*.maven.io

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0a:94:21:dd:c7:c9:36:13:34:a4:17:b1:89:a3:db:8e was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.maven.io

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:94:21:dd:c7:c9:36:13:34:a4:17:b1:89:a3:db:8e
Serial Number (int): 14061426783683915781864786831142542222
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 38:70:2e:0d:c4:9b:42:73:1c:e6:a2:26:19:d2:ca:e2:33:95:61:f6
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): f7:81:66:f1:d1:e8:e6:80:39:8c:22:20:03:9d:09:8c:ad:22:34:f7
Fingerprint (sha256): 08:23:47:0c:f2:8f:e3:ee:61:75:50:70:82:2e:17:db:fe:b3:95:9d:2f:1d:6d:a1:e5:be:5c:c4:2d:73:2c:0f

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.maven.io

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.maven.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.maven.io
maven.io

Other certificates including the domain name maven.io

(limited to 100 certificates)
maven.io
cmp.channelpartner.de
dns-vetting1m.map.fastly.net
*.maven.io
automaven.io
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
consent.planetradio.co.uk
dns-vetting1m.map.fastly.net
*.maven.io
saymedia2.map.fastly.net
dns-vetting1m.map.fastly.net
dns-vetting1m.map.fastly.net
dns-vetting1m.map.fastly.net
themaven.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
*.maven.io
saymedia2.map.fastly.net
dns-vetting1m.map.fastly.net
dns-vetting1m.map.fastly.net
saymedia2.map.fastly.net
cmp.computerworld.com
stable.maven.io
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
dns-vetting1m.map.fastly.net
mms.sp-prod.net
cmp.channelpartner.de
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
saymedia2.map.fastly.net
dns-vetting1m.map.fastly.net
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
*.maven.io
*.maven.io
leapfrog-ssl-49.gcs-web.com
dns-vetting1m.map.fastly.net
saymedia2.map.fastly.net
*.maven.io
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
saymedia2.map.fastly.net
automaven.io
automaven.io
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
*.maven.io
saymedia2.map.fastly.net
*.maven.io
saymedia2.map.fastly.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
cmp.computerworld.com
saymedia2.map.fastly.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
dns-vetting1m.map.fastly.net
dns-vetting1m.map.fastly.net
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
saymedia2.map.fastly.net
cmp.computerworld.com
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
*.maven.io
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
dns-vetting1m.map.fastly.net
leapfrog-ssl-49.gcs-web.com
cmp.academics.at
dns-vetting1m.map.fastly.net
*.mavencoalition.io
cmp.computerworld.com
cmp.academics.at
*.maven.io
*.maven.io
cmp.academics.at
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
*.maven.io
dns-vetting1m.map.fastly.net
saymedia2.map.fastly.net

Certificate

The complete raw certificate details for *.maven.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hSPIsVYR1TqW26haoS2
FgTh2oYgDO6TiqKEuoSgFGhzjMyhScnRtK8jbyGgf6qKv8nzUQywd0fwCucJIlVU
6p1FM9EF1ezgMjG7H5k2jOBOdOpcXt8pgpkZ/32TLXPuC3tsOmhdMiMJVOLK+t9Y
l6eLJGNnT1wSOMH4TnHCB6bH2urU18TH+4Jg3TV/RtFvKpUP73ZpB3tplHwh7ioc
OXUsQ6wsj5zbjFTjnWMXkCnXZkYJ5V2XnhShlbIAgf/D1dJzbIOo5eg+ZfVBUvam
+dsZOmEiSbZq2kkCkdoDI1NBKFybdgYQi0WM5iMUGpNWBpJZRBJgXLgpfaVW/9Tg
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14061426783683915781864786831142542222
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.maven.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27025135344786036896728709648016330089601236537743816588107267506983446741988123560303241551667252752096814832705835271208534985729186897501476974658493776325207781795759935314969058266932481427911570208006441262627659967947141643463031288860871148340835446631184190501944387250946424405747507159388068769555002197837095388040371202997793968120516253543699082679130885109182575424431231850481523859038437879159526552766538223823881379152302172445967306410364402926139996807770475864333231518631894241576451305118142450712908135957676254168608995801504061120862708342488004208828509508706524646745601050339776233005201
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							38702e0dc49b42731ce6a22619d2cae2339561f6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maven.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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