*.meredithcorp.io

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 05:2a:a5:7f:a7:d5:7a:d0:32:a3:72:b3:9b:27:41:da was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.meredithcorp.io

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:2a:a5:7f:a7:d5:7a:d0:32:a3:72:b3:9b:27:41:da
Serial Number (int): 6867573158486361771133247982154498522
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: c1:d8:19:37:37:c7:cf:7c:cd:b0:5b:cb:bb:ef:65:52:15:31:8f:aa
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): f3:41:89:20:fc:18:57:6b:60:0f:9e:69:1c:1d:2d:5e:fb:c3:00:c5
Fingerprint (sha256): 08:f8:98:3b:a1:5d:05:26:1e:b6:30:15:c1:90:4c:b6:08:7b:ef:a1:3c:43:36:c0:92:19:45:6f:bd:fb:8c:2a

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.meredithcorp.io

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.meredithcorp.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.meredithcorp.io
meredithcorp.io

Other certificates including the domain name meredithcorp.io

(limited to 100 certificates)
shared-services.meredithcorp.io
*.format-manager.meredithcorp.io
meredithcorp.io
meredithcorp.io
feeds.meredithcorp.io
*.meredithcorp.io
stage.authzadmin.meredithcorp.io
ugcuploader.meredithcorp.io
profiles-swagger.meredithcorp.io
*.dsa.meredithcorp.io
dsar.meredithcorp.io
*.cms.meredithcorp.io
meredithcorp.io
meredithcorp.io
splunk.meredithcorp.io
*.video.meredithcorp.io
feeds.meredithcorp.io
*.accountservices.meredithcorp.io
meredithcorp.io
syndication-stage.meredithcorp.io
*.meredithcorp.io
applenews.meredithcorp.io
*.meredithcorp.io
pollsquiz.meredithcorp.io
user-activity.meredithcorp.io
meredithcorp.io
*.format-manager.meredithcorp.io
*.meredithcorp.io
*.meredithcorp.io
atg-reconciliation.meredithcorp.io
stamp.meredithcorp.io
meredithcorp.io
applenews.meredithcorp.io
user.meredithcorp.io
*.accountservices.meredithcorp.io
ui.meredithcorp.io
*.dsa.meredithcorp.io
aws-accounts-viewer.meredithcorp.io
*.meredithcorp.io
email-reputation.meredithcorp.io
registration.meredithcorp.io
feeds.meredithcorp.io
segment.meredithcorp.io
*.pollsquiz.meredithcorp.io
formatmanager.meredithcorp.io
ui.meredithcorp.io
*.meredithcorp.io
meredithcorp.io
stage.feeds.meredithcorp.io
legacy-images.meredithcorp.io
*.ugc.meredithcorp.io
email-tools.meredithcorp.io
*.meredithcorp.io
feeds.meredithcorp.io
stage.authzadmin.meredithcorp.io
feeds.meredithcorp.io
meredithcorp.io
stage-ugcuploader.timeinc.com
stage.authzadmin.meredithcorp.io
meredithcorp.io
anf.meredithcorp.io
meredithcorp.io
feeds.meredithcorp.io
*.meredithcorp.io
newsletter.meredithcorp.io
stage-ugcuploader.timeinc.com
email-tools.meredithcorp.io
*.meredithcorp.io
pollsquiz.meredithcorp.io
meredithcorp.io
*.meredithcorp.io
ugcuploader.meredithcorp.io
feeds.meredithcorp.io
muse.meredithcorp.io
*.meredithcorp.io
*.meredithcorp.io
meredithcorp.io
meredithcorp.io
*.ugc.meredithcorp.io
*.accountservices.meredithcorp.io
meredithcorp.io
meredithcorp.io
*.feeds.meredithcorp.io
digitaledition.syndication-stage.meredithcorp.io
digitaledition.syndication.meredithcorp.io
meredithcorp.io
meredithcorp.io
meredithcorp.io
anf.meredithcorp.io
c360-scheduler.meredithcorp.io
*.video.meredithcorp.io
meredithcorp.io
munki.meredithcorp.io
user-saves.meredithcorp.io
dar.meredithcorp.io
*.ugc.meredithcorp.io
*.meredithcorp.io
meredithcorp.io
meredithcorp.io
*.accountservices.meredithcorp.io

Certificate

The complete raw certificate details for *.meredithcorp.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsqPXQqgTBs3Gin6f5Z1
c17SZP8YYFcYXZUP+YBmF4yWlMZnZPJyx30TXLNTWyWnMQBiHnjtmxnJoVHfBnqq
bh6N1qy950JrEFd1bquVEPNLAIBUPKSNvdFVap6uDgA4OFi7JhvNNb7F1YkWkkwq
JmhsPGazGxA48hdTSNBwE/Jzf7OgiWgrtnaI+4uGc/LMEa1/4Kn2VgXIuzjWerG1
Qfvfd1satuKA+rqVNM5irCbSXp2BtlKdLMQ+ofBH4h4YCcmBFkx7gF4oM7gIYA7X
Nj3yo4tmDZZMTdynePgciqEFRjkSOHMAlQ+CkhzpKHFy7eHg27Y5qmpIpLWkJY2k
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6867573158486361771133247982154498522
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.meredithcorp.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23075257569259875852266551950886084533133880957602927515774033884646248538907238434246978076610836147652608026828756329122599116797606731704762749375254240793050798933320087284935091623690803567267908186839527670006771854005906995789256693306338300228072303125812873149382074546805402467095767795891900733564917811007691148345167652822028108735149298049263239503785999433010556709685600793766010610920871215840093596702527101098989647196800189341810524475268279751039152034414507859773328249662688288262005922257490859361904336687775124579024347850359883413610392356291363610948252758576586957356045304103734361302247
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c1d8193737c7cf7ccdb05bcbbbef655215318faa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meredithcorp.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meredithcorp.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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