meredith.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 04:12:43:5f:e7:62:2c:0e:6e:b7:1a:5c:01:f5:7e:cf was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=meredith.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:12:43:5f:e7:62:2c:0e:6e:b7:1a:5c:01:f5:7e:cf
Serial Number (int): 5411739846321893955369735105809841871
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 3b:e9:bd:16:15:da:ae:04:79:59:3c:2a:09:8f:4e:88:e3:1b:7f:22
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 44:1d:f4:f6:03:b6:fd:29:a0:21:15:cb:b2:59:67:4a:22:0b:ae:f8
Fingerprint (sha256): 03:5a:ea:1d:44:18:d5:cf:c1:2e:f5:2c:67:c6:29:c3:73:50:4b:42:4e:95:f5:81:d7:a6:49:a5:e2:d5:43:4a

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate meredith.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for meredith.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

meredith.com
*.meredith.com

Other certificates including the domain name meredith.com

(limited to 100 certificates)
wpm.ccmp.eu
payments.meredith.com
vcacontent.meredith.com
secure.meredith.com
dyncat.cip.meredith.com
*.meredith.com
secure.static.meredith.com
*.secure.meredith.com
secure.meredith.com
matrixdev.meredith.com
meredith.com
*.meredith.com
my.meredith.com
test.secure.static.meredith.com
meredith.com
images.meredith.com
citrix.meredith.com
wpm03.eccmp.com
*.meredith.com
5713573250596864-fe4.pantheonsite.io
images.meredith.com
munkireport.meredith.com
payments.meredith.com
meredith.com
woodwing.meredith.com
secure.static.meredith.com
*.meredith.com
es.meredith.com
*.woodwing.meredith.com
kptvoasis.meredith.com
www.meredith.com
webmail.meredith.com
wpm.ccmp.eu
specialoffers.meredith.com
splunk.meredith.com
secure.static.meredith.com
wpm03.eccmp.com
intranet.meredith.com
akamai-san192.exacttarget.com
secure.meredith.com
wpm.ccmp.eu
*.meredith.com
360.meredith.com
wpm.ccmp.eu
*.images.meredith.com
quizler.meredith.com
chrysler-stg.meredith.com
Dashboards.meredith.com
*.agriculture.com
dev.app.meredith.com
adobefrl.meredith.com
collabedge.meredith.com
go.meredith.com
dev.secure.meredith.com
*.meredith.com
5713573250596864-fe4.pantheonsite.io
*.meredith.com
*.meredith.com
360-auth.meredith.com
wpm03.eccmp.com
*.meredith.com
images.qa.shopnation.com
ise.meredith.com
wpm.ccmp.eu
secure.static.meredith.com
secure.meredith.com
images.meredith.com
assets.meredith.com
*.elvis.meredith.com
accounts.bhg.com
accounts.bhg.com
*.meredith.com
*.meredith.com
LCS.MEREDITH.COM
5713573250596864-fe4.pantheonsite.io
5713573250596864-fe4.pantheonsite.io
wpm03.eccmp.com
*.elvis.meredith.com
origin-secure.meredith.com
secure.meredith.com
mywedding.com
origin-dev.secure.meredith.com
secure.meredith.com
admin-dev.meredith.com
mywedding.com
www.meredith.com
meredith.com
dev-theshop.meredith.com
mdp.api.meredith.com
wpm.ccmp.eu
secure.meredith.com
accounts.bhg.com
*.meredith.com
*.meredith.com
*.meredith.com
images.meredith.com
meredith.com
*.meredith.com
wpm03.eccmp.com
images.meredith.com

Certificate

The complete raw certificate details for meredith.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqrSP8O8EB6U6r2cGdhvJ
rXfvLk7pQc8z1urYbItIp8+2npKtObLUyoiZ4XBXn72CszyXYmq1F/XkybXhd2gt
9aarLsjgMX96ON/IgHhX3Q5v0732omIrEouFnevFaTrweSOdKSg5wF5iRlU5AZsO
QoWnsewKOFFfxjoZ3q/bJ4jvgr8Bl8tjVi44vUBwuLhBnJB6pmeNeevfWF4SqBmH
quC9EXF+05nFB3lLh1T9HvZlSQDIh1FdfSAgVmFj9Ot2b63whIM7yml4Ds2BO2w9
LOK+qciTkMkPO1jOVSAWC0X7Wsf8pRHRAyA6+9oB+7oqXhVqDzJaXG6L7oPnrqe5
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5411739846321893955369735105809841871
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'meredith.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21549550418132242276156699554054026396203331192301808516910366706082143862354928340996823277968782581265433045495742702709116786662363545886097899661962928146067651352818257155818792735408245960839502105936936304645098816603492365212444958858581714710507887855657820339768689813306825524110158689181775950171424760292683173218086418128928996108027344981413074324196914676880542492112734527278149648258125605408644063865560998881126102292344621472421322808054896977879175640476259837692815858215772826516987563977830743549570349486722673515528193460898020189151053758106445581677356604716394693104467877295130845624783
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3be9bd1615daae0479593c2a098f4e88e31b7f22
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meredith.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meredith.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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