metadata.dev-charter.net

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 06:65:11:6e:7f:3b:05:4d:91:70:11:50:c2:c0:59:09 was issued on by Amazon.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=metadata.dev-charter.net

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:65:11:6e:7f:3b:05:4d:91:70:11:50:c2:c0:59:09
Serial Number (int): 8500143512858599388758455128709683465
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 5a:31:43:dc:47:4c:f9:a4:ad:a8:f6:9e:87:03:86:fe:07:b0:04:8e
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): f6:b1:93:41:ca:3c:d1:86:8f:ff:78:2e:e2:ba:77:26:58:ff:39:4b
Fingerprint (sha256): 52:a1:6a:e7:f4:7b:05:2f:6d:22:77:f7:84:c4:f9:8c:94:04:c3:8c:91:2d:5a:bd:bc:8f:65:87:8a:83:76:b4

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate metadata.dev-charter.net

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for metadata.dev-charter.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

metadata.dev-charter.net
imageserver.dev-charter.net
*.imageserver.dev-charter.net
*.metadata.spectrumtoolbox.com
imageserver.spectrumtoolbox.com
*.metadata.dev-charter.net
metadata.spectrumtoolbox.com
*.imageserver.spectrumtoolbox.com

Other certificates including the domain name dev-charter.net

(limited to 100 certificates)
*.dev-charter.net
ip-eas-sit-east-https-cdn.dev-charter.net
ip-eas-staging-west-https-cdn.dev-charter.net
ip-eas-sit-east-https-cdn.dev-charter.net
ip-eas-sit-tm-west-https-cdn.dev-charter.net
*.dev-charter.net
troubleshooting.dev-charter.net
*.mediaportals.dev-charter.net
*.develop.dev-charter.net
logpull-perf.tau.dev-charter.net
cms.prd-aws.charter.net
mediaportals-news-64.dev-charter.net
advisor2.engprod-spectrum.net
jenkinsdocker.dev-charter.net
*.mediaportals.dev-charter.net
*.dev-charter.net
ip-eas-dev-east-https-cdn.dev-charter.net
ip-eas-lab-west-https-cdn.dev-charter.net
sdev-ns.dev-charter.net
*.dev-charter.net
*.mediaportals.dev-charter.net
ip-eas-dev-west-https-cdn.dev-charter.net
*.us-east-1.engprod.tau.dev-charter.net
jenkinsdocker.dev-charter.net
*.dev-charter.net
*.tau.dev-charter.net
ip-eas-lab-west-https-cdn.dev-charter.net
stash.dev-charter.net
*.tau.dev-charter.net
*.mediaportals.dev-charter.net
jenkins-glb.dev-charter.net
stash.dev-charter.net
*.scpcj.dev.dev-charter.net
metadata.dev-charter.net
atvchtr.dev-charter.net
serenity.vod.dev-charter.net
*.us-east-1.perf.tau.dev-charter.net
*.us-east-1.dev3.tau.dev-charter.net
*.dev-charter.net
ip-eas-sit-tm-west-https-cdn.dev-charter.net
*.scpcj.perf.dev-charter.net
*.dev-charter.net
cms.prd-aws.spectrumbusiness.net
*.us-east-1.dev2.tau.dev-charter.net
*.mediaportals.dev-charter.net
*.scpcj.dev.dev-charter.net
stashs.dev-charter.net
cms.prd-aws.charter.net
*.mediaportals.dev-charter.net
best-specflow.best.dev-charter.net
*.dev-charter.net
ip-eas-dev-east-https-cdn.dev-charter.net
ipvs.dev-charter.net
*.us-east-1.int.tau.dev-charter.net
crowd.dev-charter.net
ip-eas-sit-east-https-cdn.dev-charter.net
nexus.mediaportals.dev-charter.net
crescendo-stacka.vod.dev-charter.net
logpull-dev3.tau.dev-charter.net
*.dev-charter.net
ip-eas-dev-west-https-cdn.dev-charter.net
engprod-spectrum.net
search.dev-charter.net
ip-eas-staging-east-https-cdn.dev-charter.net
ip-eas-staging-west-https-cdn.dev-charter.net
*.dev-charter.net
*.dev-charter.net
nexus.global.dev-charter.net
*.scpscl.dev-charter.net
ip-eas-sit-west-https-cdn.dev-charter.net
*.figaro.dev-charter.net
advisor2.engprod-spectrum.net
*.us-east-1.dev3.tau.dev-charter.net
*.mediaportals.dev-charter.net
ip-eas-autotest-https-cdn.dev-charter.net
stashs.dev-charter.net
ip-eas-staging-east-https-cdn.dev-charter.net
*.tau.dev-charter.net
*.mediaportals.dev-charter.net
*.us-east-1.perf.tau.dev-charter.net
jenkinsdocker-glb.dev-charter.net
troubleshooting.engprod-spectrum.net
*.us-east-1.dev.tau.dev-charter.net
ip-eas-sit-west-https-cdn.dev-charter.net
stashs.dev-charter.net
*.mediaportals.dev-charter.net
*.us-east-1.sbox1.tau.dev-charter.net
ip-eas-autotest-https-cdn.dev-charter.net
lantern.dev-charter.net
*.siadev.dev-charter.net
*.mediaportals.dev-charter.net
dbm-translate.spectrumaws.dev-charter.net
*.us-east-1.dev2.tau.dev-charter.net
*.mediaportals.dev-charter.net
*.us-west-2.sbox1.tau.dev-charter.net
crescendo-stacka.vod.dev-charter.net
dev-spectrum.net
stash.dev-charter.net
ip-eas-sit-tm-west-https-cdn.dev-charter.net
ip-eas-staging-east-https-cdn.dev-charter.net

Certificate

The complete raw certificate details for metadata.dev-charter.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAUSmJDKfkyvNuWPKkgt
RzBg4FgH07b6RfQR7GN7osEGIZJJAu1QP5kwtQACjHLrh7oqGpCgUDIKlNbmCHv6
l11sPpaKpoyMDqw0evIQ0PXNRenbuEHVuPGnUNQtuL3e2oeg4neERN2GLzj6j3EE
hoFPjBW2wW/M1i1xyHHtaOpztKR6EF732iL2WkjUp40+eJ3bq3lhJs7ekcMiIEmb
1Y9rih16UkM3v2Rphb4IdSPRbCOOKswUtRqCFuCo270Bf3AamyvJSV/KhVMmdwp6
JuoYGxvTtSxTFFZw3O9PjxyAhRFpQ6sjPr6D59bCP7TrSTLdFlQqut6dmePgcfcM
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8500143512858599388758455128709683465
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'metadata.dev-charter.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22725396306133323074713819871737329191357042686274856160891130512128442875008193623485037278222773087098775060924235496605855953501885015750572912060446753105294738264903805429425737987035004766666082074235078698239807875227196248656909461518902383417270264007263910418767684894902664293944531546044520316743616346647061197885112019965582650414336449581942628576180457291957117474660503025388504857361853376098157714210490412977021700022164041597792994231533092444644147580448188588397267159246485368130538013297723842995962239623515274233232937323077779798060176561409554404390986967952258562826376491068285619997929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5a3143dc474cf9a4ada8f69e870386fe07b0048e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metadata.dev-charter.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imageserver.dev-charter.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imageserver.dev-charter.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metadata.spectrumtoolbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'imageserver.spectrumtoolbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.metadata.dev-charter.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metadata.spectrumtoolbox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imageserver.spectrumtoolbox.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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