swisspost.api.modum.io

Issued by Amazon

About this certificate

This digital certificate with serial number 0f:9e:2e:d7:b5:e6:4b:68:00:fa:b4:48:fa:ed:b9:0e was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=swisspost.api.modum.io

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:9e:2e:d7:b5:e6:4b:68:00:fa:b4:48:fa:ed:b9:0e
Serial Number (int): 20759752921614145214729996518000802062
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 79:b2:14:3c:24:28:c9:b2:89:0b:f2:fd:39:62:9b:bc:5a:11:c8:8f
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): a6:25:ea:f1:e1:a7:7c:9f:23:6d:80:35:07:d7:63:23:0d:e0:9b:ab
Fingerprint (sha256): 89:af:4d:7a:cb:c1:7c:d4:3b:b8:87:b5:5a:80:de:ae:05:09:b8:8b:5d:b1:87:6c:66:48:7d:d8:81:2f:d8:4c

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate swisspost.api.modum.io

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for swisspost.api.modum.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

swisspost.api.modum.io

Other certificates including the domain name modum.io

(limited to 100 certificates)
voting.modum.io
dashboard.dev.modum.io
internal.modum.io
api.demo.modum.io
modum.io
app-versioncheck.modum.io
dashboard.trial.modum.io
dashboard.prod.modum.io
dashboard.sta.modum.io
dashboard.modum.io
app-versioncheck.trial.modum.io
dashboard.trial.modum.io
nfc-mapping.dev.modum.io
app.dev.tokenswap.modum.io
modum.io
*.modum.io
app.dev.tokenswap.modum.io
support.briscoes.co.nz
voting.modum.io
support.briscoes.co.nz
app-versioncheck.dev.modum.io
nfc-mapping.modum.io
api.demo.modum.io
modum.io
app.stage.tokenswap.modum.io
provisioning.dev.modum.io
modum.io
modum.io
core.modum.io
nfc-mapping.dev.modum.io
modum.io
dashboard.prod.modum.io
provisioning.dev.modum.io
api.demo.modum.io
api.sta.modum.io
app-versioncheck.dev.modum.io
api.sta.modum.io
*.prod.modum.io
swisspost.api.modum.io
support.briscoes.co.nz
dashboard.modsight.modum.io
api.prod.modum.io
support.briscoes.co.nz
support.briscoes.co.nz
provisioning.modum.io
api.prod.modum.io
dashboard.demo.modum.io
app.dev.tokenswap.modum.io
*.modum.io
jira.modum.io
support.briscoes.co.nz
provisioning.modum.io
dashboard.sta.modum.io
proofx-backend.dev.modum.io
nfc-mapping.dev.modum.io
provisioning.modum.io
api.prod.modum.io
dashboard.modsight.modum.io
provisioningdev.modum.io
shop.modum.io
modum.io
igr.modum.io
dashboard.modum.io
*.modum.io
fdus-54.freshdesk.com
staging.dashboard.modum.io
support.briscoes.co.nz
api.modum.io
igr.modum.io
e2e.modum.io
*.sta.modum.io
core.modum.io
*.playground.modum.io
provisioning.sta.modum.io
*.modum.io
*.modum.io
*.sta.modum.io
support.briscoes.co.nz
nfc-mapping.dev.modum.io
api.prod.modum.io
shitservice.dev.modum.io
dashboard.dev.modum.io
voting.modum.io
*.modum.io
nfc-mapping.dev.modum.io
dashboard.demo.modum.io
api.sta.modum.io
dashboard.modum.io
proofx.dev.modum.io
api.modum.io
support.briscoes.co.nz
dashboard.demo.modum.io
swisspost.api.modum.io
modum.io
api.dev.modum.io
provisioning.prod.modum.io
modum.io
app.dev.tokenswap.modum.io
dashboard.sta.modum.io
swisspost.api.modum.io

Certificate

The complete raw certificate details for swisspost.api.modum.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEgjCCA2qgAwIBAgIQD54u17XmS2gA+rRI+u25DjANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDAzMDYwMDAwMDBaFw0yMTA0MDYx
MjAwMDBaMCExHzAdBgNVBAMTFnN3aXNzcG9zdC5hcGkubW9kdW0uaW8wggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEAG7VTnTHxBAJd6+jaYihja3IOYTJ
pNclH9TPsIu1pMcDCADwJtJdo+laoWTM35DwVqelU+AQjb1FpUZyLv2VdC3juGjs
CuMCJJ1HEIWCoV7pmtloGTKSmbim7VG/Zm5gtyP+x/7mTTS+N1Mjqpic/cBx1Uga
RyvhOf+lKQo2uDUqUV4rpLiqiQHF2NZH/vdVkK6V+aJi7PnqOegZjn3RmMJ7e2fz
L6HWcoCv3QMjoL6BvZJmnsorV/HGqAvLH3fspgx4W+e9zoWo+9rwPTsSMx2zCQCa
0+yz3OX71mGm2lUPkB236oFHauaZrDfUjQqrqHbV2lAhjm7ctHyEcCjvAgMBAAGj
ggGPMIIBizAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4E
FgQUebIUPCQoybKJC/L9OWKbvFoRyI8wIQYDVR0RBBowGIIWc3dpc3Nwb3N0LmFw
aS5tb2R1bS5pbzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1h
em9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAI
BgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2Nz
cC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQu
c2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMBMG
CisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAqT3maEWfb3IRd
RrRaU9vMeWMAskzCz9fEC4aUiyYHW4Gq2TV4ndKVVQTeGHO2uKuC5Y5etrzliLMD
Ri8O9T+znCyZa1TPxguWH6sBkrt6kTOkGnsNALlXvubE9mDGzJLj3rsZkZHfGImp
keur6UkzlLa0c45MfdcQ5iU+rz7K0m5VCgh/MamKBxyFW8df1ZcUb4Wqf0OqUxwg
rEZ+LQKZ8COAYWHBQpfdnC/9miLUnQplFkp5eOR2z3jv7ujP+SJbMiVzX/KkhcSG
M33cqJuf0ORvXZYBFZbPZsz7G+gxANA1faJdoyg3o/kZg7FVfUwDjYC5ma8WHk8C
oQS+mhsr
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxABu1U50x8QQCXevo2mI
oY2tyDmEyaTXJR/Uz7CLtaTHAwgA8CbSXaPpWqFkzN+Q8FanpVPgEI29RaVGci79
lXQt47ho7ArjAiSdRxCFgqFe6ZrZaBkykpm4pu1Rv2ZuYLcj/sf+5k00vjdTI6qY
nP3AcdVIGkcr4Tn/pSkKNrg1KlFeK6S4qokBxdjWR/73VZCulfmiYuz56jnoGY59
0ZjCe3tn8y+h1nKAr90DI6C+gb2SZp7KK1fxxqgLyx937KYMeFvnvc6FqPva8D07
EjMdswkAmtPss9zl+9ZhptpVD5Adt+qBR2rmmaw31I0Kq6h21dpQIY5u3LR8hHAo
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20759752921614145214729996518000802062
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'swisspost.api.modum.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24742921265151790684538261540453956108452390035429633247639269766330133251625699287401054195153879633880522658319980111975061790954513284156656711455574673490677280616415275459875204925072080756386740288882889544675588719886722798399570330210861901251809627208796503934745579606659013818236494279353279989061924302029584535411006170881236231740177830553744472339857160781587269202850268640759199794452829993710659094785356524030941327723957291913183979990236470132578601897682350369787885761406653846666651763469223222374294815957868133966061010172075194761063661549179970563910734418724508997076849255555016135026927
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							79b2143c2428c9b2890bf2fd39629bbc5a11c88f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swisspost.api.modum.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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