lamborghini-pol.connectauto.io

Issued by Amazon

About this certificate

This digital certificate with serial number 03:61:ea:c8:39:49:33:4a:3f:9f:39:d6:37:e4:0c:2c was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lamborghini-pol.connectauto.io

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:61:ea:c8:39:49:33:4a:3f:9f:39:d6:37:e4:0c:2c
Serial Number (int): 4496098729841522597408272881755098156
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: a3:f1:b4:22:0b:5d:99:c1:66:46:48:19:db:e8:90:09:78:3c:70:39
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): e7:41:c9:c7:41:34:f4:9d:24:30:4c:cb:52:0b:87:aa:6d:89:cd:f0
Fingerprint (sha256): c1:78:c4:f9:b6:da:60:b9:2b:16:23:34:c9:f2:c6:30:c5:bb:b0:a6:81:8a:6c:a1:51:de:60:05:64:4f:70:0f

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate lamborghini-pol.connectauto.io

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lamborghini-pol.connectauto.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lamborghini-pol.connectauto.io
*.preowned.lamborghini.com
preowned.lamborghini.com
*.lamborghini-pol.connectauto.io

Other certificates including the domain name connectauto.io

(limited to 100 certificates)
*.landroverapproved.it
publish.connectauto.io
rolls-royce-avl.connectauto.io
rolls-royce-pol.connectauto.io
rolls-royce-pol.connectauto.io
it.jaguar-avl.connectauto.io
lamborghini-pol.connectauto.io
landrover-avl.connectauto.io
approved.br.landrover.com
it.landrover-avl.connectauto.io
approved.br.jaguar.com
*.connectauto.io
locator.bentleymotors.com
soldwithrys.com
*.connectauto.io
cms-reader-kia.connectauto.io
*.jaguar-avl.connectauto.io
lamborghini-pol.connectauto.io
*.landrover-avl.connectauto.io
es.landrover-avl.connectauto.io
claenge.com
*.connectauto.io
app.domaimobiliaria.com.br
*.connectauto.io
*.connectauto.io
lamborghini-pol.connectauto.io
coconutplace.kr
app.yourtimeline.io
*.connectauto.io
it.jaguar-avl.connectauto.io
cms-reader-north-america.connectauto.io
es.landrover-avl.connectauto.io
approved.br.landrover.com
*.connectauto.io
rolls-royce-pol.connectauto.io
translator.connectauto.io
*.landroverapproved.it
*.connectauto.io
junglesutras.com
www.sairsapata.online
*.connectauto.io
qa.lpx.fund
*.connectauto.io
lamborghini-pol.connectauto.io
*.connectauto.io
qa.ims2.connectauto.io
publish-north-america.connectauto.io
lamborghini-pol.connectauto.io
getbeacon.app
preowned.bentleymotors.com
jaguar-avl.connectauto.io
lamborghini-pol.connectauto.io
publish.connectauto.io
*.connectauto.io
*.landrover-avl.connectauto.io
*.connectauto.io
translator.connectauto.io
www.approved.landrover.de
*.jaguar-avl.connectauto.io
*.landroverapproved.it
redirect-it.landrover-avl.connectauto.io
rolls-royce-pol.connectauto.io
*.connectauto.io
goodhuman.me
*.jaguar-avl.connectauto.io
www.notatia.org
*.connectauto.io
*.landroverapproved.it
*.connectauto.io
*.connectauto.io
publish.connectauto.io
fire.extrafounder.com
preowned-uk.genesis.com
*.connectauto.io
*.connectauto.io
*.landroverapproved.it
rolls-royce-pol.connectauto.io
www.approved.jaguar.de
jaguar-avl.connectauto.io
*.landroverapproved.it
publish.connectauto.io
erayozs.com
it.landrover-avl.connectauto.io
*.kia-ucl.connectauto.io
lamborghini-pol.connectauto.io
redirect-it.jaguar-avl.connectauto.io
*.landroverapproved.it
approved.br.jaguar.com
*.jaguar-avl.connectauto.io
docs.fragments.app
*.landroverapproved.it
approved.br.landrover.com
*.connectauto.io
*.connectauto.io
*.kia-ucl.connectauto.io
*.connectauto.io
*.connectauto.io
app-dev.sknups.gg
ivoryacestructures.com
publish.connectauto.io

Certificate

The complete raw certificate details for lamborghini-pol.connectauto.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RXid6WoqUyA73ZXuqtG
fwqFY1B/nsQzkP0bxXj7Kc98tWGDRaktU8KurRoVjtnF2jDJ6Ym6wBJMKPmgANAr
W0+PNoSXpPWF3x+75/N9QQQ4zYXE5P0+x9j0gz1yWdsTj0lwvzApbevwV6g1bYad
W57mnM//UNK/ow0QbIt5D7KSSZrxhXFlOQ4/+YheJYGXH4pWst1AFMy+43wswroS
+qGz7dd0y6fVfkfKs20Kh3xknGni85J8LtZuKju4g2bP/HhZqTQI0gmXSjebSr2m
XdN3azo8wPSNzOjP1OsHWRG82c044+KuZHZm8+Dof3uMpkg8KiCntz7ZlypjqGex
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4496098729841522597408272881755098156
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lamborghini-pol.connectauto.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28414410334657596336688013610670467549931456334145717880110538222177808204719795001200023802467533052740189180118403091229901310731609990841917610676382366388202627088082426596588489259861750460707124429639967683405466451457666335766507419884510529540946340389868325197038804236997571660132959037833007731130693138190868895856494247951765042729492138363627446550216997475207135830581493898923224774509491076219318100375563967601584922367598026984536676599284267310363259129618177018515318319165401173418540503309630602320521049515302929785247950443914271173119681175154054277291266377613601277336848918810962812187007
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a3f1b4220b5d99c166464819dbe89009783c7039
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lamborghini-pol.connectauto.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preowned.lamborghini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preowned.lamborghini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lamborghini-pol.connectauto.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016ac5c43e780000040300473045022100f5a11c1e4612da553bfe05637ac31b141c1c8fa3cb0f12ea4d16d756452ecccd022069d1b66b9c76a5d178db3a8a3fbf7873ed3022a4e252c1769374627f374cbc710076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016ac5c43b410000040300473045022100d47ec366357ae864d8d259623c84633d1a814b505323a2d08eeb384e0f1927c002200177701adc84a001013344f86da94405e0c5d6919b311e16456b084007bf96a8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0003d7f97ade2fa0165635e55ab9df4c34a4b07bb06c7abd29e0e49c5c198f37ec72640af63fa6ce5bf6ae43862b5a74a38294f2f70d684d069679b1cd9b22578a9b0ba745c9de00e92f8233d1d69181328c2b8d31431b4b70929ebe9217b4d8ca262bf803b7ec271d6dacc606f43f4f03aee2f71b5f51e0d87da88733006c60003b31cdfd428f5fced269e414f8de768fbe1e4df4fd501ff6b1552c2d729a657844c3e29c7fdff30ac5d0bb72444e66162a4b9ba65ee2de7dcd3583e2ed89957ac900a7cc06dc91cde71e9343b015a6176a1d688d054a771b2e227e2ee97565a0373c118d0c0a1eb521e4d097153af1b0f7b9864f9c26da371e58a2748ce85e3b