montalpina-shop.com
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 05:dd:1b:d0:38:52:9d:05:75:ea:64:7a:5d:02:79:2d was issued on by Amazon.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=montalpina-shop.com
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 05:dd:1b:d0:38:52:9d:05:75:ea:64:7a:5d:02:79:2dSerial Number (int): 7794201706608911811979909490542803245
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 5d:0c:b9:30:c5:cc:62:3b:ae:0e:81:fa:3a:5a:fe:26:aa:8c:a5:69
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): 29:94:e5:81:76:32:aa:07:89:90:f4:02:00:d1:57:5d:6a:04:9e:6a
Fingerprint (sha256): cd:63:b5:2e:3b:49:6c:fd:91:02:f4:0e:5c:10:e5:b5:9d:b7:8b:2f:f2:ac:72:25:d5:12:7a:11:89:c6:bb:ec
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate montalpina-shop.com
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for montalpina-shop.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
montalpina-shop.com
*.production.montalpina.sales.diarz.net
montalpina-shop.ch
*.montalpina-shop.ch
production.montalpina.sales.diarz.net
*.montalpina-shop.com
*.production.montalpina.sales.diarz.net
montalpina-shop.ch
*.montalpina-shop.ch
production.montalpina.sales.diarz.net
*.montalpina-shop.com
Other certificates including the domain name montalpina-shop.com
(limited to 100 certificates)
Certificate
The complete raw certificate details for montalpina-shop.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGaDCCBVCgAwIBAgIQBd0b0DhSnQV16mR6XQJ5LTANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTIzMTAxMTAwMDAwMFoXDTI0MTEwOTIzNTk1OVowHjEc MBoGA1UEAxMTbW9udGFscGluYS1zaG9wLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBANVeFtFhwPtjjbUtT8rNepHT1xA7oYht+m2crIc/uQwZSlVV hSL9v25Wi8NJ0Jh9jFZ25rQAzBAE/y8CTeI9m6Ka3lenS+QamQ1zbaONykA2jjz0 kPAdCbrJb/q657RTRVrPY45Gclmjxcf1afRSeceOFbsV4xzjeJTrULYTJxwHVhbk 1fquMfuoVsQ4cFHQm5MDnUv/b5vWEBQXXhWpB8Vt47XLJsZr6XnwLzFfuUJhk7z/ qS/Ea6s6qYye9PFdK9R2gPZ8jUhfMwIa1a7PDD+27z6K5hTMdW6j7tquM9GsVMvZ IirsZSCY4eVwVZjJInHtGqYzbiAjaWewj+sOmpsCAwEAAaOCA4IwggN+MB8GA1Ud IwQYMBaAFFXZGF/SHMwB4Vi0vqvZVUIB1y4CMB0GA1UdDgQWBBRdDLkwxcxiO64O gfo6Wv4mqoylaTCBsQYDVR0RBIGpMIGmghNtb250YWxwaW5hLXNob3AuY29tgicq LnByb2R1Y3Rpb24ubW9udGFscGluYS5zYWxlcy5kaWFyei5uZXSCEm1vbnRhbHBp bmEtc2hvcC5jaIIUKi5tb250YWxwaW5hLXNob3AuY2iCJXByb2R1Y3Rpb24ubW9u dGFscGluYS5zYWxlcy5kaWFyei5uZXSCFSoubW9udGFscGluYS1zaG9wLmNvbTAT BgNVHSAEDDAKMAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwu cjJtMDMuYW1hem9udHJ1c3QuY29tL3IybTAzLmNybDB1BggrBgEFBQcBAQRpMGcw LQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAzLmFtYXpvbnRydXN0LmNvbTA2 BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMy5hbWF6b250cnVzdC5jb20vcjJt MDMuY2VyMAwGA1UdEwEB/wQCMAAwggGABgorBgEEAdZ5AgQCBIIBcASCAWwBagB3 AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABixwhicIAAAQDAEgw RgIhAN5heaU2fvyEtEra8BHAJ6sxOKWZiispmbcYYPZE0ay6AiEA8OUeslcE3ssa nsA8bTHf8SpFHYt2ZftlN2AILa5xjvwAdwBIsONr2qZHNA/lagL6nTDrHFIBy1bd LIHZu7+rOdiEcwAAAYscIYm3AAAEAwBIMEYCIQC23nCVrF3MLNMxwK9ICl/dmlLh SDHZyofjNbpmZTQEyAIhAKH1rGEvY9n1+jbs9ATYahAzhRkVvh6QfpbD1hkf7UTe AHYA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGLHCGJvAAABAMA RzBFAiAbmnvbHUJW1Oh3SzqE4ws5Ciw8Fw9Mj4pJQjSBIZmEtwIhAL3zWmbBi4Fu wmUzw3vpjZFolPMl0PzqzG9eQBGYgqj0MA0GCSqGSIb3DQEBCwUAA4IBAQCYM4ZC uJh1jErdxbmEGstp/UwM+ks2QZ/XlxzgIpyuvkTZIw+ql6ejecBGFS6HtBw9YLfz Ucl8AWKTFhZxFDLIvf5O8UxHgOoNcbMMxdsuFrEluPuSAHbqel/KIPcIn0P03Q1W Eq8DteWsTFPVnRsk2KFdyOAg2FJwdY30OfbCDtQvB4loVjc+eBS5/gbr3c4NhfvS M6ir0MDRWbEmP4G7pRVFfOzSAOZRI7NC2ToBKi7IT52U2ri1s/f1IFNg21zGSiIL eL0scZ6z+3NneDeu3Vu5w8NYvNB0DFGCbhqvIqMpekqENzR0vUs3FZEsiqAJjGJJ ZhljH6TI4OqpflxR -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1V4W0WHA+2ONtS1Pys16 kdPXEDuhiG36bZyshz+5DBlKVVWFIv2/blaLw0nQmH2MVnbmtADMEAT/LwJN4j2b opreV6dL5BqZDXNto43KQDaOPPSQ8B0Juslv+rrntFNFWs9jjkZyWaPFx/Vp9FJ5 x44VuxXjHON4lOtQthMnHAdWFuTV+q4x+6hWxDhwUdCbkwOdS/9vm9YQFBdeFakH xW3jtcsmxmvpefAvMV+5QmGTvP+pL8RrqzqpjJ708V0r1HaA9nyNSF8zAhrVrs8M P7bvPormFMx1bqPu2q4z0axUy9kiKuxlIJjh5XBVmMkice0apjNuICNpZ7CP6w6a mwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7794201706608911811979909490542803245 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-09 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'montalpina-shop.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26935156038206450883206203623641841474794626378645174963294727721144518773136598628788164646177814555988964083144464796475331016527299324110644741517881060066527067079358015930972691144987056990822365391523930029465077685398745406898699382108519765012888328000453341496702689531636831605411546492341806924481604358654184929857217872937628775313423523717826619652217060322420524634137670580338898239903039128401210299646312316938386870021280039662058105903745292102827994512763944077415231642616575405319117281079316596679571459707399506715917564415185183428445718417224266118914739106170446795450690450345204143528603 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5d0cb930c5cc623bae0e81fa3a5afe26aa8ca569 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (169 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montalpina-shop.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.production.montalpina.sales.diarz.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montalpina-shop.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.montalpina-shop.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production.montalpina.sales.diarz.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.montalpina-shop.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0098338642b898758c4addc5b9841acb69fd4c0cfa4b36419fd7971ce0229caebe44d9230faa97a7a379c046152e87b41c3d60b7f351c97c0162931616711432c8bdfe4ef14c4780ea0d71b30cc5db2e16b125b8fb920076ea7a5fca20f7089f43f4dd0d5612af03b5e5ac4c53d59d1b24d8a15dc8e020d85270758df439f6c20ed42f07896856373e7814b9fe06ebddce0d85fbd233a8abd0c0d159b1263f81bba515457cecd200e65123b342d93a012a2ec84f9d94dab8b5b3f7f5205360db5cc64a220b78bd2c719eb3fb73677837aedd5bb9c3c358bcd0740c51826e1aaf22a3297a4a84373474bd4b3715912c8aa0098c62496619631fa4c8e0eaa97e5c51