apis.20min.ch

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0b:fb:1a:a8:7f:44:8c:cd:76:f6:83:5b:94:74:80:8e was issued on by Amazon.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=apis.20min.ch

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:fb:1a:a8:7f:44:8c:cd:76:f6:83:5b:94:74:80:8e
Serial Number (int): 15925315157494781801049709328452583566
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 16:63:b1:71:84:bf:2f:49:52:40:85:e2:0a:2d:31:6c:b4:24:b7:3c
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 88:01:7d:e3:af:a7:7c:50:25:cc:7e:2a:8b:eb:82:eb:a4:c2:05:a2
Fingerprint (sha256): b8:95:10:00:b9:ca:fc:d3:7b:8d:a1:d5:c9:92:cc:bd:50:82:b3:45:a3:85:23:35:ba:d1:f6:f8:20:0f:68:f3

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate apis.20min.ch

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apis.20min.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apis.20min.ch
apis.20minutes.ch
api.20minuten.ch
api.20minutes.ch
api.20min.ch
api.lessentiel.lu
apis.lessentiel.lu
apis.20minuten.ch
api.lematin.ch
apis.lematin.ch

Other certificates including the domain name 20min.ch

(limited to 100 certificates)
booking.20min.ch
deal.20min.ch
deal.20min.ch
*.formilija1234.beta.20min.ch
deal.20min.ch
fussball.20min.ch
*.beta.20min.ch
*.grafanafixitt.sbx-prometheus.20min.ch
fooby.20min.ch
dreixdrei.20min.ch
sandboxx-laurent.sbx-prometheus.20min.ch
deal.20min.ch
sni.cloudflaressl.com
api.beta.20min.ch
branding.20min.ch
fernweh.20min.ch
tagesdeal.20min.ch
booking.20min.ch
dreixdrei.20min.ch
api.beta.20min.ch
unchained.20min.ch
milijadisco.sbx-prometheus.20min.ch
zweipunktnull.20min.ch
*.dnsworkaround.beta.20min.ch
fooby.20min.ch
zurichpride.20min.ch
story.20min.ch
niemolsnie.20min.ch
dealdujour.20min.ch
gutscheine.20min.ch
apis.20min.ch
dreixdrei.20min.ch
mediadaten.20min.ch
www.20min.ch
dreixdrei.20min.ch
myshop.20min.ch
youthlab.20min.ch
zweipunktnull.20min.ch
pcm-imaginary.20min.ch
my.20min.ch
mongodb.sbx-prometheus.20min.ch
rendezvous.20min.ch
deal.20min.ch
20min.ch
beta.20min.ch
beta.20min.ch
20min.ch
unchained.20min.ch
fooby.20min.ch
youthlab.20min.ch
apis.20min.ch
story.20min.ch
*.milijapett.beta.20min.ch
sandboxx-laurent.sbx-prometheus.20min.ch
zurichpride.20min.ch
rendezvous.20min.ch
unchained.20min.ch
beta.20min.ch
spiele.20min.ch
deal.20min.ch
beta.20min.ch
sma-studio.20min.ch
www.20min.ch
fernweh.20min.ch
cp.lifestyle.20min.ch
booking.20min.ch
rendezvous.20min.ch
sma-studio.20min.ch
spiele.20min.ch
twch.20min.ch
deal.20min.ch
wiki.20min.ch
mediadaten.20min.ch
deal.20min.ch
*.moninorlmo.beta.20min.ch
*.grafanafixx.sbx-prometheus.20min.ch
vv.20min.ch
my.20min.ch
fussball.20min.ch
rendezvous.20min.ch
nwost.20min.ch
*.sbx-prometheus.20min.ch
dealdujour.20min.ch
remote.20min.ch
deal.20min.ch
source.cuisineactuelle.fr
youthlab.20min.ch
zweipunktnull.20min.ch
youthlab.20min.ch
*.formilija1234.beta.20min.ch
*.beta.20min.ch
bodyandsoul.20min.ch
fooby.20min.ch
cp.20min.ch
spiele.20min.ch
youthlab.20min.ch
*.sandbox-laurent.sbx-prometheus.20min.ch
blackbeard.prod.tda.link
dreixdrei.20min.ch
dealdujour.20min.ch

Certificate

The complete raw certificate details for apis.20min.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MSvh0f6AG6YJM6ZyAb2
GszJ5BHxoNKPHbS1Csw/T8GY9Jtn+o7snIawgzSmas3IAlTer8zeliiWDC4BByM7
4K2uJIfQE6iwgPx4LqNtVXknL7+fqitajGmLpjRQtvvaz8FUQmwGykUxpHS7QzCv
clQnMBE76v14rNb3QRMj3ASOMddmwiRi+OKi/by3TBmoAYKOwWm0kIRQUIdazhr4
VmemHSLJ9kQ7wo8u7bFlG7MHK7DmlwuI31slnKYRQa8cJvt0tJ2Pxn7ptQiVqOmS
h7GKoVFcvZvN7CqiPBCBWglp6GXa4qD1semoWSSadCzfg6QNxJFmbkF1cZzBWkR2
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15925315157494781801049709328452583566
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apis.20min.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26354556745729676502610751729848597368208925613640225203422828255191916293885930282003067322165042850387542552711890692810839459429998050143441344122356283244924530316085970182632075776182909575386465652584391715514766232771414999798246466593459881573496535692725143644191861097392941383320202248225966190792694842893817722861101486150096439271772048833523962628596450581640977270002783542913045890405508744457851371180718424909596558349240690859407559709584088402222778560378883843117662875460333993080685885279358207139178840554142772762064291114029356031314280450217037353301206263569898661977126353247426014639733
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1663b17184bf2f49524085e20a2d316cb424b73c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (178 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apis.20min.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apis.20minutes.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.20minuten.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.20minutes.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.20min.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.lessentiel.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apis.lessentiel.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apis.20minuten.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.lematin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apis.lematin.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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