*.dsoautomation.net

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 02:2a:a9:a3:a6:b3:ec:de:8a:5b:22:3e:35:bf:7c:42 was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.dsoautomation.net

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:2a:a9:a3:a6:b3:ec:de:8a:5b:22:3e:35:bf:7c:42
Serial Number (int): 2879973152633829399285611280595909698
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: b6:28:ac:cb:2f:43:f0:72:e6:3e:31:4e:b2:16:ea:ec:d0:99:9b:38
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): e3:7c:15:c7:f3:0d:84:11:0f:1a:83:7b:98:6a:30:d1:d2:cd:18:c6
Fingerprint (sha256): e3:c9:a4:bf:84:db:d8:50:a2:86:3c:28:fc:54:ee:ad:b3:7e:9f:ad:76:8e:81:b5:87:40:ba:36:86:0c:9b:58

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate *.dsoautomation.net

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.dsoautomation.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.dsoautomation.net
qa.tams.api.bcg.com
*.tams-qa.eu-central-1.eks.dsoautomation.net

Other certificates including the domain name dsoautomation.net

(limited to 100 certificates)
*.dsoautomation.net
*.dev.eu-central-1.eks.dsoautomation.net
*.dsoautomation.net
enrich-legacy-dev.dsoautomation.net
*.dsoautomation.net
enrich-cms-docviz.bcg.com
*.dsoautomation.net
enrich-legacy-dev.dsoautomation.net
*.dsoautomation.net
dev2.newnavigator.bcg.com
pages-qa.navigator.bcg.com
pages-dev.navigator.bcg.com
*.kbi-dev.eu-central-1.eks.dsoautomation.net
enrich-jarvis.api.bcg.com
tams-dev.bcg.com
*.dsoautomation.net
pages.navigator.bcg.com
dev1.newnavigator.bcg.com
*.dsoautomation.net
jarvis.dsoautomation.net
kbi-video-streaming-stg.dsoautomation.net
qa.newnavigator.bcg.com
prodnew-tier1.bcg.com
enrich-cms-docviz-qa.bcg.com
*.dsoautomation.net
qa.navigator.bcg.com
devnew-chargetrack.bcg.com
*.dsoautomation.net
profiles2-dev.navigator.bcg.com
pages.navigator.bcg.com
pages-stg.navigator.bcg.com
enrich-cms-docviz-stg.bcg.com
*.dsoautomation.net
*.dsoautomation.net
enrich-cms-materials-qa.bcg.com
*.dsoautomation.net
*.dsoautomation.net
enrich-jenkins.bcg.com
*.dev.eu-central-1.eks.dsoautomation.net
profiles2-stg.navigator.bcg.com
enrich-cms-materials-dev.bcg.com
enrich-jarvis.api.bcg.com
devnew-chargetrack.bcg.com
api-protected.integration.dsoautomation.net
dev-pacontacts-navigator.bcg.com
*.prod.ap-southeast-1.eks.dsoautomation.net
*.dsoautomation.net
newnavigator.bcg.com
*.dsoautomation.net
enrich-cms-docviz-dev.bcg.com
enrich-legacy-dev.dsoautomation.net
*.dsoautomation.net
sinequa-test.dsoautomation.net
profiles.navigator.bcg.com
*.dsoautomation.net
newnavigator.bcg.com
pages.navigator.bcg.com
*.dsoautomation.net
profiles-stg.navigator.bcg.com
qanew-chargetrack.bcg.com
ktdashboard-dev.bcg.com
tams-qa.bcg.com
pipepack-dev.bcg.com
*.dsoautomation.net
pa-affiliation-dev.bcg.com
enrich-cms-materials.bcg.com
dev-pacontacts-navigator.bcg.com
*.dsoautomation.net
enrich-cms-materials-dev.bcg.com
sinequa-test.enrich.dsoautomation.net
*.dsoautomation.net
cfstools.bcg.com
*.dsoautomation.net
cfs-tools-stg.bcg.com
enrich.api.bcg.com
*.dsoautomation.net
cfs-tools-dev.bcg.com
cfs-tools-qa.bcg.com
*.dsoautomation.net
enrich-cms-materials-stg.bcg.com
enrich-cms-materials.bcg.com
enrich-cms-docviz.bcg.com
*.dsoautomation.net
enrich.api.bcg.com
*.eu-central-1.sitecore.internalstg.dsoautomation.net
stg.newnavigator.bcg.com
profiles2-qa.navigator.bcg.com
enrich-cms-materials.bcg.com
jarvis.dsoautomation.net
*.dsoautomation.net
dev5.newnavigator.bcg.com
pipepack-qa.bcg.com
testtemporary.dsoautomation.net
*.dsoautomation.net
profiles.navigator.bcg.com
newnavigator.bcg.com
*.eu-central-1.sitecore.internalstg.dsoautomation.net
enrich-cms-docviz-stg.bcg.com
enrich-cms-materials-stg.bcg.com
*.sitecore.dsoautomation.net

Certificate

The complete raw certificate details for *.dsoautomation.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzp2KZ7RfK4P8gHrewpSU
RfeTGCHlyuj1Gil+jpQWr21LpOyLjvW2jbzzPJ50K5Ikc9bnDxthzCCApm9MW6x5
TnDKArHk6CaxLlC28EkLxiv5KS6jH7dkD1gf7oEyxvTsDxELrZCzNbdhQ64sqrQv
ed12ypGBZ78dOf1i5cI3uFmxlO5olUMbcr/QrGvRVcTW8IIPZqJAUidJ/nx52kwj
cFadhT8DG5snY7oE4DiftE9gsGiil3f5Ab58Ea064NAV7qyxinXRrkGjz30zkzTD
zccNoiA3YI/+g8INOuSsSRqz1QU3fHFGT1kkTqTJvlFYuoKPA8LOfYWkR0BFCXju
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2879973152633829399285611280595909698
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.dsoautomation.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26082777010415212936574187099887384170649951260066706139936289050565951795839543735705321448234992802758094361754187412892378767116482381186682390126736646192145805675348334918927531488390935390717042416413816739856626997441665394217644134363562804903400029987902644000604177375923567654757584474914800622120333610438107785838443055196978895781163352735412029669119265272589751666820532717409233041551854485961474764680777989681281503345129645572376850718199115966279676462797019813448544100103604512732699135498168694295028788471605777530589753135868635502836955609849120685475468212053967468663932730713171920744149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b628accb2f43f072e63e314eb216eaecd0999b38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dsoautomation.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.tams.api.bcg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tams-qa.eu-central-1.eks.dsoautomation.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0069fb81e5b281b96e0a9e90a2aee28ebac615aee30c49085091bb85cf361ffefb12b4da972ee6ea417ac01833a93fab29f0599674ab939db30727985308a0b72e2bac95d779d9317302f26e3e354abf4cf18f803217a8e8fa149d14c1891316323d6b7efa9b23ba19a5fb0847cc706a457e3ad2fac00969aa4fae7a9f924f7b4351e058e0a434f69a7ea7f1a5cdb79d5884e6c433636092791573d6e3f163e11470b4b749535c4a38bffb2e050529c94870a945f940d7837b14476efa14fd670eac8c71af625dbe03688732e57e700470a01db1979b921186801b7729a2048d5bad9907f153427bd0b63c7017acb04d592c0356707de7ad7baa894e89d21e8022