cio-des-jahres.de
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 0f:ce:0e:0b:eb:e6:2f:e7:07:b7:96:ce:4b:ee:ea:94 was issued on by Amazon.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=cio-des-jahres.de
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0f:ce:0e:0b:eb:e6:2f:e7:07:b7:96:ce:4b:ee:ea:94Serial Number (int): 21008317987883407824834147591048325780
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 19:40:c5:d4:bf:28:c9:f9:9e:29:24:48:5d:29:dc:c3:ef:bb:76:24
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 9d:a0:59:30:a6:28:15:01:32:5c:08:62:49:34:b8:ae:99:90:05:a7
Fingerprint (sha256): ea:d9:ee:59:7c:ec:e7:09:5c:6c:72:60:ce:cd:70:e6:57:b7:39:96:16:00:f4:a0:b8:93:5b:d0:0e:c0:c2:b5
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate cio-des-jahres.de
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cio-des-jahres.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cio-des-jahres.de
www.cio-des-jahres.de
cf.microsites-de.idg.zone
www.cio-des-jahres.de
cf.microsites-de.idg.zone
Other certificates including the domain name cio-des-jahres.de
(limited to 100 certificates)
cio-des-jahres.de
www.mobile-enterprise-day.de
cio-des-jahres.de
10jahre.cio.de
cio-des-jahres.de
10jahre.cio.de
cio-des-jahres.de
beta.cio-des-jahres.de
10jahre.cio.de
cio-des-jahres.de
bewerbung.cio-des-jahres.de
10jahre.cio.de
10jahre.cio.de
10jahre.cio.de
10jahre.cio.de
10jahre.cio.de
www.mobile-enterprise-day.de
10jahre.cio.de
10jahre.cio.de
bewerbung.cio-des-jahres.de
10jahre.cio.de
cio-des-jahres.de
10jahre.cio.de
10jahre.cio.de
10jahre.cio.de
10jahre.cio.de
10jahre.cio.de
10jahre.cio.de
cio-des-jahres.de
10jahre.cio.de
www.mobile-enterprise-day.de
beta.cio-des-jahres.de
10jahre.cio.de
www.mobile-enterprise-day.de
www.mobile-enterprise-day.de
cio-des-jahres.de
10jahre.cio.de
cio-des-jahres.de
10jahre.cio.de
cio-des-jahres.de
beta.cio-des-jahres.de
10jahre.cio.de
cio-des-jahres.de
bewerbung.cio-des-jahres.de
10jahre.cio.de
10jahre.cio.de
10jahre.cio.de
10jahre.cio.de
10jahre.cio.de
www.mobile-enterprise-day.de
10jahre.cio.de
10jahre.cio.de
bewerbung.cio-des-jahres.de
10jahre.cio.de
cio-des-jahres.de
10jahre.cio.de
10jahre.cio.de
10jahre.cio.de
10jahre.cio.de
10jahre.cio.de
10jahre.cio.de
cio-des-jahres.de
10jahre.cio.de
www.mobile-enterprise-day.de
beta.cio-des-jahres.de
10jahre.cio.de
www.mobile-enterprise-day.de
Certificate
The complete raw certificate details for cio-des-jahres.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGADCCBOigAwIBAgIQD84OC+vmL+cHt5bOS+7qlDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTI0MDExNzAwMDAwMFoXDTI1MDIxNTIzNTk1OVowHDEa MBgGA1UEAxMRY2lvLWRlcy1qYWhyZXMuZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDJ9qprkfdLyZSStG/6ecfsN+UfewlN4eds2/ClWbercylXqwJQ v5cDwUnE3EZ1A0Mp+A3eT6YzKT/JRJ+9UbE01WQepltNnjJRZv3sjP9IOf1siYg6 2xDHRt4iJVhyJg4B9QI53hMXTPMlogDV7DY7YHbLESsCLHGCZrZ03iRrVVeI/gL7 meo3VClnv9sYb7WJftXJRiJdrPJUbj3Y4ZmXOSE44Zm93uUgHW0+T8zCx6BaCnqK SfXNi9GFrSqlJg4xx4a4/A/aUPanwbAs8fTnhz368l7y+1f0LXzvgU8QeB3C+Iqi oynMu9rHeD3rQtMLsg2RqYI2PZVRQE/AAnkhAgMBAAGjggMcMIIDGDAfBgNVHSME GDAWgBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQUGUDF1L8oyfmeKSRI XSncw++7diQwTgYDVR0RBEcwRYIRY2lvLWRlcy1qYWhyZXMuZGWCFXd3dy5jaW8t ZGVzLWphaHJlcy5kZYIZY2YubWljcm9zaXRlcy1kZS5pZGcuem9uZTATBgNVHSAE DDAKMAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH AwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDIu YW1hem9udHJ1c3QuY29tL3IybTAyLmNybDB1BggrBgEFBQcBAQRpMGcwLQYIKwYB BQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAyLmFtYXpvbnRydXN0LmNvbTA2BggrBgEF BQcwAoYqaHR0cDovL2NydC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIuY2Vy MAwGA1UdEwEB/wQCMAAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB2AM8RVu7V Lnyv84db2Wkum+kacWdKsBfsrAHSW3fOzDsIAAABjRVKQC4AAAQDAEcwRQIgGIxT Q/ZuY7s8VSCyfS3o5a0W8QOD7nA+ktwIfvV4IKsCIQCagrPwDM5zlyKBLHyw7Qg/ fu+2p5zGnRONiV9bM6Ig4AB3AH1ZHhLheCp7HGFnfF79+NCHXBSgTpWeuQMv2Q6M Lnm4AAABjRVKQBoAAAQDAEgwRgIhAIrX/qHiNC78Gq9HCqFHoEDOPk0UVbYXp4IQ yaThRTILAiEA9GWJBbJrnBrOKEs/8IoBX7b2DoF+86Nfcx0fsc3SYhkAdQDm0jFj QHeMwRBBBtdxuc7B0kD2loSG+7qHMh39HjeOUAAAAY0VSkBHAAAEAwBGMEQCIH/z iQimYVDhgdqai4MP2wjrgRFHnMWYDK27Fd5BIx5jAiAKkc9FsGlID6AN7kiWOsMq Xcd16N2TLaGiLCzn413y1DANBgkqhkiG9w0BAQsFAAOCAQEAEGVczvM6Y6/RvjP6 0ZYRzFkkiZujBemsc8am8SurWdnmouf799hTezVkWXCn7jPLImlPmhSVtzeSypEu mftPm8AhCLNJ2H9O13hv8Y/OXV3DnUzzvpYuc4Nv0bWLSyAhvcIDTjLegrzUZDtG mfpWPfe8EZYCvwQ7W7o1qS/MJcPGiciCID3uS7sLRdZmR2Vh4okTkWFUzEvhtxjU QokxSLZXIP6opYlfxrP1CxCIKl3v/fwALL5Bnt/C7lVmNRblRpXiNcA6Wbp+P6J/ mRFYqZy+ULtewMm8RN+X+uNCsFLbKOxYI5WghDzY6eWbTbJ7SywqQHUzFKejH8AO CdvJDQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyfaqa5H3S8mUkrRv+nnH 7DflH3sJTeHnbNvwpVm3q3MpV6sCUL+XA8FJxNxGdQNDKfgN3k+mMyk/yUSfvVGx NNVkHqZbTZ4yUWb97Iz/SDn9bImIOtsQx0beIiVYciYOAfUCOd4TF0zzJaIA1ew2 O2B2yxErAixxgma2dN4ka1VXiP4C+5nqN1QpZ7/bGG+1iX7VyUYiXazyVG492OGZ lzkhOOGZvd7lIB1tPk/MwsegWgp6ikn1zYvRha0qpSYOMceGuPwP2lD2p8GwLPH0 54c9+vJe8vtX9C1874FPEHgdwviKoqMpzLvax3g960LTC7INkamCNj2VUUBPwAJ5 IQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 21008317987883407824834147591048325780 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-17 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-15 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cio-des-jahres.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25495534690179421106797667089083730272777264354515644113093599538540885855799415362833933252544358238819886805638906364810326569022038949122661290913072022570749234350924257627397010628461006749411118239183405989181353595650454301212493020057565134393919305388938332492108402095781354253982789690498794420187343253640535546857692350377390320319593086208389495015695582815682694797063504704093861690688097738481624951289911643967690733474155164345361524795834350158738026917039087978818797545786558502344401251738511430254700654795191545474009795158601168408605022220955383461902766543168261123450558889304601068206369 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 1940c5d4bf28c9f99e2924485d29dcc3efbb7624 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (71 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cio-des-jahres.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cio-des-jahres.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cf.microsites-de.idg.zone' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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