api.beta.20min.ch

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0c:c0:75:8a:39:3b:55:75:e5:d4:33:c8:25:d7:22:13 was issued on by Amazon.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=api.beta.20min.ch

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:c0:75:8a:39:3b:55:75:e5:d4:33:c8:25:d7:22:13
Serial Number (int): 16950040939380107352596681002990379539
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7b:cf:94:11:6f:d2:d7:0d:14:d2:5e:07:da:05:89:5a:3f:97:df:7b
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): dd:8e:70:d2:66:4c:3e:d4:53:dd:79:87:31:ce:f8:f3:f0:96:c3:5e
Fingerprint (sha256): a8:e8:16:a7:f4:48:ab:1a:39:f3:57:f2:54:44:a1:6b:e7:fc:01:4a:d9:7a:c1:41:21:e8:92:86:5f:8b:45:a9

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate api.beta.20min.ch

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.beta.20min.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.beta.20min.ch
api.20minuten.ch
api.20minutes.ch
api.20min.ch
api.lessentiel.lu
api.lematin.ch

Other certificates including the domain name 20min.ch

(limited to 100 certificates)
booking.20min.ch
deal.20min.ch
deal.20min.ch
*.formilija1234.beta.20min.ch
deal.20min.ch
fussball.20min.ch
*.beta.20min.ch
*.grafanafixitt.sbx-prometheus.20min.ch
fooby.20min.ch
dreixdrei.20min.ch
sandboxx-laurent.sbx-prometheus.20min.ch
deal.20min.ch
sni.cloudflaressl.com
api.beta.20min.ch
branding.20min.ch
fernweh.20min.ch
tagesdeal.20min.ch
booking.20min.ch
dreixdrei.20min.ch
api.beta.20min.ch
unchained.20min.ch
milijadisco.sbx-prometheus.20min.ch
zweipunktnull.20min.ch
*.dnsworkaround.beta.20min.ch
fooby.20min.ch
zurichpride.20min.ch
story.20min.ch
niemolsnie.20min.ch
dealdujour.20min.ch
gutscheine.20min.ch
apis.20min.ch
dreixdrei.20min.ch
mediadaten.20min.ch
www.20min.ch
dreixdrei.20min.ch
myshop.20min.ch
youthlab.20min.ch
zweipunktnull.20min.ch
pcm-imaginary.20min.ch
my.20min.ch
mongodb.sbx-prometheus.20min.ch
rendezvous.20min.ch
deal.20min.ch
20min.ch
beta.20min.ch
beta.20min.ch
20min.ch
unchained.20min.ch
fooby.20min.ch
youthlab.20min.ch
apis.20min.ch
story.20min.ch
*.milijapett.beta.20min.ch
sandboxx-laurent.sbx-prometheus.20min.ch
zurichpride.20min.ch
rendezvous.20min.ch
unchained.20min.ch
beta.20min.ch
spiele.20min.ch
deal.20min.ch
beta.20min.ch
sma-studio.20min.ch
www.20min.ch
fernweh.20min.ch
cp.lifestyle.20min.ch
booking.20min.ch
rendezvous.20min.ch
sma-studio.20min.ch
spiele.20min.ch
twch.20min.ch
deal.20min.ch
wiki.20min.ch
mediadaten.20min.ch
deal.20min.ch
*.moninorlmo.beta.20min.ch
*.grafanafixx.sbx-prometheus.20min.ch
vv.20min.ch
my.20min.ch
fussball.20min.ch
rendezvous.20min.ch
nwost.20min.ch
*.sbx-prometheus.20min.ch
dealdujour.20min.ch
remote.20min.ch
deal.20min.ch
source.cuisineactuelle.fr
youthlab.20min.ch
zweipunktnull.20min.ch
youthlab.20min.ch
*.formilija1234.beta.20min.ch
*.beta.20min.ch
bodyandsoul.20min.ch
fooby.20min.ch
cp.20min.ch
spiele.20min.ch
youthlab.20min.ch
*.sandbox-laurent.sbx-prometheus.20min.ch
blackbeard.prod.tda.link
dreixdrei.20min.ch
dealdujour.20min.ch

Certificate

The complete raw certificate details for api.beta.20min.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpaRGXtWkNd+x4DfxbSO
39F3WXUKVhqEe65BuKulnArpDnhKDpyYTspQvjdSqYTBlDwbJ5sQX6S6BJgwCmwP
maJ09TLO1GOfqX6mBHmxwB9L174pCGKd1jWij/LRJ1BTiq5M3lPJM7tAo2ORiRRw
5XezgUHp9V9zLkhYfg9S2GGaapiv23H8059mukUNshzTPxdEayMp/VmwhXry33tK
cG5DXBWpt90it3lpFwWCut7U9WbfAGg0raV1h7AGdnc6o+ykKuMG1XPQYXmOilzR
37TXZu0uNk9kdnWBreg1wFSjuFWM38+ie3aAf6lGqZT7nLBdOPCf/IePBVqebIVF
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16950040939380107352596681002990379539
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.beta.20min.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21534759098112648962525868387003149708881623732800286270465433753684486804578603081080043973060996151535643653892018043512497882133672951377862245346838755287574863997175574841100261882040559708383184145640247233066336859445201876323786496210997519160612146792135502902980913308832895606052661030520537038957435814005994380823935968854803608065394362260817605529036060052698565424138523915549581729168851410047190667892867415992377843821004230198053652986687932231053844418727643402058028472740716629315438832295569185631131608491897612213604124686641089786776829362829527656481978666933514216745897627222056475379127
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7bcf94116fd2d70d14d25e07da05895a3f97df7b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.beta.20min.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.20minuten.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.20minutes.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.20min.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.lessentiel.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.lematin.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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