infopark.de

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 08:d6:e1:6a:8d:f4:b2:05:8c:7c:d7:95:96:b7:70:ea was issued on by Amazon.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=infopark.de

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:d6:e1:6a:8d:f4:b2:05:8c:7c:d7:95:96:b7:70:ea
Serial Number (int): 11749547478285033201987654218012913898
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0a:ad:f5:49:26:cd:17:77:38:99:48:cd:fc:e7:2e:01:df:ed:7d:38
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 92:6e:a7:cf:1d:37:72:a9:b9:22:ba:5c:84:68:8a:46:cc:d4:a3:35
Fingerprint (sha256): 64:74:c0:eb:37:17:43:f0:8d:ee:52:42:55:e4:9c:a9:93:82:21:6d:13:44:dd:82:c4:84:99:ff:d3:87:0f:ed

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate infopark.de

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for infopark.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

infopark.de
iico.de
*.digital-relaunch.com
*.relaunch-konferenz.de
*.nps.info
*.nps.de
infopark.pl
*.infopark.net
nps.de
relaunch-konferenz.de
*.infopark.pl
relaunch-conference.com
digital-relaunch.de
digital-relaunch.com
*.infopark.com
*.iico.de
infopark.net
*.nps.eu
*.digital-relaunch.de
*.infopark.de
infopark.com
nps.eu
nps.info
*.relaunch-conference.com

Other certificates including the domain name infopark.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for infopark.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9xUsq8JmoeH/+mJnNaY3
yllCs3sRQ64pp79MhnKyKku1RsO1CXuII69MGt7B249LTsaAhp6ALJ8sPJmhdDpG
ytyTwii2QYj27p+XupYG9M7KyyETk6eAxAGq5Gocdvyuy39wLoOI7WrRaS0ZTISr
wkgFdeTXh0epUkgCujVBBTZRKf4p8LsYxM/sfokHZBzrTE/M8fQQv6NYnSvzLFIb
cYlglid1rOALKFAMgcswo+eJZJ9fMtkF/7ORS8CXoXUpc1orQwB0grCwrqsjFAa6
r+Wv8+EG9EnGgKpdLR7/YF/bM5s/bDktba4n4h08yKByZ+t52G59hTHVKqnRhoKM
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11749547478285033201987654218012913898
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'infopark.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31191302859676512739215224304210738136249457095118206540466267478877624692307380352557156351292394008276141460094718287901315187399701991698312969825628541158356890035540092495274585532770042302501184768763815195958847917069508615814437256779537970349073228747324031293171770016208117729579785911367716621592726922923426471071756121663088380503286842676604252296795306627933413313909018877802241842342409681016609685113440667314142826058698613100399027202795155935165484843375452317822953859288272214597593503121496061848065833008197526997004683938845389043304311795917935465459765771959809508943127374261500401323109
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0aadf54926cd1777389948cdfce72e01dfed7d38
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (388 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infopark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iico.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digital-relaunch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.relaunch-konferenz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nps.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nps.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infopark.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infopark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nps.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relaunch-konferenz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infopark.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relaunch-conference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital-relaunch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital-relaunch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infopark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iico.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infopark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nps.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digital-relaunch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infopark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infopark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nps.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nps.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.relaunch-conference.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0052b1016aaf0cac77336a67f370fc54cdba13d01654944555369e5aefa4755d70320c9f39636efb88b48d4af9c8ccae35da030f58e244e313e73c1546f41f175bf26d3938d654b0917c643b05653c2c1110efaed5dcb68bccafe9f6500350f566eedc9c4e693ba078bdbe27b1f211f8f0ac9591e2a9d83310200d98712040567a69ade28b96dbab28565dcabfeb9cc097494bb2af306f9459052ab5bce1ff42071d79a7be4d6e288f112b3eee350c316350d41d5c9371c849d0068ba3d63d63bd4a7fa80acaa9f32c10beb06b15b4bab530ff2f21ca881beea08610d365e8e610282528ab2b90e8e085021b50a580b980138db4eb0562f2b7724307810df58b9e