*.nrz.de

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 02:b1:46:16:dd:50:b1:e6:22:85:ff:9f:c8:51:b2:c9 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.nrz.de

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:b1:46:16:dd:50:b1:e6:22:85:ff:9f:c8:51:b2:c9
Serial Number (int): 3578914115716068506995326169860125385
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 86:94:d3:40:f7:13:99:4e:fc:ac:31:8a:e0:c5:0e:ab:54:c3:f9:5e
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): f5:df:6b:9a:46:c1:d0:1c:3e:ba:9b:3c:30:ce:1d:d8:c2:ed:c4:b0
Fingerprint (sha256): 18:9c:aa:d1:cd:20:f5:d1:35:f1:d5:38:c1:dc:a2:f9:bc:70:e2:a8:e0:c0:9f:59:94:d0:dc:b7:15:06:3e:c8

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.nrz.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.nrz.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.nrz.de

Other certificates including the domain name nrz.de

(limited to 100 certificates)
www.derwesten.de
www.weltsport.net
origin-interaktiv.fnki.de
*.funkemedien.de
dev3.aws.funkedigital.de
www.weltsport.net
funkedigital.de
*.waz.de
reader.nrz.de
dev2.aws.funkedigital.de
www.weltsport.net
*.fabo-live.funkemedien.de
www.derwesten.de
*.waz.de
tv.morgenpost.de
www.weltfussball.de
*.nrz.de
www.weltsport.net
emag.nrz.de
www.weltsport.net
waz.de
reader.nrz.de
www.weltsport.net
www.weltsport.net
www.weltsport.net
www.derwesten.de
www.derwesten.de
www.weltsport.net
www.weltsport.net
www.weltsport.net
www.weltsport.net
www.weltsport.net
www.derwesten.de
www.weltsport.net
www.derwesten.de
angebote.derwesten.de
www.weltsport.net
dev1.aws.funkedigital.de
www.derwesten.de
jobs.nrz.de
www.derwesten.de
origin-interaktiv.fnki.de
www.weltsport.net
*.funkemedien.de
www.weltfussball.de
www.derwesten.de
www.weltsport.net
www.weltfussball.de
www.derwesten.de
*.waz.de
www.weltsport.net
www.derwesten.de
www.weltsport.net
*.waz.de
jobs.nrz.de
anzeigenbuchung-in-thueringen.de
www.weltsport.net
*.fabo-live.funkemedien.de
www.derwesten.de
*.funkemedien.de
*.waz.de
*.waz.de
dev2.aws.funkedigital.de
origin-interaktiv.fnki.de
uat.aws.bildderfrau.de
www.weltsport.net
*.funkemedien.de
funkedigital.de
uat.aws.bildderfrau.de
dev5.aws.funkedigital.de
www.weltfussball.de
dev2.aws.funkedigital.de
www.weltsport.net
*.waz.de
www.weltfussball.de
www.derwesten.de
uat.aws.bildderfrau.de
www.weltfussball.de
jobs.nrz.de
funkedigital.de
*.waz.de
*.geschenke38.de
www.weltsport.net
emag.nrz.de
*.waz.de
dev1.aws.funkedigital.de
emag.nrz.de
www.weltsport.net
www.weltsport.net
tv.morgenpost.de
www.derwesten.de
jobs.nrz.de
www.weltsport.net
www.weltsport.net
www.weltsport.net
www.weltsport.net
emag.nrz.de
reader.nrz.de
*.waz.de
angebote.derwesten.de

Certificate

The complete raw certificate details for *.nrz.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEd+cWU4ilMCxZ2YVqJY
RseBiwO3NqIP8bV/OQ6wZfitD12nibQ/Dl/yGB9PKYULRQimiqZ3onRAFqbquFEK
n4U3grZNzaeGARtRGd3L2FFwjrgH0cwpxZl4oKyS1jezeFLgyOO2cR7bZnAywahd
GjvQ+zLk11b6qhV+E/Chr8It+GinLiRVAuDQBBtgbvJt5d6rL5F9Ubuq8Sp57yjN
V21TyzyH9Z6+C1/e6DFJZ4fY20+NycHRcSy1agoRS9uaZCnhl3g81FIj837xEoZb
R45P5ezOs5czYeTrSHro9gc800UlwTerCgevlI1yfmeJV1K4R93bQfO/bHX/npZO
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3578914115716068506995326169860125385
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.nrz.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23768056298445095939978744316221553545493480379245443806245087079519688328550704798147871362471719034595373882153590761351315977925046697811756619282681516080730635640296017677919144883559369488676330268700017439372953265035721064252231981657390196455363028371894893394820325634755909879796761413093049715493946635862440805771881572985808006437545618790912108152196109178222553183636628723679218507924856476048195967046139006077441014811637563288524264544651768693679622351293596499542369416072022916958998115160473090178860164770869472011841635015095127782630372786914948654467155698186166091149940516030000836005449
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8694d340f713994efcac318ae0c50eab54c3f95e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nrz.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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