bmw-stuttgart-rundgang.dealermaster-de.bmw

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0d:56:e7:e5:9e:8b:c3:4d:30:da:c4:78:0c:c3:c6:d6 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bmw-stuttgart-rundgang.dealermaster-de.bmw

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:56:e7:e5:9e:8b:c3:4d:30:da:c4:78:0c:c3:c6:d6
Serial Number (int): 17731204903973155352287104853453555414
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 9b:c7:22:f3:1e:e0:e1:24:c8:b3:f5:5f:7f:b9:6a:e3:02:2b:6a:62
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 12:d0:40:db:04:29:e0:76:21:62:b0:65:88:f9:03:77:5b:31:28:a1
Fingerprint (sha256): f7:66:02:23:d4:ad:d5:e4:95:ac:4c:8a:b5:36:a5:83:10:b4:94:dd:66:70:77:d1:b1:17:f5:bf:c8:0e:49:19

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate bmw-stuttgart-rundgang.dealermaster-de.bmw

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bmw-stuttgart-rundgang.dealermaster-de.bmw

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bmw-stuttgart-rundgang.dealermaster-de.bmw

Other certificates including the domain name dealermaster-de.bmw

(limited to 100 certificates)
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
formulare.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
mini-retail-ebooks.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
bmw-retail-ebooks.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
alb-dev.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
cosy-configurator.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
cosy-configurator.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
bmw-muenchen-motorrad-rundgang.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
mini-stuttgart-rundgang.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
bmw-motorrad-vorteilsrechner.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
integration.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
alb-prod.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
bmw-stuttgart-rundgang.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw

Certificate

The complete raw certificate details for bmw-stuttgart-rundgang.dealermaster-de.bmw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsm776+pOKdSzeTPmHxTj
Ew08h2JCl+VvuVpK6DW6LoFmC/aw7wBnpJcfKYU0MWOTObNBzcLaPW9AB+vDGKmf
RdxHZ+2bKv+TLPe6fMf3JBLOuOfbQGAjEjnTSo5vyv/h8CDOq1bd/cryg8AP7ZDf
7lpg+8+Sj0aaXLmg7cftwPuYwxyu+2/K1RFkKRZjFDm3wemGu89pATF+FPNYFcde
Sa71bRpvUkFC6Tqxo8BU2Ij9+syXsILYfBKNnFLPBEBUmBp5DF4WG6/JaTkcSB8n
Oj8t/RP9d+79tHzPz8VeyTRqfjt2HkTAWOMwIsoYzQ5a4kh0hoUZL/jf2jMaNZkt
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17731204903973155352287104853453555414
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bmw-stuttgart-rundgang.dealermaster-de.bmw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22525146567902203887509599090101002921044127555786048464231749916023679368572854918046024318146180937272247964891625514340300434047420118544323619888243724566453900189534274845438900205116335371047156645678123660922927286088745893291116412309192642705253638797345311748785966986595350401793186472588768489756247979971506070316489225565190421504939357578623216226933368809545490003018890678278027286316529791918772549924332179738868845823188952047454106867050002062149199904672577197483055351429583982509969713035964477264779871003385330588292488586303173280098328246653306203154194290924910457733510586456396191575451
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9bc722f31ee0e124c8b3f55f7fb96ae3022b6a62
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-stuttgart-rundgang.dealermaster-de.bmw'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005faa575d05f03b16039d0c6d328fc00a7560d318e050b7f45b5fd76a88d7ae4c174ce6ae900453347e617a8b7af2150dd5de160820b28f29e0c9bd5b4536d3a56cbc6a4a01d643b2c86bec2e992f078ec3d7ca04dc7f8d63eb6117e7a3c53972154a847d85798fc23f7db27f291465a556e9f414d85277c13ca2402f1450024fcb5fe86f72113b73593790f1367d2bac46a2fb02811a7a550076553ac705acc7de5d905308abc67b2928aa215632381290b0d29e5d6ba1de241641166850ffd7b3dd653991f51f08a3e32f83cc43a55966196506cfd31d2dfb55b81f6d466f2db81fe970b6cc30e7d1c0d011f5c0107be3daafc89b8c90b52bcc6f4a9bd21407