spark.qual.piaget.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 02:5a:81:42:4e:03:be:93:9d:f9:80:c0:da:aa:17:30 was issued on by Amazon.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=spark.qual.piaget.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:5a:81:42:4e:03:be:93:9d:f9:80:c0:da:aa:17:30
Serial Number (int): 3128384392879920755516483574405142320
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: de:d5:85:4a:97:51:d0:4a:ec:e7:45:da:23:43:55:22:5d:82:55:53
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 8d:48:f8:af:35:86:51:e0:2d:39:03:46:a8:c9:63:ed:96:01:54:bb
Fingerprint (sha256): 4f:d7:70:98:c2:d4:4c:f6:75:69:c4:0a:f7:30:e9:18:fd:bb:82:50:e0:39:88:98:f6:39:39:61:5d:47:35:5b

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate spark.qual.piaget.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for spark.qual.piaget.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

spark.qual.piaget.com
spark.qual.jaeger-lecoultre.com
spark.qual.panerai.com
spark.qual.montblanc.com
spark.qual.baume-et-mercier.com
spark.qual.iwc-schaffhausen.com
spark.qual.iwc.com
spark.qual.vacheron-constantin.com
spark.qual.alange-soehne.com
spark.qual.rogerdubuis.com

Other certificates including the domain name piaget.com

(limited to 100 certificates)
intranet.richemont.com
intranet.richemont.com
www.piaget.com
www.piaget.com
scan.preprod2.cartier.com
www.seal.piaget.com
intranet.richemont.com
spark.dev.piaget.com
dam.richemont.com
intranet.richemont.com
watch.supplier.piaget.com
watch.supplier.piaget.com
media.richemont.com
admin.www.piaget.com
scan.preprod2.cartier.com
image.email.novartis.es
admin.www.piaget.com
intranet.richemont.com
quality.secure.piaget.com
intranet.richemont.com
linemedia.preprod.richemont.com
dam.richemont.com
linemedia.preprod.richemont.com
scan.dev.cartier.com
pprod.secure.piaget.com
admin.www.piaget.com
intranet.richemont.com
www.quality.alange-soehne.com
www.event-registration.piaget.com
watch.supplier.piaget.com
image.email.novartis.es
linemedia.preprod.richemont.com
scan.preprod2.cartier.com
polo-experience.piaget.com
intranet.preprod.richemont.com
www.quality.alange-soehne.com
media.richemont.com
scan.dev.cartier.com
linemedia.preprod.richemont.com
extranet-pilote.piaget.com
www.quality.alange-soehne.com
cartiercare.preprod2.cartier.com
pressnews.piaget.com
san-2-s50.tlsprovisioning.exacttarget.com
intranet.staging.richemont.com
spark.preprod.piaget.com
admin.www.piaget.com
spark.dev.piaget.com
scan.dev2.cartier.com
intranet.quality.richemont.com
extranet-pilote.piaget.com
admin.www.piaget.com
intranet.dev.richemont.com
scan.cartier.com
www.piaget.com
intranet.staging.richemont.com
scan.preprod.cartier.com
vcs.richemont.com
www.piaget.com
intranet.richemont.com
archiving.piaget.com
linemedia.preprod.richemont.com
admin.www.piaget.com
scan.preprod2.cartier.com
intranet.dev.richemont.com
admin.www.piaget.com
intranet.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
scan.dev2.cartier.com
dam.richemont.com
scan.dev2.cartier.com
spark.piaget.com
scan.cartier.com
piaget.com
scan.preprod.cartier.com
media.richemont.com
admin.www.piaget.com
www.piaget.com
www.quality.alange-soehne.com
www.ivycoder.com
admin.www.piaget.com
admin.www.piaget.com
image.email.novartis.es
www.piaget.com
presse.piaget.com
intranet.richemont.com
staging.yada.ai
app.dev.trvlbud.com
www.switzerlandetraining.piaget.com
scan.preprod.cartier.com
presse.piaget.com
www.quality.alange-soehne.com
www.piaget.com
polo-experience.piaget.com
scan.dev2.cartier.com
intranet.staging.richemont.com
intranet.richemont.com
www.piaget.com
intranet.richemont.com

Certificate

The complete raw certificate details for spark.qual.piaget.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH4cmi0RwjSek8T0TkQR
S6WRH1cyDFl92Q4s4SZeBlN9rf6JXuzn3nq+LNlWTBcWHTrW4mvL3W6Pa0DXqGvq
MCWewjhPFktfmvCjArRpj/eRUxkXgXZ1Zu9ChYYDs0ZhrVhtY2Godg/6LbUe0gUQ
VyqpAZEaWc3fBaoFRf7qnpWwX9L/UEaXp4CTF/k2Kdvsl+Xp9Z7FGwqBdDc6ld83
Mo1xe65Z5UTOBGtvGcDgHoc+ViWeq2Wbxp/CBuatUk5nbSa0uv2W9XumMHZeB/hk
3ZL7Lvcfzn28Vqu5Zl2Ddm2hgS9c/Uy3DOtG8MAtPTxVwBWBL2alWCX5A/eBss0/
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3128384392879920755516483574405142320
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spark.qual.piaget.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25309849003840526264306119269586298572529276287716152285720321551933290092654299529456812253281015389878392440797232488204091885426963486252366141189821613103218977224228403779855124845795708681525693581160074619085821187957728124616340816679536484255385050146954100419228965983525594479555251202990170112453790915327087869536856866763524169140982995621468249266406754732272874063681549484126995495901289463317278393197754668855127785660335438118043197290864396126300475528430592199646771948467473991821211873398886128840896693147670732927037424979223787012039853899546099418540419081112359686002211075208649275948957
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ded5854a9751d04aece745da234355225d825553
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (290 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spark.qual.piaget.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spark.qual.jaeger-lecoultre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spark.qual.panerai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spark.qual.montblanc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spark.qual.baume-et-mercier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spark.qual.iwc-schaffhausen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spark.qual.iwc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spark.qual.vacheron-constantin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spark.qual.alange-soehne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spark.qual.rogerdubuis.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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