tagesanzeiger.ch

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 01:10:76:46:96:dd:13:54:b0:b7:1a:1b:45:1c:9e:4b was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=tagesanzeiger.ch

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:10:76:46:96:dd:13:54:b0:b7:1a:1b:45:1c:9e:4b
Serial Number (int): 1414703662516095377133897572304068171
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 2a:bd:39:e9:a1:3f:23:ed:ed:a3:c8:e5:87:86:b8:6b:ce:47:d8:7f
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): d8:d4:60:04:ac:b7:61:9c:10:f5:7d:58:9b:14:66:f1:c4:79:20:65
Fingerprint (sha256): 03:da:c0:fa:0f:91:9f:e9:41:db:42:40:96:7a:c1:a6:a5:09:e6:7d:80:23:e6:39:87:29:d3:b6:bb:9f:1d:3c

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate tagesanzeiger.ch

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tagesanzeiger.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tagesanzeiger.ch
dev-interaktiv.tagesanzeiger.ch
interaktiv.tagesanzeiger.ch

Other certificates including the domain name tagesanzeiger.ch

(limited to 100 certificates)
digitallight.tagesanzeiger.ch
blog.tagesanzeiger.ch
profitieren.tagesanzeiger.ch
dev-disco.tamedia.ch
webspecial.tagesanzeiger.ch
*.gateway-dev.tamedia.ch
dev-disco.tamedia.ch
tagesdeal.tagesanzeiger.ch
dev-disco.tamedia.ch
dev-disco.tamedia.ch
tagesanzeiger.ch
karten.tagesanzeiger.ch
i2.shared.global.fastly.net
bestellen.tagesanzeiger.ch
vielfalt.tagesanzeiger.ch
dev-disco.tamedia.ch
dev.tamedia.ch
lebeninzuerich.tagesanzeiger.ch
dein.tagesanzeiger.ch
lebeninzuerich.tagesanzeiger.ch
blog2.tagesanzeiger.ch
dev-disco.tamedia.ch
dev-disco.tamedia.ch
daskostetdiewelt.tagesanzeiger.ch
dev-disco.tamedia.ch
dev-disco.tamedia.ch
webspecial.tagesanzeiger.ch
dev-disco.tamedia.ch
webspecial-old.tagesanzeiger.ch
leoonline.tamedia.ch
xn--3fr2-1ra.tagesanzeiger.ch
unternehmen.tagesanzeiger.ch
agenda.tagesanzeiger.ch
blog.tagesanzeiger.ch
dev-disco.tamedia.ch
leidenschaft.tagesanzeiger.ch
summerta2018.tagesanzeiger.ch
dev-disco.tamedia.ch
zuerich.tagesanzeiger.ch
*.disco.tagesanzeiger.ch
i2.shared.global.fastly.net
5734616174428160-fe1.pantheonsite.io
essrechner.tagesanzeiger.ch
blog.tagesanzeiger.ch
epaperabo.tagesanzeiger.ch
dev-disco.tamedia.ch
dev-disco.tamedia.ch
5734616174428160-fe1.pantheonsite.io
dev-disco.tamedia.ch
dev-disco.tamedia.ch
dev-disco.tamedia.ch
auslanddigital.tagesanzeiger.ch
youthlab.tagesanzeiger.ch
*.gateway.tamedia.ch
epapertest.20minuten.ch
tda.tagesanzeiger.ch
vielfalt.tagesanzeiger.ch
digitallight.tagesanzeiger.ch
interaktiv.tagesanzeiger.ch
t.tamedia.click
blog2.tagesanzeiger.ch
blog.tagesanzeiger.ch
blackbeard.dev.tda.link
unternehmen.tagesanzeiger.ch
blog2.tagesanzeiger.ch
digital-lesen.tagesanzeiger.ch
webspecial.tagesanzeiger.ch
publishing.tamedia.ch
i2.shared.global.fastly.net
blog.tagesanzeiger.ch
dev-disco.tamedia.ch
sommer.tagesanzeiger.ch
students.tagesanzeiger.ch
blog.tagesanzeiger.ch
webspecial.tagesanzeiger.ch
publishing.tamedia.ch
vote-backend.tagesanzeiger.ch
dev-disco.tamedia.ch
survey.tagesanzeiger.ch
125jahre.tagesanzeiger.ch
events.tagesanzeiger.ch
promo.tagesanzeiger.ch
meintagi.tagesanzeiger.ch
dein.tagesanzeiger.ch
webspecial.tagesanzeiger.ch
webspecial-igr.tagesanzeiger.ch.arkham.enterprises
agenda2.tagesanzeiger.ch
epapertest.20minuten.ch
unternehmen.tagesanzeiger.ch
rec.tda.tagesanzeiger.ch
schenken.tagesanzeiger.ch
5734616174428160-fe1.pantheonsite.io
agenda.tagesanzeiger.ch
i2.shared.global.fastly.net
essrechner.tagesanzeiger.ch
students.tagesanzeiger.ch
blog.tagesanzeiger.ch
blackbeard.prod.tda.link
agenda.tagesanzeiger.ch
dev-disco.tamedia.ch

Certificate

The complete raw certificate details for tagesanzeiger.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJzaKenpsNTPeNdiSum/
J/klI0romwHYFPZayeTnI8T7LXtTn6/owK74tIXvFyyJzoDHAHHKt/uT1lEqo5eV
CFw0gsSP5mh4OcY7lMW8Jt9Wr59OHeypjz3yL9PZDCXwdD3sDqExetqVpAGBNhbx
/9nh3tnQjU8ObUqocll2IujXFCN17iPie1Pp26xnk0leGmn+CSqPZ8nKZxfGdcPq
7ZjISrM7g7PW/XV6aChToKk2ll8wNv7lV1tYZcl7D7sdcaQO9etHb52obax5SaX0
gfxf7K6vd4f5MLJI1DAhH295fqoXGlTxrjo1DiP1c35kF3qcbj029e1NzdJMB8zI
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1414703662516095377133897572304068171
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tagesanzeiger.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23305194817338065950411772227718352725530605986564361169337272752925615027076964761907476868399085706487993877638287564652555568126828412244729680089026871379353322347142171472468840671043352791534827251370628815638442254369238102015565193089845371839934211341804773155810626367027955115054266471605886115711530424853757740796333325151423339948660806176478656137683507723851209577612957995268782264440061856651436229462187633130274036747737124045428924583782509221371335245140279407041299773408375962168840160512618051594642579200075132827122296381588996766103195040039080869097599829978206698248398712656329744107559
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2abd39e9a13f23ededa3c8e58786b86bce47d87f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagesanzeiger.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev-interaktiv.tagesanzeiger.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interaktiv.tagesanzeiger.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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