*.sandbox-sp.efahrer.chip.de

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 04:03:cf:ec:03:87:60:0c:19:84:31:e9:cd:e8:6a:a0 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.sandbox-sp.efahrer.chip.de

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:03:cf:ec:03:87:60:0c:19:84:31:e9:cd:e8:6a:a0
Serial Number (int): 5336706031441690822156192830838041248
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 33:64:b8:3b:fa:f7:31:7b:18:f2:30:38:57:f9:c3:ba:f7:c8:58:da
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 83:68:06:f5:fb:30:c8:5b:47:c0:fe:9a:f4:d4:13:3b:78:9a:51:51
Fingerprint (sha256): 18:8d:02:6d:96:64:70:3b:7e:a5:d5:ee:65:4d:8b:95:a3:bc:eb:a6:b6:39:36:c2:60:cd:de:aa:c2:ae:06:e7

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate *.sandbox-sp.efahrer.chip.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sandbox-sp.efahrer.chip.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sandbox-sp.efahrer.chip.de
sandbox-sp.efahrer.chip.de

Other certificates including the domain name chip.de

(limited to 100 certificates)
ssl.1.damoh.chip.de
prd-log-elasticsearch-ber-46.int.chip.de
suche.chip.de
testcenter.chip.de
pub.chip.de
asus-t300-chi-testblog.chip.de
data-6314dfb442.chip.de
bfops.io
*.chip.de
www.tarife.chip.de
testcenter.chip.de
api.docker1.chdi-server.de
bfops.io
np-develop.gutscheine.chip.de
forum.chip.de
kzsicw.chip.de
behave.chip.de
ops-infra-prometheus-ber-12.int.chip.de
mms.burda-forward.de
data-45ccb8748c.chip.de
nokia-8-testblog.chip.de
api.docker1.chdi-server.de
api.docker1.chdi-server.de
consent.planetradio.co.uk
dl.cdn.chip.de
handy-software.chip.de
branded-stories.chip.de
asus-t300-chi-testblog.chip.de
dl.cdn.chip.de
prospekte.chip.de
branded-stories.chip.de
api.docker1.chdi-server.de
api.docker1.chdi-server.de
jobs.chip.de
info.chip.de
kuendigen.chip.de
branded-stories.chip.de
branded-stories.chip.de
tags.fitforfun.de
api.docker1.chdi-server.de
branded-stories.chip.de
stg-log-elasticsearch-fra-26.int.chip.de
*.chip.de
stage.contentlounge.net
*.stg.int.chip.de
damoh.chip.de
gutscheine.chip.de
digito.chip.de
branded-story.chip.de
gopro-max-testblog.chip.de
autodiscover.chip.de
api.docker1.chdi-server.de
ops-log-elasticsearch-fra-75.int.chip.de
huawei-p9-testblog.chip.de
data-c66a1ae096.chip.de
testcenter.chip.de
www.tarife.chip.de
testcenter.chip.de
ops-log-elasticsearch-ber-b6.int.chip.de
mms.chip.de
acer-switch-alpha-12-testblog.chip.de
fsm.chip.de
*.chip.de
ssl.1.damoh.chip.de
kzsicw.chip.de
*.chip.de
bfops.io
pub.chip.de
acer-aspire-5-testblog.chip.de
data-c66a1ae096.chip.de
suche.chip.de
nokia-8-testblog.chip.de
data-1818d50639.chip.de
rt.chip.de
prd-infra-haproxy-ber-7b.int.chip.de
api.docker1.chdi-server.de
s.burda-forward.com
cmp.bestcheck.de
acer-aspire-5-testblog.chip.de
tags.fitforfun.de
mms.chip.de
api.docker1.chdi-server.de
damoh.chip.de
*.chip.de
np-staging.gutscheine.chip.de
forum.chip.de
ssl.1.damoh.chip.de
ssl.1.damoh.chip.de
bfops.io
cmp.bestcheck.de
info.chip.de
testcenter.chip.de
branded-stories.chip.de
api.docker1.chdi-server.de
nokia-8-testblog.chip.de
promo.chip.de
*.chip.de
forum.chip.de
sparalarm.chip.de
lumeo.chip.de

Certificate

The complete raw certificate details for *.sandbox-sp.efahrer.chip.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApehyqteDOxeIvK5yxFDZ
KqTmuV68iHygaSArhfytHjEHi0m0Oe0CwWK4HL6ADfZqHi3QeIL1R7bnvVTeDbM6
M2ncmiUJa4q3I/l/EF+PAPPVBJQTeVm24oYrtLnFFrfl+mI7zUqzbGWPHcNZwHUh
LTmfjETdCPLEDi4b2AMQxWyM65BVNlDLYgpPNaE2pl4BuZvpiZUFVjK7d4uUYkvM
ERXbjaOPqJvIj0V3rlLlTOkwzljiv8dyQIl+l3N4v10oJEG3pAaFcFXLGjXbd0vJ
aXTsZjndAwvYtsy4PNc/N1VzL+3ZxIkhYuPu3j7IH3ChqjCoOJI53qhjDyojqfmx
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5336706031441690822156192830838041248
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sandbox-sp.efahrer.chip.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20943944660533774483422010253109480654311683629173935385346493551746034355466534571223612893608225967300652622851521323779752018756928079497533293153640715378997960807309731719511726005658553126762800121331351185602984354728204688969979242788938515983722826350652804941441862382398150470637509247558098236948316017952864187380181088385327604083789332635690833800231825214929464336514522790607469346813544322527630936689776421117050073625317718647157842060443107819911123893728207344626473975843770090690571399015077668491528281771164197252848288186430686279562396643675234247007421305876289156172512153572114605650363
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3364b83bfaf7317b18f2303857f9c3baf7c858da
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sandbox-sp.efahrer.chip.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox-sp.efahrer.chip.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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