*.stellantis.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0f:7b:8e:36:1a:a4:70:85:8d:cb:bd:db:e8:44:63:f5 was issued on by Amazon.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.stellantis.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:7b:8e:36:1a:a4:70:85:8d:cb:bd:db:e8:44:63:f5
Serial Number (int): 20579956839103421657793070620697977845
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d9:73:2a:08:34:bc:63:c9:93:92:7d:d2:f7:4b:0e:5f:97:42:6d:83
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 36:a5:ff:0e:cf:a8:14:99:e8:e8:b5:0a:2b:a6:74:63:4b:65:9d:11
Fingerprint (sha256): 5f:96:a5:55:d0:fd:87:2b:29:0b:10:f5:c1:47:8d:da:55:dc:4c:cc:df:69:02:b3:6c:b0:7a:8b:51:b2:d6:e9

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.stellantis.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.stellantis.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.stellantis.com
*.lojacitroen.com.br
*.fcalatam.com
*.fcalatam.com.br
*.faasa-non-prod.fcalatam.com.ar
*.fcagroup.com.br
*.lojapeugeot.com.br

Other certificates including the domain name stellantis.com

(limited to 100 certificates)
staging1.fcagroup.com
stage.digitalme.stellantis.com
diabase.stellantis.com
test.k2.extra.stellantis.com
dash.stellantis.com
oms-ui-stage.stellantis.com
isba.stellantis.com
www.fcagroup.com
be.idhub.test.stellantis.com
aemdevms4-connectivity.alfaromeo.com
alpha.nea.wrt.stellantis.com
aemstagems4-connect.alfaromeo.com
be.idhub.stellantis.com
incubator.stellantis.com
workbench.stellantis.com
secure5s.scene7.com
linkentry.fiat.com
git.stellantis.com
vpn-mobile-preprod.stellantis.com
*.stellantis.com
aemstagems4-connect.alfaromeo.com
oms-ui-dev.stellantis.com
commercial-needs.stellantis.com
admin3-medialibrary.stellantis.com
abarth.pt
audiencemanager.stellantis.com
www.stellantis.com
prod.sfp.stellantis.com
comconnect.stellantis.com
imc.test.com-activities.stellantis.com
teamcity.stellantis.com
itdealersupport.stellantis.com
dpromo.abarth.it
login-stage.sapcdc.stellantis.com
san-16-s51.tlsprovisioning.exacttarget.com
management.diagboxcloud.stellantis.com
uat3.alfaromeousa.com
nea.wrt.test.stellantis.com
*.test.as.ivdp.dash.stellantis.com
itdealersupport.pre.stellantis.com
abarth.pt
spu-dev.stellantis.com
idpm.stellantis.com
abarth.pt
cloud.web.stellantis.com
www.fiat.com
nocache.media.stellantis.com
isba.staging.stellantis.com
staging1.fcagroup.com
aemstagems4-connect.alfaromeo.com
oms-ui-stage2.stellantis.com
aftersales-solutions-test.stellantis.com
thehub.stellantis.com
ppr.ppw.stellantis.com
carcomp.stellantis.com
email.lumapps.thehub.stellantis.com
privacyportal.stellantis.com
docma.stellantis.com
targethub.test.stellantis.com
cars-tms.stellantis.com
secure5s.scene7.com
click.web.stellantis.com
secure5s.scene7.com
fed.docmacert.stellantis.com
san-7-s10.tlsprovisioning.exacttarget.com
uat3.alfaromeousa.com
abarth.pt
*.stellantis.com
abarth.pt
dashboards.stellantis.com
admin2-medialibrary.stellantis.com
aemdevms4-connectivity.alfaromeo.com
www.jeep.com
email.lumapps.thehub.stellantis.com
abarth.pt
secure5s.scene7.com
diagboxcloud.stellantis.com
my.des.stellantis.com
admin.idhub.test.stellantis.com
carconfigurator.fcagroup.it
cloud.iap-crm.stellantis.com
www.fiat.com
integration-diagcloud.stellantis.com
www.fiat.com
*.stellantis.com
test.ccl-event.stellantis.com
dpromo.abarth.it
aemdevms4-connectivity.alfaromeo.com
digitalme.stellantis.com
edoc-partners.stellantis.com
mcstaging.stellantis.com
autodiscover.external.stellantis.com
api.ccl-event.stellantis.com
careers.stellantis.com
stellantis.com
stage1-www.opel.de
oms-ui-stage3.stellantis.com
alpha.nea.wrt.test.stellantis.com
askstella.stellantis.com
oms-ui-stage2.stellantis.com

Certificate

The complete raw certificate details for *.stellantis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DJ0ac+hDuQigChuqv40
uqdhAhxFtZT5Pw3zmGT1DbDmagACvM2cJEcwm4zaH+5kY1RkNPqcejC5QeWuEQRw
ZS85Gl5hN6We/RhtgZASM8FQsLTeEFyY8pUaE+lLr/xFRF8JNVdrVWiZiF9YvlMK
vuPGOw1K1He5V6wEktPe0F6UwI+iE4v3LthlNcKp/BD/HTTdZi34Nw6kZdUApkeJ
BGW/iZ2hAPbAT/QbriPttmthLcBWhlKVN5qIXbfpFnAYtrS3qydsOHEmjwAv2y+5
iEKZgfSn/+R8BUw04eNmH5UEzaiOvHU0TdsyYZbjeSdO5UM4CMNWDDNxwhByLS5X
eQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20579956839103421657793070620697977845
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.stellantis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27292354032036272393054145794901447676125549803272121878356598196777073036046269533480278686606044539807051493575504968436179873540304282561770708298046064233956670106842744439879951858230994194550832357603286818350788590435071806766861496277218461487129179708586786811538153016452037854630363396697829451396690940000410476225286770252244132683961865584449617215561398973781685880279353765828265826234974205307801060262434341765377350749428852404175836311776279693827500559898979061404123737870676644289575767615557875794720334682117610910790912986658307403228882650330955774408345029114338536976620119906150131849081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9732a0834bc63c993927dd2f74b0e5f97426d83
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (153 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stellantis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lojacitroen.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fcalatam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fcalatam.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faasa-non-prod.fcalatam.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fcagroup.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lojapeugeot.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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