durable.20min.ch
Issued by Amazon
About this certificate
This digital certificate with serial number 09:3e:26:05:ad:41:48:20:d8:b4:b9:ae:78:2e:53:71 was issued on by Amazon.
With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=durable.20min.ch
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 09:3e:26:05:ad:41:48:20:d8:b4:b9:ae:78:2e:53:71Serial Number (int): 12285745548618980997566487004099531633
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: cb:a5:fa:bc:20:28:ef:d0:7c:42:08:3e:33:9b:2f:96:66:16:fd:4d
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): 3b:3f:b0:46:d6:2c:0d:52:ea:cf:dc:0b:54:99:d8:c7:e2:91:df:f0
Fingerprint (sha256): cd:a4:e7:91:b6:50:74:ab:15:2a:65:e3:7f:44:20:cf:60:ce:37:5f:28:74:a0:51:8e:df:ea:b6:15:8c:13:bf
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl
Check the revocation status for certificate durable.20min.ch
30
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for durable.20min.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
durable.20min.ch
*.beta.20min.ch
www.20minutes.ch
www.lematin.20min.ch
www.20min.ch
*.www.beta.20min.ch
20minutes.ch
*.www.20minuten.ch
*.www.20minutes.ch
durable.lematin.ch
*.www.lematin.20min.ch
www.beta.20min.ch
*.www.20min.ch
*.durable.lematin.ch
beta.20min.ch
*.v1.20min.ch
20min.ch
*.20minutes.ch
lematin.ch
www.20minuten.ch
*.lematin.ch
20minuten.ch
*.www.lematin.ch
*.lematin.20min.ch
www.lematin.ch
*.durable.20min.ch
v1.20min.ch
lematin.20min.ch
*.20min.ch
*.20minuten.ch
*.beta.20min.ch
www.20minutes.ch
www.lematin.20min.ch
www.20min.ch
*.www.beta.20min.ch
20minutes.ch
*.www.20minuten.ch
*.www.20minutes.ch
durable.lematin.ch
*.www.lematin.20min.ch
www.beta.20min.ch
*.www.20min.ch
*.durable.lematin.ch
beta.20min.ch
*.v1.20min.ch
20min.ch
*.20minutes.ch
lematin.ch
www.20minuten.ch
*.lematin.ch
20minuten.ch
*.www.lematin.ch
*.lematin.20min.ch
www.lematin.ch
*.durable.20min.ch
v1.20min.ch
lematin.20min.ch
*.20min.ch
*.20minuten.ch
Other certificates including the domain name 20min.ch
(limited to 100 certificates)
booking.20min.ch
deal.20min.ch
deal.20min.ch
*.formilija1234.beta.20min.ch
deal.20min.ch
fussball.20min.ch
*.beta.20min.ch
*.grafanafixitt.sbx-prometheus.20min.ch
fooby.20min.ch
dreixdrei.20min.ch
sandboxx-laurent.sbx-prometheus.20min.ch
deal.20min.ch
sni.cloudflaressl.com
api.beta.20min.ch
branding.20min.ch
fernweh.20min.ch
tagesdeal.20min.ch
booking.20min.ch
dreixdrei.20min.ch
api.beta.20min.ch
unchained.20min.ch
milijadisco.sbx-prometheus.20min.ch
zweipunktnull.20min.ch
*.dnsworkaround.beta.20min.ch
fooby.20min.ch
zurichpride.20min.ch
story.20min.ch
niemolsnie.20min.ch
dealdujour.20min.ch
gutscheine.20min.ch
apis.20min.ch
dreixdrei.20min.ch
mediadaten.20min.ch
www.20min.ch
dreixdrei.20min.ch
myshop.20min.ch
youthlab.20min.ch
zweipunktnull.20min.ch
pcm-imaginary.20min.ch
my.20min.ch
mongodb.sbx-prometheus.20min.ch
rendezvous.20min.ch
deal.20min.ch
20min.ch
beta.20min.ch
beta.20min.ch
20min.ch
unchained.20min.ch
fooby.20min.ch
youthlab.20min.ch
apis.20min.ch
story.20min.ch
*.milijapett.beta.20min.ch
sandboxx-laurent.sbx-prometheus.20min.ch
zurichpride.20min.ch
rendezvous.20min.ch
unchained.20min.ch
beta.20min.ch
spiele.20min.ch
deal.20min.ch
beta.20min.ch
sma-studio.20min.ch
www.20min.ch
fernweh.20min.ch
cp.lifestyle.20min.ch
booking.20min.ch
rendezvous.20min.ch
sma-studio.20min.ch
spiele.20min.ch
twch.20min.ch
deal.20min.ch
wiki.20min.ch
mediadaten.20min.ch
deal.20min.ch
*.moninorlmo.beta.20min.ch
*.grafanafixx.sbx-prometheus.20min.ch
vv.20min.ch
my.20min.ch
fussball.20min.ch
rendezvous.20min.ch
nwost.20min.ch
*.sbx-prometheus.20min.ch
dealdujour.20min.ch
remote.20min.ch
deal.20min.ch
source.cuisineactuelle.fr
youthlab.20min.ch
zweipunktnull.20min.ch
youthlab.20min.ch
*.formilija1234.beta.20min.ch
*.beta.20min.ch
bodyandsoul.20min.ch
fooby.20min.ch
cp.20min.ch
spiele.20min.ch
youthlab.20min.ch
*.sandbox-laurent.sbx-prometheus.20min.ch
blackbeard.prod.tda.link
dreixdrei.20min.ch
dealdujour.20min.ch
deal.20min.ch
deal.20min.ch
*.formilija1234.beta.20min.ch
deal.20min.ch
fussball.20min.ch
*.beta.20min.ch
*.grafanafixitt.sbx-prometheus.20min.ch
fooby.20min.ch
dreixdrei.20min.ch
sandboxx-laurent.sbx-prometheus.20min.ch
deal.20min.ch
sni.cloudflaressl.com
api.beta.20min.ch
branding.20min.ch
fernweh.20min.ch
tagesdeal.20min.ch
booking.20min.ch
dreixdrei.20min.ch
api.beta.20min.ch
unchained.20min.ch
milijadisco.sbx-prometheus.20min.ch
zweipunktnull.20min.ch
*.dnsworkaround.beta.20min.ch
fooby.20min.ch
zurichpride.20min.ch
story.20min.ch
niemolsnie.20min.ch
dealdujour.20min.ch
gutscheine.20min.ch
apis.20min.ch
dreixdrei.20min.ch
mediadaten.20min.ch
www.20min.ch
dreixdrei.20min.ch
myshop.20min.ch
youthlab.20min.ch
zweipunktnull.20min.ch
pcm-imaginary.20min.ch
my.20min.ch
mongodb.sbx-prometheus.20min.ch
rendezvous.20min.ch
deal.20min.ch
20min.ch
beta.20min.ch
beta.20min.ch
20min.ch
unchained.20min.ch
fooby.20min.ch
youthlab.20min.ch
apis.20min.ch
story.20min.ch
*.milijapett.beta.20min.ch
sandboxx-laurent.sbx-prometheus.20min.ch
zurichpride.20min.ch
rendezvous.20min.ch
unchained.20min.ch
beta.20min.ch
spiele.20min.ch
deal.20min.ch
beta.20min.ch
sma-studio.20min.ch
www.20min.ch
fernweh.20min.ch
cp.lifestyle.20min.ch
booking.20min.ch
rendezvous.20min.ch
sma-studio.20min.ch
spiele.20min.ch
twch.20min.ch
deal.20min.ch
wiki.20min.ch
mediadaten.20min.ch
deal.20min.ch
*.moninorlmo.beta.20min.ch
*.grafanafixx.sbx-prometheus.20min.ch
vv.20min.ch
my.20min.ch
fussball.20min.ch
rendezvous.20min.ch
nwost.20min.ch
*.sbx-prometheus.20min.ch
dealdujour.20min.ch
remote.20min.ch
deal.20min.ch
source.cuisineactuelle.fr
youthlab.20min.ch
zweipunktnull.20min.ch
youthlab.20min.ch
*.formilija1234.beta.20min.ch
*.beta.20min.ch
bodyandsoul.20min.ch
fooby.20min.ch
cp.20min.ch
spiele.20min.ch
youthlab.20min.ch
*.sandbox-laurent.sbx-prometheus.20min.ch
blackbeard.prod.tda.link
dreixdrei.20min.ch
dealdujour.20min.ch
Certificate
The complete raw certificate details for durable.20min.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHzDCCBrSgAwIBAgIQCT4mBa1BSCDYtLmueC5TcTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMTEyMTMwMDAwMDBaFw0yMzAxMTEy MzU5NTlaMBsxGTAXBgNVBAMTEGR1cmFibGUuMjBtaW4uY2gwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDyfr9x3H/+wqWcj5vDFI03nOdOqgozgTbG6u+B wy6F5YME+7qHR2ZesiVbSgdHpelpYCTwoFsjDRHEDVssWZyyyEc0tU7+OU6uxDaO 2TnV0Zbnlo5cVt8yojgXuE6J1y+h8Rnvug8oTLCHN5FePUbOaotntpEiw4njeAn3 s/zIlC/JtHFC6q+c9DZQLo7SiypDT8Tl5ThaCerK09klsLDGA6q48vKCutjGBxcv bEOXZESyk0t7OiKam/RiI6mM7IyA/3xZHsPjDpb4lVTkSx/qs4c7O2hJqCOA7cZ2 7jUHm72GY0xhwsRidmBPRX+vNzPJK8va/ZSdtUOunrs0RyGPAgMBAAGjggTfMIIE 2zAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQUy6X6 vCAo79B8Qgg+M5svlmYW/U0wggINBgNVHREEggIEMIICAIIQZHVyYWJsZS4yMG1p bi5jaIIPKi5iZXRhLjIwbWluLmNoghB3d3cuMjBtaW51dGVzLmNoghR3d3cubGVt YXRpbi4yMG1pbi5jaIIMd3d3LjIwbWluLmNoghMqLnd3dy5iZXRhLjIwbWluLmNo ggwyMG1pbnV0ZXMuY2iCEioud3d3LjIwbWludXRlbi5jaIISKi53d3cuMjBtaW51 dGVzLmNoghJkdXJhYmxlLmxlbWF0aW4uY2iCFioud3d3LmxlbWF0aW4uMjBtaW4u Y2iCEXd3dy5iZXRhLjIwbWluLmNogg4qLnd3dy4yMG1pbi5jaIIUKi5kdXJhYmxl LmxlbWF0aW4uY2iCDWJldGEuMjBtaW4uY2iCDSoudjEuMjBtaW4uY2iCCDIwbWlu LmNogg4qLjIwbWludXRlcy5jaIIKbGVtYXRpbi5jaIIQd3d3LjIwbWludXRlbi5j aIIMKi5sZW1hdGluLmNoggwyMG1pbnV0ZW4uY2iCECoud3d3LmxlbWF0aW4uY2iC EioubGVtYXRpbi4yMG1pbi5jaIIOd3d3LmxlbWF0aW4uY2iCEiouZHVyYWJsZS4y MG1pbi5jaIILdjEuMjBtaW4uY2iCEGxlbWF0aW4uMjBtaW4uY2iCCiouMjBtaW4u Y2iCDiouMjBtaW51dGVuLmNoMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr BgEFBQcDAQYIKwYBBQUHAwIwPQYDVR0fBDYwNDAyoDCgLoYsaHR0cDovL2NybC5z Y2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWItMS5jcmwwEwYDVR0gBAwwCjAIBgZn gQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5z Y2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2Nh MWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMIIBfgYK KwYBBAHWeQIEAgSCAW4EggFqAWgAdgCt9776fP8QyIudPZwePhhqtGcpXc+xDCTK hYY069yCigAAAX21o6XTAAAEAwBHMEUCIG2eQ4n+eZr9HRywGmY0uZBm895tXrmU RvojUJxgGa4gAiEAyCguGgcP8kFd6bYa9tJgEyp8ytgZeVQHbmoUw+Lr1bUAdgA1 zxkbv7FsV78PrUxtQsu7ticgJlHqP+Eq76gDwzvWTAAAAX21o6W/AAAEAwBHMEUC IQCAO783zrfoQIwPJJguBnFSoBLZa+r23s0FJpqDKNn2fQIgBfEIYuTH43J8P7qs 0WFk/k9TFFZ513UUzXqgyv6opm0AdgCzc3cH4YRQ+GOG1gWp3BEJSnktsWcMC4fc 8AMOeTalmgAAAX21o6XiAAAEAwBHMEUCIAK1Y2OfBOZTv5xMXSuFiAovv6+d2v0A CzrXzQRg8WORAiEAm4QCxanjXouJojBtxZAyoB+u8TPuIdZm8tCOk1+gZPowDQYJ KoZIhvcNAQELBQADggEBAEoC6e2eN27zf3SDP8/5jQUeqsRX+bAtq9Dbu1MN3wGM lEXs32QE1N1CLP/14JoVmKe8qLM9QXowUzDEKmo4ecEqHOBLIFK9AQzjdcwv892E 91R47UVALZnmXq+0G7WC5w0lh8VXJI7DYbJoYnF/4OfM24UidKWyj9W3f4EzSj/k zbG1lD8TYlO+GHGiIFtLmGxpMw3Y2AbYupYVRE8x9iTaBYpnWcMdTg/w0nybP2vx gZrd6cGeimTq/XlRh4SATCkN+zYiwgBYpXfMf8Ovq+sl7ppHpbrhOWBT/FdaS9TW gNQbAePS8mXbNkitBaVDP0Gu/Wqwqi7JEOXTsn41+R0= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8n6/cdx//sKlnI+bwxSN N5znTqoKM4E2xurvgcMuheWDBPu6h0dmXrIlW0oHR6XpaWAk8KBbIw0RxA1bLFmc sshHNLVO/jlOrsQ2jtk51dGW55aOXFbfMqI4F7hOidcvofEZ77oPKEywhzeRXj1G zmqLZ7aRIsOJ43gJ97P8yJQvybRxQuqvnPQ2UC6O0osqQ0/E5eU4WgnqytPZJbCw xgOquPLygrrYxgcXL2xDl2REspNLezoimpv0YiOpjOyMgP98WR7D4w6W+JVU5Esf 6rOHOztoSagjgO3Gdu41B5u9hmNMYcLEYnZgT0V/rzczySvL2v2UnbVDrp67NEch jwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 12285745548618980997566487004099531633 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-11 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'durable.20min.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30612171486789042999127591864938270020781148697703588921688880049405626146429987811934278263526988066003384220550356948868711563849315456702608547080867837261981539942846302344116997708832300940306529888525211849089186679205184906733928014864713466238805754856837990735360761224240205307019323647111639612894911550912715090646279732900833760583924624505652089680693047610916074553402095708166408360060389805069224681228114924868258017433988529580291417999187384994436111783095577042300959434730002036377997770152330952416617075858735639671840962160035867448049783058156738075609122820079711027937001549563543809368463 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cba5fabc2028efd07c42083e339b2f966616fd4d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (516 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'durable.20min.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beta.20min.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.20minutes.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lematin.20min.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.20min.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.beta.20min.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '20minutes.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.20minuten.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.20minutes.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'durable.lematin.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.lematin.20min.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beta.20min.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.20min.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.durable.lematin.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.20min.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.v1.20min.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '20min.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.20minutes.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lematin.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.20minuten.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lematin.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '20minuten.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.www.lematin.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lematin.20min.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lematin.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.durable.20min.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v1.20min.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lematin.20min.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.20min.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.20minuten.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 0168007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000017db5a3a5d3000004030047304502206d9e4389fe799afd1d1cb01a6634b99066f3de6d5eb99446fa23509c6019ae20022100c8282e1a070ff2415de9b61af6d260132a7ccad8197954076e6a14c3e2ebd5b500760035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c0000017db5a3a5bf0000040300473045022100803bbf37ceb7e8408c0f24982e067152a012d96beaf6decd05269a8328d9f67d022005f10862e4c7e3727c3fbaacd16164fe4f53145679d77514cd7aa0cafea8a66d007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a0000017db5a3a5e20000040300473045022002b563639f04e653bf9c4c5d2b85880a2fbfaf9ddafd000b3ad7cd0460f163910221009b8402c5a9e35e8b89a2306dc59032a01faef133ee21d666f2d08e935fa064fa . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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