pwk-shop.de

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0e:28:35:0f:c9:9b:4f:69:f4:1d:4f:17:c9:61:e5:96 was issued on by Amazon.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=pwk-shop.de

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:28:35:0f:c9:9b:4f:69:f4:1d:4f:17:c9:61:e5:96
Serial Number (int): 18817960033855892075873255264966796694
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 46:ae:42:0f:df:c3:6e:d4:0b:b3:6b:43:da:e1:11:6e:d5:00:4a:6a
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 91:80:3b:e2:99:8c:f1:97:8b:ff:fe:0d:6f:c7:a9:a8:7b:58:4e:a7
Fingerprint (sha256): a9:db:c7:44:76:9a:0f:10:5a:19:03:9d:e5:2c:6a:53:49:82:5b:2c:16:e8:52:88:93:22:ce:61:2d:7b:54:f8

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate pwk-shop.de

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pwk-shop.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pwk-shop.de
production.pwk.sales.diarz.net
*.production.pwk.sales.diarz.net
*.pwk-shop.de
*.pwk-knoebber.de
pwk-knoebber.de

Other certificates including the domain name pwk-shop.de

(limited to 100 certificates)
pwk.responsive.dia.ovh
pwk-shop.de
pwk.responsive.dia.ovh
pwk.responsive.dia.ovh
pwk.responsive.dia.ovh
pwk-shop.de
pwk-shop.de
pwk-shop.de
pwk-shop.de
pwk.responsive.dia.ovh
pwk.responsive.dia.ovh
pwk.responsive.dia.ovh
pwk-shop.de
pwk-shop.de
pwk.responsive.dia.ovh
pwk-shop.de
pwk.responsive.dia.ovh
pwk.responsive.dia.ovh

Certificate

The complete raw certificate details for pwk-shop.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpqUbcDW6iv0xO+hWTQq
g9jGzUPRCsoD4vL+USrKSe9djeVp1uWfAt56iIwwNrUS/o6v+6JPkm4AOyYZP2ci
RX1hPTfi9ejY2tGdn2nMe0sdEj0nru8BBDhWbW9nSWFFse+BGIMtAkXQ+fXxNEdG
ZOT/EgHcU8Re8eIAKofg3N/cvCZkCt/oE7DEJjNwUHd6Rzk+IuwqC1oKUtdeIDyZ
1Ejq1rNQbvzY0oZmAeZUipbCUPGYwroVmCsL06ucnbMfHBilikd8MyOJzwr4v7vT
sTnEgAZMcHSxcbN85v+78iNuWzp1DNNvVqx9jg2DOarLQXshHtkFStPgCZssxEsi
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18817960033855892075873255264966796694
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pwk-shop.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24566457303635649275471738106800647283837038658201490148897668254600808355453647383651731565565642778957919118461707100004097436597768271565914561137404590293926849486100342055689802134115719633648741027602077036809502380801965847964149558649350976003108286181747733104561174917510945059495791503970626206371030049735771667796959587790068714108949880664050539646803236786882212324990559391587852402038822086935350479087490432639880082578207395452998072682636890760674322295511291277745239527026504650767793499793498772271823558597099543264087553413877457730983289710065354330191164301968285529952631520609321064538813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							46ae420fdfc36ed40bb36b43dae1116ed5004a6a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwk-shop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production.pwk.sales.diarz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.production.pwk.sales.diarz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pwk-shop.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pwk-knoebber.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pwk-knoebber.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00ae40cb8977fdfb00b426445ccaf84ff27ddc9b2bbec9d15430ef93e816e6a68f08b08dd066c2d8ef435409b0a71a17f97ae076cc8bc852e1a8ff120b0906bbd8e942596ad7e3e7949e3471a0c1cdb05b3b5fa1356fa4170478c2ede58810ec72300b98383064a0a7b2465fb80a8c5ea402fb32450c38dfeaa3f57c5f6444e736bcdc6e5b889829a64c2b4fcd37a4cf5cf4b91eb6632bc693cb239585846e339f63605b185c5e4d112d608ce456ddf52f66b56ba296d9faf4aceaf86790b4b45991f6ecce94006b6801317c7ba83435db9ff7a0fae9659c7f568e2d03ccddc5ef676b06fa5a00d8ea66e36733bb1b0ab627fb2385d5c6f607f3c15221e7377f57