infopark.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0f:bb:2e:c8:99:14:41:37:e2:87:db:71:8b:cb:85:db was issued on by Amazon.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=infopark.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:bb:2e:c8:99:14:41:37:e2:87:db:71:8b:cb:85:db
Serial Number (int): 20910328333169714693572984334619215323
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: bd:fd:41:f7:85:9f:5b:ee:8d:49:2f:08:49:8d:76:64:9d:a8:cb:70
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 8b:b8:2e:ca:59:b4:2c:d3:87:ba:5b:79:6c:7b:10:1a:6f:0b:e6:18
Fingerprint (sha256): b4:3e:67:1f:e8:e2:19:a2:1e:4e:f3:a9:18:87:a4:7b:2a:56:5e:7f:6b:46:e8:36:76:6f:87:d0:4b:15:53:8b

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate infopark.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for infopark.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

infopark.com
iico.de
*.digital-relaunch.com
*.relaunch-konferenz.de
infopark.pl
*.infopark.net
relaunch-konferenz.de
*.infopark.pl
relaunch-conference.com
digital-relaunch.com
infopark.de
digital-relaunch.de
*.infopark.com
*.iico.de
infopark.net
*.infopark.de
*.digital-relaunch.de
*.relaunch-conference.com

Other certificates including the domain name infopark.com

(limited to 100 certificates)
infopark.com
infopark.com
fiona.infopark.com
www.infopark.com
fiona.infopark.com
berlinsaloon.biz
justrelate.com
justrelate.com
infopark.com
fiona.infopark.com
www.infopark.com
employeeapps.infopark.de
infopark.com
infopark.de
infopark.de
infopark.com
infopark.com
justrelate.com
www.infopark.com
employeeapps.infopark.de
digital-relaunch.infopark.com
berlinsaloon.biz
infopark.com
berlinsaloon.biz
fiona.infopark.com
fiona.infopark.com
infopark.com
infopark.com
fiona.infopark.com
www.infopark.com
fiona.infopark.com
infopark.com
infopark.com
berlinsaloon.biz
infopark.com
infopark.com
berlinsaloon.biz
berlinsaloon.biz
berlinsaloon.biz
digital-relaunch.infopark.com
www.infopark.com
infopark.de
employeeapps.infopark.de

Certificate

The complete raw certificate details for infopark.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqSLAxB5qf3J1IspUyIF
dFtDforu990I8Qq1WlHwWQRIzlN/beELhc8CostTwOfo+W2HEj70CLEpYRP3uz+A
BBUAtTIvPDajguz+D4hSA2nEM7wUIu7pxhyDL3y+ZlAjHcQmlKgI/7FqSiythq4D
0R+BGeE7IfxQnmV6Eyr0z07YWt5MarHLBzCF7c/VcF4TZOmJpzEV9NUoHIvLFV59
sBBlTK0bSsBq6aI6uELRSw6Kj44C4EF4yI3xsovjRlQN1M6SM4HakOjeEX4n/a8Z
fv8vTlzrWxJJeYpCzcFBx+XDqBno7wNKdryF4LGqZWv6lDP/OVfwqj7wCMPE9K1x
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20910328333169714693572984334619215323
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'infopark.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23056510688868686248996114699149526806266633451574559924790587191059796197501622285780541117228801114083947421260952786318047412275876477079564088345302543797103778329385380280505402560660258573649721406883647086170996020342881036748845073563521625032374412889973923125699792967381933743265626025313415798121311809456226834386815934987145248379893909072170141840203277305347281548219011126039739671374010480081958162404700557744495754939001725632208281955212973441257438644396329685024690297074335603285455522510753152318944110253833375095153683586359534246506218135224758412046359189543292058559871179259387021455657
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bdfd41f7859f5bee8d492f08498d76649da8cb70
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (330 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infopark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iico.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digital-relaunch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.relaunch-konferenz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infopark.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infopark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relaunch-konferenz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infopark.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'relaunch-conference.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital-relaunch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infopark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital-relaunch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infopark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.iico.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infopark.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infopark.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.digital-relaunch.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.relaunch-conference.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b856ba9cd59caa83717aef8ed8429c85aad54e85540525fff31808e4a0f1a29fc92d933281de3ad1edfbaca7f0798843641f4898d6059c955be37ba6a6366cd7c5734dc46bb82d9b12c0989dbf559fe4a32e502d9100b3914402f3b6a500ba0a3d6446b1ef298eab1fcecc33d131005eda98e566265d2a48811d25e667dc76902f2aff4e74d8e3f8ef2d475a9099b8d5dbd1321cc04f7090f1c9f473bdbed33640564de030b3fd114cfc03498ea3a34370dbe25a02c3ef72e02a885d1de99d4282f883e3d213d0554108044fa2ed6dab9d7e179c0439ee801be3acdbcc082b071d6436ba759a31f68bfa27e036a5487e59dab03949563f27005bc45b8e38ad98