perf.bo-new.groupe-seb.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 08:40:1e:ba:50:30:f9:70:20:98:8d:22:be:76:51:e3 was issued on by Amazon.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=perf.bo-new.groupe-seb.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:40:1e:ba:50:30:f9:70:20:98:8d:22:be:76:51:e3
Serial Number (int): 10966754198769900317423379945560101347
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 03:a6:c5:44:cc:b1:87:a3:9a:da:9b:7e:4a:e1:7a:7d:83:b8:8e:5c
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): c1:c5:0e:f4:6b:41:c4:31:c0:04:6b:75:ed:30:7a:5f:c5:16:56:40
Fingerprint (sha256): 97:a4:3e:99:81:cd:8e:c9:4d:d7:c7:99:5e:bd:b6:af:03:2f:34:66:6b:59:4b:57:b0:fa:1c:6b:d4:2a:16:9a

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate perf.bo-new.groupe-seb.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for perf.bo-new.groupe-seb.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

perf.bo-new.groupe-seb.com
perf.myrecipe.cookeo.moulinex.fr
perf.myrecipe.companion.moulinex.fr
perf.marecette.companion.moulinex.fr
perf.cookies-manager.groupe-seb.com
perf.myrecipe.cookeo.moulinex.it
perf.marecette.cookeo.moulinex.fr
perf.bo.groupe-seb.com
perf.myrecipe.smartandtasty.seb.fr
perf.myrecipe.actifry.seb.fr

Other certificates including the domain name groupe-seb.com

(limited to 100 certificates)
preprod-direct.api.groupe-seb.com
cert00088-azurecdn.akamaized.net
preprod.brandsites.api.groupe-seb.com
digital-ready.groupe-seb.com
brandsites.api.groupe-seb.com
*.urlbuilder.groupe-seb.com
digital-ready3.groupe-seb.com
dcp2.groupe-seb.com
mediaplan.groupe-seb.com
preprod-direct.api.groupe-seb.com
digital-ready3.groupe-seb.com
digital-ready2.groupe-seb.com
digital-ready.groupe-seb.com
appstore.dcp.groupe-seb.com
cert00088-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
digital-ready.groupe-seb.com
dcp2.groupe-seb.com
qa.openfoodsystem.com
cert00088-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
appstore.dcp.groupe-seb.com
PREPROD.api.groupe-seb.com
testmpu.groupe-seb.com
cert00088-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
prod.api.groupe-seb.com
dcp2.groupe-seb.com
bat.iot.api.groupe-seb.com
PREPROD.api.groupe-seb.com
digital-ready.groupe-seb.com
preprod-direct.api.groupe-seb.com
digital-ready3.groupe-seb.com
dcp2.groupe-seb.com
cert00088-azurecdn.akamaized.net
freeze.dcp.groupe-seb.com
perf.api.groupe-seb.com
prod.rcu-eai-salesforce.groupe-seb.com
analytics.groupe-seb.com
*.moulinex.fr
cert00088-azurecdn.akamaized.net
brandsites.api.groupe-seb.com
dcp.groupe-seb.com
freeze-direct.iot.api.groupe-seb.com
cert00088-azurecdn.akamaized.net
digital-ready2.groupe-seb.com
dcp.groupe-seb.com
cert00088-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
digital-ready2.groupe-seb.com
digital-ready2.groupe-seb.com
digital-ready2.groupe-seb.com
analytics.groupe-seb.com
digital-ready2.groupe-seb.com
cert00088-azurecdn.akamaized.net
dcp2.groupe-seb.com
apipro.groupe-seb.com
urlbuilder.groupe-seb.com
cert00088-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
brandsites.api.groupe-seb.com
dcp2.groupe-seb.com
cert00088-azurecdn.akamaized.net
cert00088-azurecdn.akamaized.net
perf.api.groupe-seb.com
analytics.groupe-seb.com
digital-ready3.groupe-seb.com
devops.groupe-seb.com
data.groupe-seb.com
cert00088-azurecdn.akamaized.net
devops.groupe-seb.com
iot.api.groupe-seb.com
sebplatform.bo.groupe-seb.com
bat.bo-new.groupe-seb.com
appstore.dcp.groupe-seb.com
cert00088-azurecdn.akamaized.net
PREPROD.api.groupe-seb.com
preprod.iot.api.groupe-seb.com
brandsites.api.groupe-seb.com
drs.api.groupe-seb.com
freeze.dcp.groupe-seb.com
bat.api.groupe-seb.com
freeze.dcp.groupe-seb.com
cert00088-azurecdn.akamaized.net
datas.groupe-seb.com
freeze.api.groupe-seb.com
digital-ready.groupe-seb.com
freeze.iot.api.groupe-seb.com
digital-ready2.groupe-seb.com
dcp2.groupe-seb.com
digital-ready2.groupe-seb.com
digital-ready2.groupe-seb.com
freeze.dcp.groupe-seb.com
dcp2.groupe-seb.com
cert00088-azurecdn.akamaized.net
digital-ready.groupe-seb.com
mediaplan.groupe-seb.com
jenkins.dcp.seb.com
*.dsm.groupe-seb.com
brandsites.api.groupe-seb.com

Certificate

The complete raw certificate details for perf.bo-new.groupe-seb.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxI21EwGF7sQ/2OgJxrfo
XzzOJlQTSX9qEU8v50ZlKA/aQ+J8fgnx+dubO+0nx/XyN85dw2Z8uQSiG04By3O0
mi2MXmlfAdStEp05StkwERxYPl+/riszXOJCk3Mbr0ZHjm71a4pog/jv1n+dwvX6
V4GR+Oh8NWMBmoQ5rgiU86FJIw7diH2S0htVD9AUxS1ZkxY8f6OSeJ7GJQQ+jUKU
AjVvIKbbCSta7ISwkkn/7C/StDUTbD++sbnCXUZid2rNMRKj4ZNn8Xq3iOXJZlT9
y9E4oyxp50zBx8Rrbz36Hx6I2L9sStCnWUinW1wbAKzDWvxm1utmdWt4vrq/k5NH
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10966754198769900317423379945560101347
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'perf.bo-new.groupe-seb.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24812586257866485793614359704609579576824956292636918483195849097411374508637484803082846175913245268423880277764259841287108225553603594202031651367502991598192843113279897967089630196970133778290593567275958871525468055739421701128804917348688102356903635896555961849609096739212141432385098129200136602339310793453592205117286612334910197220037294628706693060046450615041786039110365640153480823922097759292274483688413149484533838477387098780667369276017218745335019470915176013265240703413844879709083484655616043974184790751892291926380746665459079060706100873491114027930094379970193635963255047249148362573699
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							03a6c544ccb187a39ada9b7e4ae17a7d83b88e5c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (337 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.bo-new.groupe-seb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.myrecipe.cookeo.moulinex.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.myrecipe.companion.moulinex.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.marecette.companion.moulinex.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.cookies-manager.groupe-seb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.myrecipe.cookeo.moulinex.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.marecette.cookeo.moulinex.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.bo.groupe-seb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.myrecipe.smartandtasty.seb.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf.myrecipe.actifry.seb.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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