b8:e9:09:b0:5d:96:46:36:14
Fingerprint (sha256): 4c:4d:50:65:91:6e:64:5d:c0:58:5d:d2:2b:49:a2:8c:ed:12:70:d3:2c:52:59:99:7b:a1:ce:3b:1d:40:49:30

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate drivingelectric.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for drivingelectric.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

drivingelectric.com
drivingelectric.co.uk
prod.coreapp.didev.co.uk
*.drivingelectric.com
*.drivingelectric.co.uk
*.prod.coreapp.didev.co.uk

Other certificates including the domain name drivingelectric.com

(limited to 100 certificates)
aex-mms.autoexpress.co.uk
aex-mms.autoexpress.co.uk
aex-mms.autoexpress.co.uk
s3-cloudinary-pin.map.fastly.net
mms.drivingelectric.com
s3-cloudinary-pin.map.fastly.net
br.bikeradar.com
s3-cloudinary-pin.map.fastly.net
mms.drivingelectric.com
br.bikeradar.com
s4-san.cloudinary.com
ceros1.map.fastly.net
auth.charged.dennis.co.uk
drivingelectric.co.uk
z980.carthrottle.com
auth.charged.dennis.co.uk
commercial.drivingelectric.com
drivingelectric.com
aex-mms.autoexpress.co.uk
s3-cloudinary-pin.map.fastly.net
aex-mms.autoexpress.co.uk
s3-san.cloudinary.com
*.drivingelectric.com
s4-san.cloudinary.com
aex-mms.autoexpress.co.uk
s3-cloudinary-pin.map.fastly.net
s4-cloudinary-pin.map.fastly.net
s3-san.cloudinary.com
s3-cloudinary-pin.map.fastly.net
s3-san.cloudinary.com
s3-cloudinary-pin.map.fastly.net
l468.drivingelectric.com
br.bikeradar.com
s4-san.cloudinary.com
*.drivingelectric.com
tw-mms.theweek.com
newsletter.drivingelectric.com
l468.drivingelectric.com
s4-cloudinary-pin.map.fastly.net
aex-mms.autoexpress.co.uk
a.hwstatic.com
s4-cloudinary-pin.map.fastly.net
s3-san.cloudinary.com
s3-san.cloudinary.com
s3-san.cloudinary.com
drivingelectric.co.uk
br.bikeradar.com
*.ceros.com
auth.charged.dennis.co.uk
drivingelectric.com
aex-mms.autoexpress.co.uk
br.bikeradar.com
s3-san.cloudinary.com
newsletter.drivingelectric.com
s4-cloudinary-pin.map.fastly.net
br.bikeradar.com
aex-mms.autoexpress.co.uk
commercial.drivingelectric.com
s4-cloudinary-pin.map.fastly.net
aex-mms.autoexpress.co.uk
t075.itpro.co.uk
s4-cloudinary-pin.map.fastly.net
s4-cloudinary-pin.map.fastly.net
ceros1.map.fastly.net
s3-san.cloudinary.com
media.drivingelectric.com
s3-cloudinary-pin.map.fastly.net
s3-san.cloudinary.com
blueconic.motivfinance.co.uk
newsletter.drivingelectric.com
ceros1.map.fastly.net
aex-mms.autoexpress.co.uk
br.bikeradar.com
aex-mms.autoexpress.co.uk
s3-cloudinary-pin.map.fastly.net
s3-san.cloudinary.com
tw-mms.theweek.com
aex-mms.autoexpress.co.uk
a.hwstatic.com
br.bikeradar.com
aex-mms.autoexpress.co.uk
s3-cloudinary-pin.map.fastly.net
br.bikeradar.com
br.bikeradar.com
aex-mms.autoexpress.co.uk
drivingelectric.com
s3-san.cloudinary.com
drivingelectric.com
br.bikeradar.com
s3-san.cloudinary.com
drivingelectric.com
aex-mms.autoexpress.co.uk
z980.carthrottle.com
drivingelectric.com
ceros1.map.fastly.net
auth.charged.dennis.co.uk
s3-san.cloudinary.com
s4-cloudinary-pin.map.fastly.net
s3-san.cloudinary.com
tw-mms.theweek.com

Certificate

The complete raw certificate details for drivingelectric.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphkJdPVhGyRxLx4SE6+0
gQMzdjzj7KZEKulrQxkRzSLYC+ggLlZlOsrivJgPFMiC0aU6UMmSfcp32ofT9IAm
y6CLcO9fuCgbprpuAgFx9JhiiliINFAs3QvSj/U/Fm3uKmO6viLPBFrLXtQfnzfI
AzWnRcIfip155Qe/4CvIAsg5wuLTFBHRJOvdU3N1aQGUxpNtUGlk7RHpEHw/HWr4
F//dCSOhu13l8El3L4ytvEtGInFfO2LA6zwuhAPJ3Gdw7BTb0KrYMus8lPgbzIEB
wUm04lPD0rz0IG9T8AMMp5PzERF6w8dv0+IA+VhLGqae7/VtpP7R5sTJSVpf74zI
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6666641544463265150226314252885572470
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'drivingelectric.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20967904800069463129864449002117844906800015060744015187709034450371182208113436115702033624174433136207279906288579308177904806884650795340317107921649177070404338371774022444444158330084487230258440988655820770914096401432936760330117760021384848055458446121323036162109752463794789326796022351563272243582884686535676060500616655186898313274925316629900136373421811969259057822879815338007191758401491980012552610917643767626697831454300478755264746166930486387197662931395090869901367394864130891893834513720946784846322915137813146912295770897221820075150766927389848867650724286882323466189963470880799407786151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f71947b64783f63c1684a859fbebe3dcb51bfd79
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drivingelectric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drivingelectric.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.coreapp.didev.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drivingelectric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.drivingelectric.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.coreapp.didev.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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