woodmagazine.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0d:b2:3f:a6:7f:5c:ff:f6:9b:d0:cd:c6:4f:75:e2:54 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=woodmagazine.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:b2:3f:a6:7f:5c:ff:f6:9b:d0:cd:c6:4f:75:e2:54
Serial Number (int): 18205483769120139264039912962226774612
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 1d:1d:99:d7:c5:d6:11:85:65:b6:be:0d:a6:98:9d:44:07:dd:a1:d7
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 58:91:f5:97:de:43:f5:29:ae:92:9e:ee:44:ed:bc:4c:05:1b:eb:fd
Fingerprint (sha256): 1c:1d:75:19:c8:23:f4:3f:d9:d8:8e:6a:e6:40:d8:bf:1b:fb:b4:d4:e0:24:52:cf:22:e5:16:58:6b:8b:00:74

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate woodmagazine.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for woodmagazine.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

woodmagazine.com
*.woodmagazine.com

Other certificates including the domain name woodmagazine.com

(limited to 100 certificates)
payments.meredith.com
qa4.ugc.marthastewart.com
woodmagazine.com
*.secure.meredith.com
secure.meredith.com
my.meredith.com
sli.dailypaws.com
sli.dailypaws.com
a-ue1.mydomaine.com
payments.meredith.com
qa4.ugc.marthastewart.com
specialoffers.meredith.com
sli.dailypaws.com
*.agriculture.com
dev.secure.meredith.com
sli.dailypaws.com
secure.meredith.com
mywedding.com
secure.meredith.com
mywedding.com
qa2.ugc.marthastewart.com
a-uw2.mydomaine.com
mdp.api.meredith.com
woodmagazine.com
secure.meredith.com
a-ue1.mydomaine.com
qa4.ugc.marthastewart.com
ugc.marthastewart.com
secure.meredith.com
socialize.woodmagazine.com
test.payments.meredith.com
secure.meredith.com
sli.dailypaws.com
a-ue1.mydomaine.com
qa3.ugc.marthastewart.com
ugc.marthastewart.com
sli.dailypaws.com
test.secure.meredith.com
qa3.ugc.marthastewart.com
links.allrecipes.com
sli.dailypaws.com
agriculture.com
cr-iframe.magazine.store
*.woodmagazine.com
secure.meredith.com
payments.meredith.com
*.secure.meredith.com
secure.meredith.com
qa3.ugc.marthastewart.com
www.agriculture.com
cr-iframe.magazine.store
agriculture.com
api.meredith.com
payments.meredith.com
ugc.marthastewart.com
qa2.ugc.marthastewart.com
*.secure.meredith.com
secure.meredith.com
ugc.marthastewart.com
my.meredith.com
test.payments.meredith.com
qa3.ugc.marthastewart.com
sli.dailypaws.com
my.woodmagazine.com
secure.meredith.com
sli.dailypaws.com
qa3.ugc.marthastewart.com
sli.dailypaws.com
cr-iframe.magazine.store
secure.meredith.com
mywedding.com
woodmagazine.com
secure.woodmagazine.com
*.agriculture.com
sli.dailypaws.com
qa2.ugc.marthastewart.com
qa2.ugc.marthastewart.com
woodmagazine.com
*.secure.meredith.com
my.woodmagazine.com
sli.dailypaws.com
ugc.marthastewart.com
a-ue1.shape.com
origin-cr-iframe.magazine.store
woodmagazine.com
a-ue1.mydomaine.com
qa3.ugc.marthastewart.com
secure.meredith.com
qa3.ugc.marthastewart.com
*.health.com
woodmagazine.com
qa2.ugc.marthastewart.com
qa4.ugc.marthastewart.com
secure.woodmagazine.com
my.meredith.com
*.secure.meredith.com
*.secure.meredith.com
secure.meredith.com
a-ue1.shape.com
dev.secure.meredith.com

Certificate

The complete raw certificate details for woodmagazine.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkmQmJJDmJjVUltS5f84l
xq0t3cTQLw9wYYuI0Nc0rujhNrvMtqBZAMPvGBJlx6agrDy1wX1tOPBNp+uHmzc0
H0mZ2KNYfnJ+/6g3j/sDdlUUx+ys5aaX1nTofpqHwhLFpiEJPu4lUn6xlcotvmxr
9a5DG9TeUtwjj/FdTafIKVyN3BVeYXt+S8WeJEEuTSVZo12gplXTpcpXoyRmkv7f
P5xQwN8S/sHGMwv0hi+F0XwhXCjQ+AmlFCkK75bLkY1n5kUN3mZUtylRee2lqmUV
lMlbLWga1atrW/wyMa7jzAiGM4IGvp8xBfdLRE4TkFG+NWqDe0vl4fL3AVZcKrA2
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18205483769120139264039912962226774612
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'woodmagazine.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18480177835318183537454753987433677408721692264244927485599468093381355527336151720879001025103053070812425398270220830859144148973468872058364800656372127615297206776706841644730144199665453919119947809105343757318133971863808354508820249495712199567887083185322305467458825508442017769103252625241111102610457689556941423728049857937105890920539940130231142429374762415006684665841232515788824817408842952729289522310153158087009819214284542596325471513439288060618669668558643479625393128853992024686222209588137967118667542516205008401234166868849922082458476928176456376822313369268901643180809754166101074261513
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1d1d99d7c5d6118565b6be0da6989d4407dda1d7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.woodmagazine.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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