*.maven.io

Issued by Amazon

About this certificate

This digital certificate with serial number 06:3c:18:5a:12:ab:88:e8:82:01:69:bc:93:43:d7:2b was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.maven.io

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:3c:18:5a:12:ab:88:e8:82:01:69:bc:93:43:d7:2b
Serial Number (int): 8287399700364801841807723451260327723
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: d2:f9:0a:2c:d7:9d:62:98:65:bc:d4:59:1f:a6:db:d1:35:37:e5:10
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): ad:c3:78:a9:91:35:c4:53:cf:6a:cb:95:d0:0a:1f:87:47:6a:02:de
Fingerprint (sha256): 27:ee:d9:93:09:f6:8c:16:40:f3:25:d3:15:ba:18:f9:d7:a0:f1:71:84:77:f8:7c:a7:07:9b:ed:40:bf:51:68

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.maven.io

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.maven.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.maven.io
*.mavencoalition.io

Other certificates including the domain name maven.io

(limited to 100 certificates)
maven.io
cmp.channelpartner.de
dns-vetting1m.map.fastly.net
*.maven.io
automaven.io
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
consent.planetradio.co.uk
dns-vetting1m.map.fastly.net
*.maven.io
saymedia2.map.fastly.net
dns-vetting1m.map.fastly.net
dns-vetting1m.map.fastly.net
dns-vetting1m.map.fastly.net
themaven.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
*.maven.io
saymedia2.map.fastly.net
dns-vetting1m.map.fastly.net
dns-vetting1m.map.fastly.net
saymedia2.map.fastly.net
cmp.computerworld.com
stable.maven.io
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
dns-vetting1m.map.fastly.net
mms.sp-prod.net
cmp.channelpartner.de
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
saymedia2.map.fastly.net
dns-vetting1m.map.fastly.net
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
*.maven.io
*.maven.io
leapfrog-ssl-49.gcs-web.com
dns-vetting1m.map.fastly.net
saymedia2.map.fastly.net
*.maven.io
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
saymedia2.map.fastly.net
automaven.io
automaven.io
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
*.maven.io
saymedia2.map.fastly.net
*.maven.io
saymedia2.map.fastly.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
cmp.computerworld.com
saymedia2.map.fastly.net
saymedia2.map.fastly.net
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
dns-vetting1m.map.fastly.net
dns-vetting1m.map.fastly.net
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
saymedia2.map.fastly.net
cmp.computerworld.com
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
*.maven.io
saymedia2.map.fastly.net
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
dns-vetting1m.map.fastly.net
leapfrog-ssl-49.gcs-web.com
cmp.academics.at
dns-vetting1m.map.fastly.net
*.mavencoalition.io
cmp.computerworld.com
cmp.academics.at
*.maven.io
*.maven.io
cmp.academics.at
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-49.gcs-web.com
leapfrog-ssl-49.gcs-web.com
saymedia2.map.fastly.net
*.maven.io
dns-vetting1m.map.fastly.net
saymedia2.map.fastly.net

Certificate

The complete raw certificate details for *.maven.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjfVfG/tBNYkNIgNV9dY
Zlg65rpkuSSPIkQUNbS782nj+wJJWfyCoSys+RHwhH11lGzwFdqEPFCHkXc8xqDM
mxlVDrp72tW2xibPy0e2DCoelz0jMIHEPBLwvv/752Vpsca26VDRqNHxCMjoa6ft
gja3MTzbi0xiQMZDi39I6+iJ5GSaHy1zZKKbwHBHS4jJVUAe4Jlz180KdbOYijJW
2XX2yYMFG+OcA7d5tfP8dcExHUzqKJ4cNZ8KcF4HtZR4KXY3T3rXpotLXDLFh6NW
n6XKH4zXhFjF8H+pXqDvbTxxEe9eYqP2r+DPhLLlpAJc3USXYJpflEERyWxL06Zs
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8287399700364801841807723451260327723
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-07 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.maven.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24012810680598796209726403820049776321679821599778031509312338261779426854025100058767801814613462410921600841371546172315801444948903813743631437867091941895358075805251371472777406317496698281295309533853416523022019857595148245980949526023451251632918504413054978102708267334982416692831383632369488811400906644479612192549297936038724862385276046704312839375882910608234143270077856914663291293985320274202236649624667577603727367167013969492778252453261677995191683090769129201453133790695022222037283077470777980021973503133626835807709116807501921347644266199895473655341238663895463956290297998044227384536209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d2f90a2cd79d629865bcd4591fa6dbd13537e510
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.maven.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mavencoalition.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000168ca64428e00000403004730450221009c7044cb324b690fe41c3e0444050922242cd7d612615fcef404ecf206e8ab75022043289893d89242374d1b04fbdbbeff37fa9fab870a88b081e570c667571f85700077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000168ca64435e0000040300483046022100a7a60dbae3f56a53871496707fbb63eed7567d211d21c53283623e0fb0fd0ab4022100822121380051c19667cf8dbd3b808b15624ff2e7016088e50cfec7d1a97b775b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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