*.mdl.io

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0e:87:02:be:fb:2f:c9:54:57:a6:87:cb:c3:59:dd:08 was issued on by Amazon.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.mdl.io

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:87:02:be:fb:2f:c9:54:57:a6:87:cb:c3:59:dd:08
Serial Number (int): 19310207712799616694254850164303453448
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 75:24:b3:25:6e:5d:02:41:50:bb:c5:75:fb:6e:e0:5d:d8:e8:b0:31
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): e3:c0:9a:d8:cf:a9:64:60:95:0a:fd:5a:d5:71:ec:d6:50:51:80:64
Fingerprint (sha256): 53:6e:89:df:90:3d:37:fc:0c:01:ba:32:24:6e:6c:e4:c4:d3:e8:2b:ac:7f:63:82:92:73:20:df:9c:68:45:3b

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.mdl.io

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.mdl.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.mdl.io
studio.afw.mdl.io
microsite.container.mdl.io
studio.dashboard.mdl.io
studio.admin.mdl.io
studio.purl.mdl.io

Other certificates including the domain name mdl.io

(limited to 100 certificates)
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
qa1.m.mdl.io
qa1.m.mdl.io
mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
mdl.io
qa1.m.mdl.io
qa1.m.mdl.io
qa1.m.mdl.io
mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
secure.mdl.io
studio.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
secure.mdl.io
studio.dashboard.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
secure.mdl.io
qa1.m.mdl.io
qa1.m.mdl.io
secure.mdl.io
secure.mdl.io
mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
*.mdl.io
secure.mdl.io
mdl.io
qa1.m.mdl.io
secure.mdl.io

Certificate

The complete raw certificate details for *.mdl.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFDeqpwzCm6J6SHNIXtK
Rgk6Ezkf5zQphQENVFA7rB0Hkx+xGbvpyQha6HsAstzGgU69aI+Dd1/RpefmKG/j
xY/I9aR5OGyzfC+1MhMOiNYnEjjRlldo04HhZ7DI6yVzNGJuWjBXKrOUdtkbGtZs
l6zJBOLHEjdOQ8bWGaBXx6LY+q7qPGZX9mn09VL2AGuoL3U8w3bD8d4nrJJwUpnY
KExQGoQdn6NjIOTWVMTKSV2Iu16SHGHzrwvAjujqyi9M1TxCTsNqJ3X1bihNF4o+
foKf4ALG0eAWhuW9PzEaUTukryFBgezoHTt1x+8J63sXPOFprRWGw1IMUZkMbwX6
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19310207712799616694254850164303453448
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.mdl.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19733053954838351245366759898525095098765731082104619825432239596911100384762229750698448477945562955086810429388610167649071114773933448374032106320702983894393945960884640289004429526971161499481460847019565592288413493397073148423853040970989609581997355798949293636656073914775110409187912051102203825377967716985879698473190249219361844436891416652884057079196694455466501708030066662058617967587043976491671673391584801042752867932474957200539253896116055614054787823651735044793308575866249870568365690314362005357752633216319906739184553266045342691759582765013630495374123706521166675718324475643954117081779
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7524b3256e5d024150bbc575fb6ee05dd8e8b031
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.afw.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microsite.container.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.dashboard.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.admin.mdl.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studio.purl.mdl.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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