infopark.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0f:18:73:03:58:b4:de:13:ee:e6:73:d0:18:4b:e4:60 was issued on by Amazon.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=infopark.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:18:73:03:58:b4:de:13:ee:e6:73:d0:18:4b:e4:60
Serial Number (int): 20065367803620817686404512254851277920
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 74:29:9a:61:2a:5b:b4:c7:5c:90:74:ff:b7:0a:04:9b:8c:be:14:bf
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 79:26:ff:ab:a9:a2:4b:17:79:60:bd:00:78:6f:84:b4:06:55:39:f4
Fingerprint (sha256): a6:1d:27:c9:c3:9c:40:da:8f:eb:5e:c6:9c:de:d1:46:55:6c:86:35:13:46:b4:7a:58:7c:61:04:4f:cc:16:75

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate infopark.com

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for infopark.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

infopark.com
infopark-ag.de
infopark.digital
infopark.berlin
*.infopark.berlin
*.infopark.eu
infopark.pl
*.infopark.net
*.infopark-ag.de
infopark-ag.net
*.infopark.pl
infopark.de
infopark-ag.com
*.infopark.com
*.infopark-ag.net
infopark.net
*.infopark.de
*.infopark.digital
infopark.eu
*.infopark-ag.com

Other certificates including the domain name infopark.com

(limited to 100 certificates)
infopark.com
infopark.com
fiona.infopark.com
www.infopark.com
fiona.infopark.com
berlinsaloon.biz
justrelate.com
justrelate.com
infopark.com
fiona.infopark.com
www.infopark.com
employeeapps.infopark.de
infopark.com
infopark.de
infopark.de
infopark.com
infopark.com
justrelate.com
www.infopark.com
employeeapps.infopark.de
digital-relaunch.infopark.com
berlinsaloon.biz
infopark.com
berlinsaloon.biz
fiona.infopark.com
fiona.infopark.com
infopark.com
infopark.com
fiona.infopark.com
www.infopark.com
fiona.infopark.com
infopark.com
infopark.com
berlinsaloon.biz
infopark.com
infopark.com
berlinsaloon.biz
berlinsaloon.biz
berlinsaloon.biz
digital-relaunch.infopark.com
www.infopark.com
infopark.de
employeeapps.infopark.de

Certificate

The complete raw certificate details for infopark.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIP4jWd735fcPGgnC7Ie
KxpHY2lo4+U/pdEetaUxkFVKKrGCMhTPljC+9OskoC72Gdv7aadMszxcpeU1rCQg
ndWNEtqMJ6ZYchB+lx7zuAhkQFLgvTneMgLahnCII/BFwp0059rnF8IT1UCqJvTd
ZT9HCmBLuzXA5mUqzh36emzwnmkUw6uQZaLPVr53B1QQK5uVCzKUFpvlUrs9c0S9
Qk0e3GX1CeidjR47Z9xUJKg1WpCYiNSMH056y1K9c4g2s02QuFgooeQXOOj1+pE+
ktQNjjZHXq7Gr0WIyGANzRH7eFoj/kcli2isO1Yzi4cDn9MEZdIemu/LV3WmXGtR
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20065367803620817686404512254851277920
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'infopark.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22787972173919847373647006506359092816402819822681763019902868369114744754281948131750858276154577202277758810476826407939283868122849389486157784686301366871477403521777575953038371919847022355533767018221901574313813083692001744507530846613355765730931580824331835827619318505046444996050304674680325435205530739913843987417061164300180374734808040062427077688850513293540460237857855443118824566004237990474016793838757439120651556894301499311787809538999548684954427873640395267668857802504246283029136534287667029970032621418469298700075569824412965959530635427033453073363755626638891644544998099821476983820647
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							74299a612a5bb4c75c9074ffb70a049b8cbe14bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (328 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infopark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infopark-ag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infopark.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infopark.berlin'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infopark.berlin'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infopark.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infopark.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infopark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infopark-ag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infopark-ag.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infopark.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infopark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infopark-ag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infopark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infopark-ag.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infopark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infopark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infopark.digital'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infopark.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infopark-ag.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b89b9312b83dea2ebe3e92b737596573518630a2c32cd4693bc7b31fd06b94eb0ba24da85c435d7e3309b1fa9fb276c27e9bec3c5d7c77d05d82789dac48045efb7a3f38a36856e53eafe21d5ab5d1a7a4de6efb5965febf0ebeba8f51de818a8de0a421671d4e4527998f1674a2b4a38260bd9649738adbf2bd7d1c3f5309653a2236752a6aa48545f161a7785196062d27dd21580a57a811420c27aa83a8a6cce1c74dd78be3f76da03c6876c32518885bc8392ca5bfa99a5771ef18627bde8436186bb24dc918482ad0ef4e946abf6459072f87f9f1f5897add9cf4d08561e67d8aa97a9ea573ca0f3c3f332ee30f6f7bb00ecc0cfef0a679fc3a828f698a