*.stellantis.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 03:9d:ce:17:74:b5:76:6e:1f:ec:cd:4b:48:e6:cf:66 was issued on by Amazon.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.stellantis.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9d:ce:17:74:b5:76:6e:1f:ec:cd:4b:48:e6:cf:66
Serial Number (int): 4807054628890441611891348701595488102
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: d3:86:94:97:32:10:f8:65:aa:1e:16:f5:f7:fc:e8:1f:5b:67:54:74
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 33:69:ee:e3:c7:62:b3:ee:3b:b2:1b:79:35:99:28:b5:db:34:81:50
Fingerprint (sha256): 4d:f2:0f:db:55:f3:7d:b5:30:60:3b:52:37:ef:c4:02:91:41:12:d2:b1:79:11:98:6a:26:77:d4:7c:76:30:72

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate *.stellantis.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.stellantis.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.stellantis.com
*.portalredestellantis.com
*.fcalatam.com
*.fcalatam.com.br
*.fcagroup.com.br
digital.fcalatam.com.br
*.digital.fcalatam.com.br
portalredestellantis.com

Other certificates including the domain name stellantis.com

(limited to 100 certificates)
staging1.fcagroup.com
stage.digitalme.stellantis.com
diabase.stellantis.com
test.k2.extra.stellantis.com
dash.stellantis.com
oms-ui-stage.stellantis.com
isba.stellantis.com
www.fcagroup.com
be.idhub.test.stellantis.com
aemdevms4-connectivity.alfaromeo.com
alpha.nea.wrt.stellantis.com
aemstagems4-connect.alfaromeo.com
be.idhub.stellantis.com
incubator.stellantis.com
workbench.stellantis.com
secure5s.scene7.com
linkentry.fiat.com
git.stellantis.com
vpn-mobile-preprod.stellantis.com
*.stellantis.com
aemstagems4-connect.alfaromeo.com
oms-ui-dev.stellantis.com
commercial-needs.stellantis.com
admin3-medialibrary.stellantis.com
abarth.pt
audiencemanager.stellantis.com
www.stellantis.com
prod.sfp.stellantis.com
comconnect.stellantis.com
imc.test.com-activities.stellantis.com
teamcity.stellantis.com
itdealersupport.stellantis.com
dpromo.abarth.it
login-stage.sapcdc.stellantis.com
san-16-s51.tlsprovisioning.exacttarget.com
management.diagboxcloud.stellantis.com
uat3.alfaromeousa.com
nea.wrt.test.stellantis.com
*.test.as.ivdp.dash.stellantis.com
itdealersupport.pre.stellantis.com
abarth.pt
spu-dev.stellantis.com
idpm.stellantis.com
abarth.pt
cloud.web.stellantis.com
www.fiat.com
nocache.media.stellantis.com
isba.staging.stellantis.com
staging1.fcagroup.com
aemstagems4-connect.alfaromeo.com
oms-ui-stage2.stellantis.com
aftersales-solutions-test.stellantis.com
thehub.stellantis.com
ppr.ppw.stellantis.com
carcomp.stellantis.com
email.lumapps.thehub.stellantis.com
privacyportal.stellantis.com
docma.stellantis.com
targethub.test.stellantis.com
cars-tms.stellantis.com
secure5s.scene7.com
click.web.stellantis.com
secure5s.scene7.com
fed.docmacert.stellantis.com
san-7-s10.tlsprovisioning.exacttarget.com
uat3.alfaromeousa.com
abarth.pt
*.stellantis.com
abarth.pt
dashboards.stellantis.com
admin2-medialibrary.stellantis.com
aemdevms4-connectivity.alfaromeo.com
www.jeep.com
email.lumapps.thehub.stellantis.com
abarth.pt
secure5s.scene7.com
diagboxcloud.stellantis.com
my.des.stellantis.com
admin.idhub.test.stellantis.com
carconfigurator.fcagroup.it
cloud.iap-crm.stellantis.com
www.fiat.com
integration-diagcloud.stellantis.com
www.fiat.com
*.stellantis.com
test.ccl-event.stellantis.com
dpromo.abarth.it
aemdevms4-connectivity.alfaromeo.com
digitalme.stellantis.com
edoc-partners.stellantis.com
mcstaging.stellantis.com
autodiscover.external.stellantis.com
api.ccl-event.stellantis.com
careers.stellantis.com
stellantis.com
stage1-www.opel.de
oms-ui-stage3.stellantis.com
alpha.nea.wrt.test.stellantis.com
askstella.stellantis.com
oms-ui-stage2.stellantis.com

Certificate

The complete raw certificate details for *.stellantis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw8vIg87dK9XRW810noZw
EFlGZkV/P0qyjfILoMzVNI7a1pH+Mfavaxom84aViJBpJjeFgAn0YsuFe6KVwK/S
CKHYVBXUOegc81Zwk8xa5cFoQ9ovLE30WQ7vrmRRpMnjKB/IzKBqZI31dpH2xlOc
dnfwh+uaSkahl/tW6OneT7xH2pSKN51Vh9aFPt4mWWdeNO9Wn3tcdu5A+m67AYq1
xmfZNlO5MH/jC1GQ5S9nn03m8np6tABS3cKkLaX/P/BL8Yqhz9DuLEEKLvjKJmph
SId7C7nObHHlEzDTHHwxOpCaeg3tuzmNxZgnTWlQsc3lFBy5wFL+z5QWhIyQMCMF
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4807054628890441611891348701595488102
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.stellantis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24716958739781079465942448879283065839225234330553446564509308662682880831959356702140232513638151222220236532112428005053416533429371661022291318461533516245459730219448617783997865444421901528360414467439355350632117639146145369514922357093714815970771593277432587733790406489489319326086069039497771350661505115144434637420175071994452247680513623082028285939116990296062789212244788159447706648449224465208849758404073160168540720164715673054020606258009837948608615096506802931938184748207397374890571903477619551173431192682108994817508708602844913741521090929903378493249279258350961868576644824125514071606583
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d38694973210f865aa1e16f5f7fce81f5b675474
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (181 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stellantis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.portalredestellantis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fcalatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fcalatam.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fcagroup.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.fcalatam.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digital.fcalatam.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalredestellantis.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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