static.cx.metamask.io

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 01:24:17:94:92:3d:bc:d1:11:b4:e4:4f:18:94:21:be was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=static.cx.metamask.io

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:24:17:94:92:3d:bc:d1:11:b4:e4:4f:18:94:21:be
Serial Number (int): 1516628949140553337529678494306673086
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 8f:c0:47:77:e6:16:85:f8:37:50:9a:a4:5b:09:fc:98:ee:66:ba:b2
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 0f:4c:36:37:6a:36:59:53:67:24:39:ee:40:37:73:62:d0:2a:04:42
Fingerprint (sha256): 0b:45:32:2f:b6:8f:0f:7a:8e:55:30:e5:f8:e5:d7:57:b6:74:a5:26:be:67:6f:56:42:6c:d5:57:a4:5a:cf:28

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate static.cx.metamask.io

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for static.cx.metamask.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

static.cx.metamask.io
www.static.cx.metamask.io

Other certificates including the domain name metamask.io

(limited to 100 certificates)
blog.metamask.io
*.metamask.io
echo1.lab.metamask.io
metamask.io
metamask.io
echo1.lab.metamask.io
metamask.io
echo1.lab.metamask.io
api.cx.metamask.io
fwd.metamask.io
testfaucet.metamask.io
faucet.metamask.io
metamask.io
mobile.metamask.io
echo1.lab.metamask.io
wallet.metamask.io
home.metamask.io
rpc.metamask.io
metamask.io
echo1.lab.metamask.io
faucet.metamask.io
support.metamask.io
docs.metamask.io
wallet.metamask.io
support.metamask.io
home.metamask.io
docs.cx.metamask.io
static.cx.metamask.io
mobile.metamask.io
admin.metamask.io
fwd.metamask.io
fwd.metamask.io
metamask.io
metamask.io
support.metamask.io
docs.metamask.io
support.metamask.io
support.metamask.io
*.metamask.io
metamask.io
faucet.metamask.io
telemetry.lab.metamask.io
swag.metamask.io
home.metamask.io
metamask.io
fund-loss-investigation.metamask.io
mobile.metamask.io
metamask.io
stage.portfolio.metamask.io
blog.metamask.io
fund-loss-investigation.metamask.io
telemetry.lab.metamask.io
faucet.metamask.io
*.metamask.io
support.metamask.io
blog.metamask.io
*.metamask.io
swag.metamask.io
metamask.io
telemetry.lab.metamask.io
blog.metamask.io
faucet.metamask.io
faucet.metamask.io
snaps.metamask.io
faucet.metamask.io
mobile.metamask.io
learn.metamask.io
www.metamask.io
support.metamask.io
*.metamask.io
metamask.io
mobile.metamask.io
metamask.io
www.metamask.io
faucet.metamask.io
ipfs.lab.metamask.io
*.metamask.io
support.metamask.io
fwd.metamask.io
metamask.io
mobile.metamask.io
activity.metamask.io
community.metamask.io
echo1.lab.metamask.io
*.metamask.io
faucet.metamask.io
testfaucet.metamask.io
faucet.metamask.io
metamask.io
community.metamask.io
community.metamask.io
faucet.metamask.io
blog.metamask.io
learn.metamask.io
mobile.metamask.io
echo1.lab.metamask.io
mobile.metamask.io
metamask.io
wallet.metamask.io
ipfs.lab.metamask.io

Certificate

The complete raw certificate details for static.cx.metamask.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF8zCCBNugAwIBAgIQASQXlJI9vNERtORPGJQhvjANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAxMB4XDTIzMDUxOTAwMDAwMFoXDTI0MDYxNjIzNTk1OVowIDEe
MBwGA1UEAxMVc3RhdGljLmN4Lm1ldGFtYXNrLmlvMIIBIjANBgkqhkiG9w0BAQEF
AAOCAQ8AMIIBCgKCAQEAqdxHLRQTAluNHtrI/LW+BnitfNFN2sfJ2/uLAX3FzH4F
46cMRCHOWNjykUjgMmljmExIZAN8ccEHlJcKKQutILE1OYTUG+4ryoGgPwUI52wD
cu1A2VKiwHLgMe3S7XRibFb+2qZztGOP/qwj8o9kF+oPLnu5D6uOX2jyg51YdTA8
HLJwuD4fOw9JGMTZhZy/TEeJP5KIQR4LMN3j2DVsbXrze7PYktOYOFJ1yg8oQ8EL
S62saPtmvP5mcAoawocFH7mv1hnSQstyOn8H8RqxucIXOS7awIqLMzbcuyLhKu61
5fVprg7CdHCf8OvjuJeCAQgY+0ZTaA/8VJBheHwj4wIDAQABo4IDCzCCAwcwHwYD
VR0jBBgwFoAUgbgOY4qJEhjl+js7UJWf5uWQE4UwHQYDVR0OBBYEFI/AR3fmFoX4
N1CapFsJ/JjuZrqyMDsGA1UdEQQ0MDKCFXN0YXRpYy5jeC5tZXRhbWFzay5pb4IZ
d3d3LnN0YXRpYy5jeC5tZXRhbWFzay5pbzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6
Ly9jcmwucjJtMDEuYW1hem9udHJ1c3QuY29tL3IybTAxLmNybDATBgNVHSAEDDAK
MAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9v
Y3NwLnIybTAxLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2Ny
dC5yMm0wMS5hbWF6b250cnVzdC5jb20vcjJtMDEuY2VyMAwGA1UdEwEB/wQCMAAw
ggGABgorBgEEAdZ5AgQCBIIBcASCAWwBagB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8
vOzew1FIWUZxH7WbAAABiDVH4SUAAAQDAEcwRQIgF8J/TyDffnEs/f2yF8mzfQrA
jM0sFbzRk4naEYk1v0wCIQD0EsGz+Ca+mwl2mBVdIK0PEHolXchW2OXIl2m6P7rx
EgB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABiDVH4V0AAAQD
AEgwRgIhAJDV3VmKqRpvTsqIqJOZFgS70/4ziduSN0pR4AvYQozzAiEAnR50fL+/
ptBwDWehHrnykR9avNeFfAN73pDO3n0INnUAdwDatr9rP7W2Ip+bwrtca+hwkXFs
u1GEhTS9pD0wSNf7qwAAAYg1R+ErAAAEAwBIMEYCIQCJ6oimJXGSiPEMndTiDFOa
iFEnmCG30EhGD7zlzs9GCQIhAIf9qS0BwurJMa7pKtAgrCCM/jkdywS7/9tOkC8U
7gmWMA0GCSqGSIb3DQEBCwUAA4IBAQArMECIiKdWvdYGUbN4lSSApLBKWXyRVDCp
mEzKoXQVpw1XkbzBjIoC47cSVAhisiLERaP60wPfGv0vRgVr1XICW+7mR51uxORH
TRmGvCaQuB3MknYcsCFmkhDAq+WNo+M281xWqlM1l+78QaDSA6vfPHJt56mxwSaY
TbuYYWQqgcsBCMWlOoyqpR3XA1rNQ6T7DM9/43MMHiHBRirk5rHdh7OlaETnTgKw
CFcrUhiSOCOrO9Owqmr7yRZK5Ri1wU9fbbTGJoNj/eXYM+2YV5WP+SxZsCtmbx28
4fsWgkGqeNGPWKSr7pbOdf9Dzl0vn4pmsOlkrVBEHIo+9bmHBb7a
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdxHLRQTAluNHtrI/LW+
BnitfNFN2sfJ2/uLAX3FzH4F46cMRCHOWNjykUjgMmljmExIZAN8ccEHlJcKKQut
ILE1OYTUG+4ryoGgPwUI52wDcu1A2VKiwHLgMe3S7XRibFb+2qZztGOP/qwj8o9k
F+oPLnu5D6uOX2jyg51YdTA8HLJwuD4fOw9JGMTZhZy/TEeJP5KIQR4LMN3j2DVs
bXrze7PYktOYOFJ1yg8oQ8ELS62saPtmvP5mcAoawocFH7mv1hnSQstyOn8H8Rqx
ucIXOS7awIqLMzbcuyLhKu615fVprg7CdHCf8OvjuJeCAQgY+0ZTaA/8VJBheHwj
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1516628949140553337529678494306673086
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'static.cx.metamask.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21442896685082021827329863726552738080336297063580689791269133508442296448044113709726221058584937458145357722640186850845696015800271457669364493846530935586232220323198772365060965362727293953726410585496757820843596078014871847692529159644198063734087437427035084966330220556966290817188428895407316585259563870405448320780882530493641535281382022906020876320987991261505454285539326756865872274525642371822098945252486473783215476728407898435211435671147009216454983607901517855256802465685877737382429048604282827101053410190640465087762932621147300058229989201185864343133631933379660043968593137283827874145251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8fc04777e61685f837509aa45b09fc98ee66bab2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.cx.metamask.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.static.cx.metamask.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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