*.otz.de

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 09:33:c4:61:5e:82:31:b7:01:d1:34:e0:59:d5:6f:99 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.otz.de

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:33:c4:61:5e:82:31:b7:01:d1:34:e0:59:d5:6f:99
Serial Number (int): 12231842168512584727832267446988140441
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b1:27:a9:8d:7b:2a:e9:a7:43:4c:a4:50:5c:40:77:8e:42:75:01:12
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): cc:35:05:33:ff:9e:49:ae:c2:3d:88:d3:b7:b5:d8:f1:fd:33:dd:f6
Fingerprint (sha256): 41:26:ff:c0:59:e3:94:95:3a:1c:cd:f4:ea:d2:2f:70:6c:35:f6:59:3d:1a:c1:76:52:ca:1f:74:b6:47:00:1a

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate *.otz.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.otz.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.otz.de

Other certificates including the domain name otz.de

(limited to 100 certificates)
sso.zgt.de
*.otz.de
origin-interaktiv.fnki.de
reader.otz.de
trauer.otz.de
www.funkedigital.de
trauer.otz.de
*.funkemedien.de
sso.zgt.de
dev3.aws.funkedigital.de
www.funkedigital.de
funkedigital.de
trauer.otz.de
anzeigen.thueringer-allgemeine.de
dev2.aws.funkedigital.de
*.fabo-live.funkemedien.de
voting.thueringer-allgemeine.de
anzeigen.thueringer-allgemeine.de
www.funkedigital.de
waz.de
trauer.otz.de
www.funkedigital.de
emag.otz.de
trauer.otz.de
trauer.otz.de
www.funkedigital.de
sso.funkemedien.de
dev1.aws.funkedigital.de
*.thueringer-allgemeine.de
reader.otz.de
otz.de
origin-interaktiv.fnki.de
*.funkemedien.de
www.funkedigital.de
www.funkedigital.de
www.funkedigital.de
www.funkedigital.de
*.otz.de
www.funkedigital.de
trauer.otz.de
*.waz.de
anzeigen.funkemedien.de
sso.zgt.de
sso.zgt.de
anzeigenbuchung-in-thueringen.de
www.funkedigital.de
*.fabo-live.funkemedien.de
*.funkemedien.de
www.funkedigital.de
anzeigen.thueringer-allgemeine.de
dev2.aws.funkedigital.de
origin-interaktiv.fnki.de
uat.aws.bildderfrau.de
*.funkemedien.de
emag.otz.de
*.thueringer-allgemeine.de
funkedigital.de
uat.aws.bildderfrau.de
dev5.aws.funkedigital.de
trauer.otz.de
dev2.aws.funkedigital.de
*.waz.de
reader.otz.de
img.otz.de
uat.aws.bildderfrau.de
www.funkedigital.de
funkedigital.de
www.funkedigital.de
sso.zgt.de
interaktiv.derwesten.de
anzeigen.meinanzeiger.de
www.funkedigital.de
www.funkedigital.de
www.funkedigital.de
dev1.aws.funkedigital.de
anzeigen.thueringer-allgemeine.de
www.funkedigital.de
www.funkedigital.de
www.funkedigital.de
trauer.otz.de
*.otz.de
trauer.otz.de
www.funkedigital.de
www.funkedigital.de
anzeigen.funkemedien.de
anzeigen.otz.de
www.funkedigital.de
img.otz.de
sso.zgt.de
trauer.otz.de
emag.otz.de
*.fabo-live.funkemedien.de
*.funkemedien.de
funkedigital.de
funkedigital.de
*.waz.de
funkedigital.de
anmeldung.otz.de
funkedigital.de
*.waz.de

Certificate

The complete raw certificate details for *.otz.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrklUusj3r5+3XevhGgi
oXmIoaY9uW7qfvpkSE7dlVqDPc0kn+QqH7foXqzXp+BteP1RoaPjs+y42NdAkddd
sPYNgIGLeKJDWwQ9iOECrI4e+1C+f+ADbq7Dc8Khtw5cnNVnrQeWI9/qNkoKD98b
gpta8O81mETZ0q0AHQoGPTGPq7Ihb4O/+LugzloPA0qynUXy+REL4OqdtJ+H6/x1
EFQVxe1XNtvz0TFNd6TUR4F7gJ5v0TLv+oSTdjmkD0IA3TaJwOySS3L0FgwnE6hC
qtmxSS0CvmUUjLUDrIyx8qEXH3C9yQ/OVmly2FO3bFQnZMebumybWNTWYmfZGzz+
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12231842168512584727832267446988140441
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.otz.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25086483178279614873320630356246656860040604347278871507445237393755150154240750756770301741161646648724576319386567829378921925303175913627322356703420359465980094527947270730855679455063882441092250197303146565360049584330235857453105001320957129219584223241797582902668845519058843183974726931636116168526405995686727274936764304178832189843558758940031320926842822240690927680621901774560935149146537112592571499239765069669199639667440626953808014509819994392580630216987095241203710194466967651015927743149998136897370010791218958742996929760997601681600344045202984079845702624751820431429843996387950697709311
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b127a98d7b2ae9a7434ca4505c40778e42750112
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.otz.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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