cosanum.ch

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0f:35:4b:f1:07:b1:f5:2c:3f:d9:6b:e3:9e:12:4e:4c was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cosanum.ch

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:35:4b:f1:07:b1:f5:2c:3f:d9:6b:e3:9e:12:4e:4c
Serial Number (int): 20215151947365056505723452568575823436
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 96:e1:86:e0:02:76:9c:2f:e3:1e:a2:be:82:99:61:cb:76:10:ef:09
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 47:84:2e:40:1f:df:56:8b:19:51:78:72:91:62:f8:bd:c8:e9:d9:a3
Fingerprint (sha256): 13:6e:61:a5:c2:8d:aa:95:38:ed:14:a9:9a:a9:98:3c:fb:76:fc:25:f9:7f:55:e8:3e:42:c2:f2:e5:1a:93:0c

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate cosanum.ch

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cosanum.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cosanum.ch
www.cosanum.ch
shop.cosanum.ch

Other certificates including the domain name cosanum.ch

(limited to 100 certificates)
ifasinnovation.cosanum.ch
cosanum.ch
webmail.cosanum.ch
cdn.cosanum.ch
*.cosanum.ch
ortho.cosanum.ch
ifasinnovation.cosanum.ch
cosanum.ch
*.cosanum.ch
webmail.cosanum.ch
cosanum.ch
webmail.cosanum.ch
*.cosanum.ch
*.cosanum.ch
webmail.cosanum.ch
*.cosanum.ch
coosa.cosanum.ch
*.cosanum.ch

Certificate

The complete raw certificate details for cosanum.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtECwKS2N6RbvVtZS95tH
aKXfgNI8VVYFPbs4SjoEPPxmtyFITBQcuoAYub+5ENBMaMkSTa2N+DVbfErv9f6a
YXFeBg/AZHqYC+PpNYdE6r3AI6yjPmkNePg8dfOoWmjTZ362qjGBpUuqOikDt/vD
nNYo8w1fI2qcjgYLNVivM12kb4yGgwt/nshkdjiHRIYrl8ri8TVGwFClyzb//sA5
5j3wquRWnE9ItgsBkg8JdGhbXD6nfJixwYROwdaz3TVnDZ6uvOOiDBeOtcAtIWJg
ESEzof8z7ozxUBJ4LcY2ZJ5fEWpGva1eOPaMd4OPbOnk0eAwEG4KOTKLFimGrvWp
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20215151947365056505723452568575823436
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cosanum.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22754793798856375607891881603247728338277266845657029144825732096050016197306341785984504464665671361451313632746007296057682280817851060228938797493213316048346966024902635229321389289246386532733083381093453189545340861761738851870595308171816228713238466009284936219007979495165114949389074833529035705257309545549891970201282337873645245844764907603345037625715846826525116072708918392091077903831669843912714141684923680107022233792132433088865906960922261272478315042665460540263743625781390659160123772926708338351434554545571889134639764482750656921396457510526744829399000798148563031123928903270123351419337
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							96e186e002769c2fe31ea2be829961cb7610ef09
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosanum.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cosanum.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.cosanum.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a441cdd5a5eaa8926624ecdd85dc718acde68bc85b5ad7de371795f45bb9b2221e22fe700f821d1ee2a9f91e87ee11b0d2aa2b64ff08b02fa05b5ec31bed732b255502703e80dd16437e445c44b8fc188b8cce8c21ac3ceaea5b514e17172b7da57b316008121948628a1ca372e807f1b1539634d6a89f164208f9eb3e748b326dcff58ca33218ef7457bc1b66869f00990931f342fc857e9d62fbeacad454f203846e0eb9a9ddeba7e64f7c68500c9426c651e55153e2c03b32c873a419f0232849f6fbf370a590cb869ab2d9f493ecccce04a92939b47e5fba74447916fb8952deb6515d026b7374e178f53c53e120d11714091560d3c97fcc7fbec6afe293