*.prod.ps.axelspringer.de

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0a:2a:9a:20:0d:68:d4:12:1d:de:14:29:f5:5d:74:8f was issued on by Amazon.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.prod.ps.axelspringer.de

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:2a:9a:20:0d:68:d4:12:1d:de:14:29:f5:5d:74:8f
Serial Number (int): 13513482456437819191945791180256408719
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 4c:ae:ef:ba:34:31:12:1c:8e:58:bb:e3:6f:2a:df:52:23:b5:d3:2a
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 70:55:e3:11:ff:02:a1:48:09:96:2e:26:48:1d:41:20:23:fa:ba:87
Fingerprint (sha256): 79:69:dd:74:69:3f:98:e0:8c:8e:00:10:c9:82:03:0a:51:ed:23:fe:f2:74:a5:01:81:62:9e:25:d3:69:ca:a2

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.prod.ps.axelspringer.de

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.prod.ps.axelspringer.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.prod.ps.axelspringer.de
*.prod.auth.mypass.de
*.welt.de
*.prod.auth.autobild.de
*.uat.ps.welt.de
*.uat.auth.axelspringer.de
*.prod.auth.axelspringer.de
*.uat.auth.mypass.de
*.uat.auth.computerbild.de
*.prod.ps.bild.de
*.prod.auth.computerbild.de
*.bild.de
*.uat.ps.spring-media.de
*.uat.ps.bild.de
*.uat.auth.sportbild.de
*.uat.auth.autobild.de
*.prod.auth.sportbild.de
*.prod.ps.mypass.de
meinkonto.axelspringer.de
*.prod.ps.spring-media.de
*.uat.ps.axelspringer.de
*.mypass.de
*.uat.ps.mypass.de
*.prod.ps.welt.de

Other certificates including the domain name axelspringer.de

(limited to 100 certificates)
mypersonal.axelspringer.de
*.axelspringer.de
*.prod.ps.axelspringer.de
el-shop.welt.de
career.axelspringer.de
ideationcouncil.axelspringer.de
*.prod.ps.bild.de
axelspringer.de
klick.regionalvermarktung.axelspringer.de
*.prod.ps.axelspringer.de
marketplace.axelspringer.de
nachhaltigkeit.axelspringer.de
go.axelspringer.de
go.axelspringer.de
efa.axelspringer.de
axelspringer.de
www.axelspringer.de
*.prod.ps.axelspringer.de
mail.oculus.axelspringer.de
*.prod.ps.axelspringer.de
nachhaltigkeit.axelspringer.de
axelspringer.de
fs.axelspringer.de
contracttool.axelspringer.de
www.axelspringer.de
lyncdiscover.axelspringer.de
*.prod.ps.axelspringer.de
www.axelspringer.de
regio360.axelspringer.de
*.services-test.ps.spring-media.de
axelspringer.de
earlybird.axelspringer.de
*.prod.ps.axelspringer.de
www.ideationcouncil.axelspringer.de
somaetbws.axelspringer.de
karriere.axelspringer.de
remote.axelspringer.de
contracttool.axelspringer.de
*.prod.ps.bild.de
klick.regionalvermarktung.axelspringer.de
axelspringer.de
*.api.ps.bild.de
go.axelspringer.de
rich-media.axelspringer.de
digas-review.axelspringer.de
axelspringer.de
axelspringer.de
axelspringer.de
*.services.ps.axelspringer.de
motiveingang.axelspringer.de
teams.axelspringer.de
campus.axelspringer.de
axelspringer.de
regio360.axelspringer.de
www.axelspringer.de
axelspringer.de
link.abonnement.axelspringer.de
*.axelspringer.de
motiveingang.axelspringer.de
career.axelspringer.de
mib2.axelspringer.de
mypersonal.axelspringer.de
transfer.axelspringer.de
marketplace.axelspringer.de
*.auth.axelspringer.de
*.prod.ps.bild.de
go.axelspringer.de
nachhaltigkeit.axelspringer.de
ascs-ww.axelspringer.de
regio.axelspringer.de
upload.zs.axelspringer.de
secure.axelspringer.de
sirius.regionalvermarktung.axelspringer.de
ideationcouncil.axelspringer.de
marketplace.axelspringer.de
*.services-test.ps.spring-media.de
axelspringer.de
somaetbws.axelspringer.de
*.services.ps.bild.de
*.axelspringer.de
motiveingang.axelspringer.de
aboservice.audiovideofotobild.de
*.axelspringer.de
kundenservice.auth.axelspringer.de
mediaportal.axelspringer.de
teams.axelspringer.de
gutscheine.axelspringer.de
aboservice.audiovideofotobild.de
axelspringer.de
*.prod.ps.axelspringer.de
go.axelspringer.de
*.prod.ps.spring-media.de
miu5.axelspringer.de
teams.axelspringer.de
*.services.ps.bild.de
axelspringer.de
*.prod.ps.axelspringer.de
axelspringer.de
regio360.axelspringer.de
www.axelspringer.de

Certificate

The complete raw certificate details for *.prod.ps.axelspringer.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4cA5vetQgSwMMmKqa3h
piVDyfOyWKDyqjVx93JwrT05IykQ768zMV899e19pS8Wht/jn2jMvD/5s8AMn13q
kbusAdkz6YZm5R6YO5kyeQc0Wyyfdw3eboETw9GEgjKOzE9DVZrvqe5oqd7VH9yd
eUG3vcusNt+W+X2/DhHzewex7rxg6djLThDy07D1cUtXS1pfl5cBFd/IS7zMFf2a
Rd80H5K2CUH03BmT0V4lMGPdonXnKFUd6JFLwmZz1nAUnAHR9u0/tKO4c39DBs0v
85LT0og2IhIkf4mvfT1uCZ6ufNo8knTT/p+WWYYJTJjKb/LE86WjuYGoYA400Ksl
WQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13513482456437819191945791180256408719
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.prod.ps.axelspringer.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20138463208627062845461037931754120856295094213077680698839681190516011070779833963642186267704210771757532443831436591592549419240370475613234679574462567643005265145690342245158885782709476584982009823470556207039611859959742165528232803185819998796519552290278352733582961582101533377837045103495261302612048070221628416958929436357552482622304568861017453829177993423565134416505063338473770221632459950262963809747173199605846944495598451854721152192380257607481818611709849876976605627239696614294497592367418264379759266500871047243261515918219531826534196484171291997019710003870168136696528721915613817808217
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4caeefba3431121c8e58bbe36f2adf5223b5d32a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (546 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.ps.axelspringer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.auth.mypass.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.welt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.auth.autobild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.ps.welt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.auth.axelspringer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.auth.axelspringer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.auth.mypass.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.auth.computerbild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.ps.bild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.auth.computerbild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.ps.spring-media.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.ps.bild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.auth.sportbild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.auth.autobild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.auth.sportbild.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.ps.mypass.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meinkonto.axelspringer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.ps.spring-media.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.ps.axelspringer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mypass.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uat.ps.mypass.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.ps.welt.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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