chef-server.mdstrm.com

Issued by PositiveSSL CA 2

About this certificate

This digital certificate with serial number 51:84:89:73:ce:05:a7:19:1b:20:35:68:2a:5f:a2:fa was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=chef-server.mdstrm.com,OU=Domain Control Validated+OU=Hosted by HOSTING SERVICES\, INC.+OU=PositiveSSL

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 51:84:89:73:ce:05:a7:19:1b:20:35:68:2a:5f:a2:fa
Serial Number (int): 108355638709019918122042320765595919098
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 80:cd:5e:36:75:97:cc:99:53:f1:9a:73:96:f0:d9:5a:f9:89:5f:be
AuthorityKeyId: 99:e4:40:5f:6b:14:5e:3e:05:d9:dd:d3:63:54:fc:62:b8:f7:00:ac

Fingerprint (sha1): aa:94:70:c1:ee:70:9b:31:a9:9c:df:3b:3e:25:06:75:08:d1:e5:fb
Fingerprint (sha256): 4e:47:5a:b0:51:0e:f5:5f:46:8d:b0:80:43:a1:ff:be:67:ce:be:47:49:4f:44:0f:41:df:c2:b2:de:70:69:8c

Issuing Certificate URL: http://crt.comodoca.com/PositiveSSLCA2.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/PositiveSSLCA2.crl

Check the revocation status for certificate chef-server.mdstrm.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for chef-server.mdstrm.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

chef-server.mdstrm.com
www.chef-server.mdstrm.com

Other certificates including the domain name mdstrm.com

(limited to 100 certificates)
entry.do
3d-design-pro.com
*.mdstrm.com
metrics.mdstrm.com
timeplacebook.com
*.external.mdstrm.com
nowplaying.platform.mdstrm.com
platform-static.cdn.mdstrm.com
dev.nowplaying.mdstrm.com
bluebeakai.com.au
analytics-pipeline.mdstrm.com
www.leadlizard.io
www.musicteachingapp.com
stage-app.simplinotify.com
s3.wpc.edgecastcdn.net
*.cdn.mdstrm.com
airtables.app
demo.happybuilding.app
track-p.mdstrm.com
admtool.planetbinc.com
dev.nftcast.app
s3.wpc.edgecastcdn.net
platform-static.cdn.mdstrm.com
dev.analytics-cloud.mdstrm.com
ak-tvaz-ee.cdn.mdstrm.com
actuary.studio
zencoding.net
woodmanchinesefood.ca
autokit.com
novelitist.com
hsano.jp
metrics.mdstrm.com
www.i-services.co.in
rekaiot.com
ak-tvaz-ee.cdn.mdstrm.com
static.mdstrm.com
suncatchers.asia
thoughtworks.ebarun.com
sig-p.mdstrm.com
*.mdstrm.com
sms-multimedios.sms.mdstrm.com
inentrep.no
mogology.com
ak-tvaz-ee.cdn.mdstrm.com
dist-p.mdstrm.com
*.cdn.mdstrm.com
turbolaser.dev
metrics.mdstrm.com
devdocs.trust.miracl.cloud
blog.tsugitta.com
www.hi-pulse-tech.com
share-next.mdstrm.com
www.svetlanabrennan.com
chef-server.mdstrm.com
ak-tvaz-ee.cdn.mdstrm.com
dev.analytics-cloud.mdstrm.com
mdstrm.com
www.thesense.jp
blabla.cam
ak-tvaz-ee.cdn.mdstrm.com
tools.tryo.dev
vrzn-ei-ee.cdn.mdstrm.com
metrics.mdstrm.com
strandstol.com
www.cinefile.cc
share-next.mdstrm.com
cargoangels.com
www.p1motor.com
goldfinchproductions.com
laroca.datacore.com.bo
sms-cl.sms.mdstrm.com
admin.ehspook.com
platform-static.cdn.mdstrm.com
www.quicktype.io
api-dev.corporate.mdstrm.com
ru.jampartizan.com
alcoholzelftest.jellinek.nl
www.nawoo.net
sms-multimedios.sms.mdstrm.com
ak-tvaz-ee.cdn.mdstrm.com
vrzn-ei-ee.cdn.mdstrm.com
*.cdn.mdstrm.com
identity.elita.si
www.canikickit.biz
suresorted.com
cherylasteele.com
ak-tvaz-ee.cdn.mdstrm.com
clarizegroup.com
mountd.com
cdn.mdstrm.com
www.fisioactivecastellon.com
novelitist.com
sms-multimedios.sms.mdstrm.com
metrics.mdstrm.com
cv.rushikesh.cf
mdstrm.com
www.karvulf.com
*.mdstrm.com
metrics.mdstrm.com
driverready.app

Certificate

The complete raw certificate details for chef-server.mdstrm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqiA37Yvae7rPk6l7ZLZ
GD1ZbccqCW7MWKOo/BrIYY/sjAmGRYXbpe76fqtjC4Em6ZxJuKZS/eTVAfs8aKwE
hDNs7Rg2ZJQRXUqeuokaSM0DD0NyMyxIitqDSfCUiZqlDxBph/TDNJJvdMUA+2il
FqtDGmojCUBoOwX61KGuRLVnKVhU8u0gEciWcECS8SexygDKegtOSedps2U2GMuT
j8owRD9ZkVTmraur7VwjRu9ZKwYOkEaF2qgL+sTP0r+idGPFDJhJTZP+bInklhjZ
gD9cFM0TjZnqb8N9JbFI0oKIrFLlPgFZK8mOUdyiM47CQVC6ia7OBhErRaKtU961
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 108355638709019918122042320765595919098
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PositiveSSL CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-07-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-07-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosted by HOSTING SERVICES, INC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PositiveSSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'chef-server.mdstrm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21543603974346962223798990405565208998313519300720144271221824766302455505082701439432183292619636077621170403389264187316101747126723368848814340374310242129925806880601604662922459476401795994833618321813312624840818955890291403229330462706074528262178757871003168445360851417496152963098094252281208188855140445044028541438843032609798050377559226283857375317549448933774861982066304342402465157763361272483727707010572726088302561442506037346966775870908113055478742694977705494764698590690518318872767331421922323066764351747046119301727395791287339072898761792466600820676488665515931910657249871190566719370593
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 99e4405f6b145e3e05d9ddd36354fc62b8f700ac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							80cd5e367597cc9953f19a7396f0d95af9895fbe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.positivessl.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/PositiveSSLCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/PositiveSSLCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chef-server.mdstrm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chef-server.mdstrm.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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