kfw-webshop.de

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0e:01:68:87:04:60:2d:96:08:ee:4b:cd:32:fb:86:7d was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kfw-webshop.de

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:01:68:87:04:60:2d:96:08:ee:4b:cd:32:fb:86:7d
Serial Number (int): 18616504305602288439806754990415644285
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 91:0e:9c:42:14:0e:0d:44:04:5d:c8:9f:ca:f4:8c:e7:70:9c:2f:85
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 0a:a2:a1:04:ca:4c:26:7e:77:4c:e4:41:ed:e5:88:a0:da:3d:87:7b
Fingerprint (sha256): 8a:12:4d:ea:4c:71:17:d4:f6:44:df:93:a3:ec:40:84:05:98:57:23:c1:c4:09:d7:4b:63:78:42:0f:35:6f:4f

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate kfw-webshop.de

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kfw-webshop.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kfw-webshop.de
*.production.kfw.sales.diarz.net
production.kfw.sales.diarz.net
*.kfw-webshop.de

Other certificates including the domain name kfw-webshop.de

(limited to 100 certificates)

Certificate

The complete raw certificate details for kfw-webshop.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDMFiQri+cMnRn/DNtPu
hbhT6WQ2uVNRlT92F6kSQw+8k6POwRm7yKQ920T2pn6Ju8Wcxn/xM5tm0+4ljb+G
3HlxVkKiB/011KaXGaQYh8iEOe4Yvsj6VSb0xpi/EsTNAFRhPqqwYWh5xybwiAOy
3j49M2pgU1uErP27rlNnzqL5LpbrljZzRAUq/k36vQkqRsRfgPi1lGJyLsU6HasQ
fWUnTXAUfgzKU7s9P+3Omb1ssz0poPN5Ef/VoJLPks05xGnmeZKIL4W/BG2X1ogu
uEt38v4BafcFisROre7iSSDj5CsLO60tiFPOl3BSpxWElIUB+5I1JCwd3uIlULoO
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18616504305602288439806754990415644285
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kfw-webshop.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20728241714130725156854741425490929869329138498713056557832626659982842137609334849053868413126545556776542802499450767060735740507379623357336740753334912185609339655669436415533997611491575736186954162234282995445537613553921224260633869896365621983349595753199723855671226385986460034851712025258161070483697212883831008473272611832522170485401012842823718493191868051438223011431135738940649356234503902994390993781689000480120850202767012665101497597777859486875242793375250387795247770561921122203537990030053012046475680068384447169904098894429325985254752830480093789470960755956833074054976912566431973510733
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							910e9c42140e0d44045dc89fcaf48ce7709c2f85
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kfw-webshop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.production.kfw.sales.diarz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production.kfw.sales.diarz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kfw-webshop.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001863c789d1f000004030047304502210096f0687c30ee7b24192c0c4f10f3ab8cdb5892c928fb5609ca542721bc3793b002204ff9b80a1d6dcb85460bf8d26b30da84b7be7ce8f0b79b9222701e401b36f3aa007700b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001863c789d4a00000403004830460221009dfd785a4525bf02e9d809d51beae75c26999e90c1a72c315357bb889ae4842b022100e0f5ec030e90f639183b260b043200fbdb128895af4e992d3ca0617de4ee2e41007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001863c789d1c000004030046304402207e56d60d31657faafc9fac3971228bfd8ba8e8f6aad4cd00085c8f92937ba1b302201e90f4dc4e45a82931c8fd585a1f96b81e9d50ba30d220767390f9710a26b2bb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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