cdhx008.api-dev.data.bmw.cloud

Issued by Amazon

About this certificate

This digital certificate with serial number 04:5c:7c:71:57:56:9f:a4:15:fe:3d:a4:8d:60:f0:83 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cdhx008.api-dev.data.bmw.cloud

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:5c:7c:71:57:56:9f:a4:15:fe:3d:a4:8d:60:f0:83
Serial Number (int): 5797127292728001910508206778908471427
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 35:88:65:fc:5d:68:c3:a8:59:35:e9:9f:44:0e:d5:6a:82:0a:80:72
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): a1:55:e0:c6:da:dd:6f:8c:98:b4:1d:2d:07:59:64:2b:ce:07:8c:60
Fingerprint (sha256): dc:6f:85:3a:15:10:ad:a8:71:3a:6d:15:9b:32:72:ee:7b:bd:bc:8e:90:69:62:16:67:ba:ba:4e:51:11:02:11

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate cdhx008.api-dev.data.bmw.cloud

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cdhx008.api-dev.data.bmw.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdhx008.api-dev.data.bmw.cloud

Other certificates including the domain name bmw.cloud

(limited to 100 certificates)
api.emea.deperso-dev.data.bmw.cloud
us-east-1.api-dev.data.bmw.cloud
qa-wcmp.wcp-int.bmw.cloud
bmw-int1.com
ispi-dev.azure.bmw.cloud
lb.int.cosy.bmw.cloud
bmw-int1.com
openvidu.viper.bmw.cloud
demo.tst.us-east-1.cgpb-test.aws.bmw.cloud
bmw-int1.com
api.smms.apac.bmw.cloud
portal.data.bmw.cloud
bmw-int1.com
api.manage.aws.bmw.cloud
int.nbc.bmw.cloud
server.ispi.azure.bmw.cloud
bmwgroupdesignworks.com
status.codecraft.bmw.cloud
quizit.azure.bmw.cloud
us-east-1.api.core.data-int.bmw.cloud
clouddays.data.bmw.cloud
rocketchat.wcp-int.bmw.cloud
test.nbc.bmw.cloud
bmw-int1.com
bmw-int1.com
sql-localhost.data.bmw.cloud
ispi-dev.azure.bmw.cloud
cloudwatch2itsm.mndm-prod.eu-central-1.bmw.cloud
vaas-k8s-in01.bmw.cloud
api.emea.deperso-dev.data.bmw.cloud
ktd-aus-int.aws.bmw.cloud
cloudwatch2itsm.bmwweb-prod.eu-central-1.bmw.cloud
bmw-int1.com
dispatcher-a4.wcmp-int.us-east-1.bmw.cloud
dev.wcmp.bmw
prod.eshops.bmw.cloud
resources.data.bmw.cloud
status.codecraft.bmw.cloud
test.ecp.bmw.cloud
api.emea.deperso-test.data.bmw.cloud
bmwgroupdesignworks.com
chat.logichain.bmw.cloud
bmw-int1.com
author-a4.wcmp-int.us-east-1.bmw.cloud
service.ec.prod.bmw.cloud
app.favor-cockpit-dev.azure.bmw.cloud
api.emea.deperso-test.data.bmw.cloud
test-my.nbc.bmw.cloud
quizit.azure.bmw.cloud
cloudwatch2itsm.ifinder-prod.eu-central-1.bmw.cloud
scene-repository.emea.ipa.data.bmw.cloud
itsm-gateway-int.aws.bmw.cloud
bmw-mini-app.bmw.cloud
openvidu.viper.bmw.cloud
ktd-aus.aws.bmw.cloud
onegpm-dev.bmw.cloud
microservices.api.bmw
service.ec.prod.bmw.cloud
catalog.data.bmw.cloud
admin.smoss-pre-prod.apac.bmw.cloud
countly.data.bmw.cloud
api.smms.apac.bmw.cloud
cloudwatch2itsm-wepf-prod.wepf-prod.eu-central-1.bmw.cloud
test.ecp.aws.bmw.cloud
itsm-gateway-int.aws.bmw.cloud
kibana.rrmc.bmw.cloud
auth-bmw-com.envprd.rrmc.eu-central-1.aws.bmw.cloud
vaas-k8s-in01.bmw.cloud
sf-acs.aws.bmw.cloud
resources-localhost.data.bmw.cloud
qzapp.secrefapp.bmw.cloud
api.emea.deperso-dev.data.bmw.cloud
bmw-int1.com
dev-1.oasis.azure.bmw.cloud
manage.aws.bmw.cloud
eu-west-1.api.core.data-int.bmw.cloud
dpl.azure.bmw.cloud
graph-heisenbergers.data.bmw.cloud
cloudwatch2itsm.dvss-prod.eu-central-1.bmw.cloud
prod.ucp-internal.bmw.cloud
bmw-int1.com
api.emea.deperso-dev.data.bmw.cloud
vwh-portal.bmw.cloud
eu-west-1.api-dev.data.bmw.cloud
rocketchat.wcp-int.bmw.cloud
devblue.ats.azure.bmw.cloud
portal-pollos.data.bmw.cloud
cloudwatch2itsm.grpw-prod.eu-central-1.bmw.cloud
bmw-int1.com
api.betalabs.bmw.cloud
graph-dev2.data.bmw.cloud
kibana.wcp-preprod.bmw.cloud
api.emea.deperso-int.data.bmw.cloud
engage-th.apac.bmw.cloud
test.ucp-dev.bmw.cloud
cdc-ad.e2e.bmw.cloud
prod.ucp.bmw.cloud
xlab.bmw.cloud
sima.ecs.azure.bmw.cloud
prod.phobos.bmw.cloud

Certificate

The complete raw certificate details for cdhx008.api-dev.data.bmw.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutOUoXTt8IpMFZdagNzJ
5gbtyXN+8cAWPRT44M1T3F6w+EKttmhX8ztwA+cTBEfIqsolwGfKyw4oeBSwUHkF
ASfSLCGyF7ryiatyy/Srp/O0KeEjbgmmKiY6Qxc29uTVOgDTGqn5NiPkTqFHG0Us
Vl4ZOZ7GjPhDqU+oMQux7qCsA8uvxcpAI3qQp9Tsq8skw5KiTsooYklhBt4I7dE1
X9aR1oS7sOKlph/9H4kAK2AiiBvooiDT44QqjLSC7/wl4WAMKNdIiNKx0L9DuIzt
qyXTtmEjCcpl3CbrT0DE5bmFsJEdpGBDlOn9i2orVJ/BoDrw6acJy2R01n3wcAiK
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5797127292728001910508206778908471427
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdhx008.api-dev.data.bmw.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23584659000534364640087061868208050674305371814029871252491985274461155776631456670778237599337048117301502217148845375822795107003005857854464140369650074805872998808252830939537536044251390335250295888037835292869294584075529533748127203465968661749668042801129437835616061004631819345885975058223067466318038308174286957304797343515209270994267289196285541084871867998487393641121622307405811864702179832430740471645845259036935015366630148501639511619055148064656207871824120510195285670290440775501653399541997733685692524279486506293642319222350588773813053451745975479890914605682853077752746229716505068079863
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							358865fc5d68c3a85935e99f440ed56a820a8072
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdhx008.api-dev.data.bmw.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0066255ec67d9f2f02e8c78deb85a9617db21c9124b97a374271d091667e2f4ed6515a547b92a80d15ba3a5d10c6262ab410fa8990f25444c78e8a55626897c5092424d14cec9a92e81d7d3057cde01bb56ada60615f33171ffafca6230726d7e3f4bbb736848f022b1796e504fa32881cb57d8cf6bfe3fa72383b6a0118a986d9d424e46d31659f47caa042a026d7572975a00a28f71b37767a9ce41d148d600ec7e70fae45dc1d5818f5cca4af651c2373607a20867ac86bd4fc2c6a6c25282d53e46500c6b3f7692f83bb84315006a42ed111be97413044af9ee55f56aedb9bfa54f6544fc72db129bf8ee4dc4a6740031b9269d1ec4945d40ed384bb41e519