shopping.fitforfun.de

Issued by Amazon

About this certificate

This digital certificate with serial number 08:72:71:45:c8:a1:cc:9e:11:4e:b4:0a:a0:c9:b4:0b was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=shopping.fitforfun.de

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:72:71:45:c8:a1:cc:9e:11:4e:b4:0a:a0:c9:b4:0b
Serial Number (int): 11228043249273328755702303258086847499
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a0:5d:36:5c:5e:1e:08:84:f6:47:7d:eb:c9:b0:92:11:5a:4d:09:c0
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): ea:97:db:59:16:f6:34:97:31:ab:5c:b4:bd:e2:37:03:25:1c:f9:9e
Fingerprint (sha256): 2c:0d:9a:0f:06:5d:d1:ed:da:54:ca:1f:86:35:e0:7c:43:c7:1e:bc:f2:e2:06:2b:75:f2:57:83:b3:fd:18:81

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate shopping.fitforfun.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shopping.fitforfun.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shopping.fitforfun.de

Other certificates including the domain name fitforfun.de

(limited to 100 certificates)
branded-stories.fitforfun.de
x.bunte.de
community.fitforfun.de
bf-tools.net
bf-tools.net
mms.burda-forward.de
promo.fitforfun.de
consent.planetradio.co.uk
shopping.fitforfun.de
*.fitforfun.de
kzsicw.fitforfun.de
bf-tools.net
tags.fitforfun.de
bf-tools.net
bf-tools.net
ssl.1.damoh.fitforfun.de
bf-tools.net
branded-stories.fitforfun.de
branded-story.fitforfun.de
*.sandbox-sp.fitforfun.de
cmp.bestcheck.de
tags.fitforfun.de
community.fitforfun.de
data-f06c8efc81.fitforfun.de
branded-story.fitforfun.de
cmp.bestcheck.de
shop.fitforfun.de
bf-tools.net
mms.burda-forward.de
cmp.bestcheck.de
cmp.bestcheck.de
damoh.fitforfun.de
*.sp.fitforfun.de
mms.chip.de
bf-tools.net
bf-tools.net
bf-tools.net
bf-tools.net
mms.chip.de
a.tfag.de
ssl.1.damoh.fitforfun.de
ssl.1.damoh.fitforfun.de
cmp.bestcheck.de
cmp.bestcheck.de
cmp.bestcheck.de
kzsicw.fitforfun.de
mms.chip.de
*.fitforfun.de
tags.fitforfun.de
tags.fitforfun.de
tags.fitforfun.de
cmp.bestcheck.de
cmp.bestcheck.de
kzsicw.fitforfun.de
data-f06c8efc81.fitforfun.de
bf-tools.net
cmp.bestcheck.de
cmp.bestcheck.de
*.fitforfun.de
ssl.1.damoh.fitforfun.de
cmp.bestcheck.de
bf-tools.net
shopping.fitforfun.de
shopping.fitforfun.de
community.fitforfun.de
mms.burda-forward.de
mms.burda-forward.de
ssl.1.damoh.fitforfun.de
branded-stories.fitforfun.de
cmp.bestcheck.de
bf-tools.net
branded-story.fitforfun.de
branded-stories.fitforfun.de
z.fitforfun.de
bf-tools.net
*.sp.fitforfun.de
shopping.fitforfun.de
mms.burda-forward.de
x.bunte.de
branded-stories.fitforfun.de
rt.fitforfun.de
bf-tools.net
bf-tools.net
bf-tools.net
cmp.bestcheck.de
cmp.bestcheck.de
bf-tools.net
blackfriday.fitforfun.de
blackfriday.fitforfun.de
mms.burda-forward.de
a.tfag.de
cmp.bestcheck.de
ivwbox.fitforfun.de
mms.burda-forward.de
bf-tools.net
cmp.bestcheck.de
kzsicw.fitforfun.de
a.tfag.de
a.tfag.de
data-ba3ff52f53.fitforfun.de

Certificate

The complete raw certificate details for shopping.fitforfun.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjw3YJfZ+R6ixC6z6cCoM
zHKQ9tlY5W7Eg/ufWokOXuM7Mmqr3Afm2VoRz/s/xsc9FAFBL+u8TpsYPpYE0Qc6
Srt6qF2MMdHwL7xx5HUmjKco7vR+lgPCG+z2BoC3Cl+mfUYwh2nNjWzSYb/yrKZ7
c0ArkfWNT15uGIgToVOtEWo0Y1xT3mvBNhaylNeK90CixWIpDV6iTCjlXP0XPYXx
W2p8m8Qf7f8ApRHSpeoBp/2w/0jd/qELkCWDeZcIDTNAgW73ve4bW+9jNUwKF3Wj
N5I/D9a3gRj7VCdwtC+TZMkzXF2SxxRjjYkHYkvSGSsA8XY8rIbj2enGnHY2gGXw
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11228043249273328755702303258086847499
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shopping.fitforfun.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18058904503349902389764609242645341944862863172049678328223573855611048960584146524633340298901902851009378130028100908175327184058691639414821678649646544790931086197754400356871150478588283459028316521661631261546535196512890993196956553805372339299235810056668327561145583904719773912895218819078830390875844089841911976201037486167413921258653268046171347748154474258736043072275948377804217453411023058741803084699255717905460692112589670187820203879026035114392682842949978165221884980270651189602072225563167182456537318173146545585878127135879876428832447360056331868062699661794829358588846192959278689939659
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a05d365c5e1e0884f6477debc9b092115a4d09c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.fitforfun.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							01690077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017b9b773c4b00000403004830460221008253e9abca6f7bfdd5ca1803dec9aff5449f8c662fa274a9f096d5e106683399022100980cfb5b6b14dcd9fe5200c3bd5960214a7ab034f394a7ea230ad0974721290100750051a3b0f5fd01799c566db837788f0ca47acc1b27cbf79e88429a0dfed48b05e50000017b9b773cb20000040300463044022057077da5af68276e29696afc4094d54d5e888284a44f755c7f79d8fe7fc4507e022040ce4bfba8ce4c202b71509da419fdbe8c5b0793c487c1463da32946419dd4df00770041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017b9b773c890000040300483046022100f5e11d93fb30f6eb413a51f324f75b688c857a33a763163411c4f90b5f65a976022100e18d3ff3229ea3e0e77c35b6e4d1c3e18077671f2d310f006d17011bce952870
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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