images.idg.zone

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 04:78:aa:e1:c5:00:30:ed:61:7c:75:7a:01:26:d3:61 was issued on by Amazon.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=images.idg.zone

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:78:aa:e1:c5:00:30:ed:61:7c:75:7a:01:26:d3:61
Serial Number (int): 5943453503101807287786037817308009313
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 74:b2:7e:90:52:b5:75:5c:0a:47:81:b5:70:95:15:31:e8:7c:3f:fb
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): b8:6f:e9:e8:7a:ec:6b:9a:d5:58:3c:ed:30:8b:48:84:1c:89:e0:63
Fingerprint (sha256): 26:8c:24:a4:74:26:52:8c:cc:fb:9a:af:af:1e:65:2a:ec:cf:ad:86:0d:4f:94:0e:aa:8f:0c:b5:e2:09:3f:2d

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate images.idg.zone

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for images.idg.zone

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

images.idg.zone
images.channelpartner.de
images.pcwelt.de
images.computerwoche.de
images.cio.de
cf.image.onecms.idg.zone
images.tecchannel.de
images.macwelt.de

Other certificates including the domain name idg.zone

(limited to 100 certificates)
speedmeter.de
alb.cio-of-the-year.idg.zone
cio-des-jahres.de
alb.frontend.onecms.idg.zone
beta.idg.de
admin.best-in-cloud.de
se.cloud.idg.zone
alb.frontend.b2c-symfony.idg.zone
de.csoonline.com
cloud.idg.de
pcwelt-forum.de
pdf.idg.zone
tecchannel.de
nl.cloud.idg.zone
whitepaper.computerwoche.de
www.toolsmag.de
sustainabilitylifecycle.cio.com
techrps.idg.zone
alb.frontend.onecms.idg.zone
igs.cloud.idg.zone
central-it.de
a.1cms.io
events.cio.de
alb.whitepaperdb.idg.zone
cio-des-jahres.de
cio-of-the-year.com
hands-on-ai.de
addefend.idg.zone
idg.de
events.cio.de
igs.cloud.idg.zone
digital-leader-award.de
archiv.idg-executive-education.de
admin.best-in-cloud.de
archiv.idg-executive-education.de
qa.com.wp.idg.zone
cio-des-jahres.de
au.cloud.idg.zone
cloud.idg.de
mobil.pcwelt.de
1cms.io
igs.cloud.idg.zone
n.pcwelt.de
cloud.idg.de
alb.wpdb.idg.zone
alb.frontend.b2c-symfony.idg.zone
data-jack.idg.zone
*.beta.1cms.io
newsletterqualifizierung.idg.zone
stage.1cms.io
channel-excellence-awards.de
10jahre.cio.de
central-it.de
tecchannel.de
*.beta.1cms.io
a.1cms.io
api.pcwelt.de
dev.resources.computerworld.com
nl.cloud.idg.zone
systemhauskongress-chancen.de
idg-executive-education.de
relocator.idg.zone
amp.pcwelt.de
amazon.idg.de
relocator.idg.zone
cio-des-jahres.de
*.beta.1cms.io
rabbitmq-admin.onecms.idg.zone
adserver.idg.de
es.cloud.idg.zone
download.macwelt.de
download.pcwelt.de
beyond.idg.de
easycrm.idg.zone
tmp.idg.zone
macwelt.de
alb.frontend.b2c-symfony.idg.zone
channel-meets-cloud.de
archiv.idg-executive-education.de
events.cio.de
logicalis.computerwoche.de
connect.cloud.idg.zone
s.idg.de
mobil.pcwelt.de
computerwoche.de
alb.shop.idg.zone
us.cloud.idg.zone
syndication.contimate.idg.de
tecchannel.de
digital-leader-award.de
beta.cio-des-jahres.de
cio-of-the-year.com
techinsights.se
intextlinks.idg.zone
beyond-event.com
computerwoche.de
es.cloud.idg.zone
digital-leader-award.de
*.beta.1cms.io
se.cloud.idg.zone

Certificate

The complete raw certificate details for images.idg.zone in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Uo7yZ4KfC1MMlAAjhPC
rUFjJb6zI5uWblSZl7OZ09LT/wRu2cPPa73JXTvg2y9I+Bt/kYcKUdhBVCaTjf++
j6O/QzG0v2THiNwRysAjVlhRuEOfgJYvATkqslQbNLjyD465NBwpV93N6y64SczK
NUl+UTKTdbMfH21CwS7GvYQ9/log6HBlFeGw3opJ+2jceO55lawrS+xFCPL5KY5g
9+quK8ws1f7FI9Uyf4+Iy+aALaZEIhNwKpgm79Id3z+xcMZWoPBtw3Z7+KIzHp5U
Eft2bUK/YnByzJDdXbEGOjmkpQGlpn6FglA3nvq54BFsHDdqHDkkeapMu6SahyG/
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5943453503101807287786037817308009313
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'images.idg.zone'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27430318103087747439494369054287856217795265835500879261942801119134042550566830815468273229969690590698275777809198276482980429268483106196693630042505575873079157689271170858292164487003776282345344387465043264848173922179818245577262349012352224779442450900568470192361772502261099701399734142881116256226779965838850512724823332427385138591248883648495329949213977122735858897263978649322286949347862806712371941098950350663665865954904962353000698709663694019449126538122826851932692064857394413738325266768702920752520145404618992928124297125101442860999175967610488851162312770105423530901820673777954839445407
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							74b27e9052b5755c0a4781b570951531e87c3ffb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (171 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.idg.zone'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.channelpartner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.pcwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.computerwoche.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.cio.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cf.image.onecms.idg.zone'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.tecchannel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.macwelt.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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