*.modernatx.com

- Moderna Therapeutics, Inc -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0d:df:7f:15:1a:a7:d2:30:8d:4b:f7:bc:80:c8:a5:a5 was issued on by DigiCert Inc.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Moderna Therapeutics, Inc

Organization: Moderna Therapeutics, Inc
State / Province: Massachusetts
Locality: Cambridge
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:df:7f:15:1a:a7:d2:30:8d:4b:f7:bc:80:c8:a5:a5
Serial Number (int): 18440423682717742930423960024558118309
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f1:f2:f3:22:99:87:c4:19:63:5a:ff:af:6b:68:48:da:2a:97:d0:62
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 48:a4:f6:11:04:fa:3e:cf:8e:e8:73:a6:51:d7:6a:13:10:e8:cd:f1
Fingerprint (sha256): 53:e3:e2:47:ea:3d:cb:1f:f0:19:32:2d:e2:c9:8a:66:53:71:c1:27:75:14:70:e5:40:10:a2:20:ed:39:c9:a0

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g2.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g2.crl

Check the revocation status for certificate *.modernatx.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.modernatx.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.modernatx.com
modernatx.com
alexion.collab.modernatx.com
astrazeneca.collab.modernatx.com
quietx.collab.modernatx.com

Other certificates including the domain name modernatx.com

(limited to 100 certificates)
cert1.a2.atm.aqfer.net
leapfrog-ssl-14.gcs-web.com
www.jlbiz.dev
content.modernatx.com
lb.poc-dev.modernatx.com
leapfrog-ssl-14.gcs-web.com
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
*.eua.modernatx.com
leapfrog-ssl-14.gcs-web.com
lb.qa.modernatx.com
content.modernatx.com
*.modernatx.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-14.gcs-web.com
*.modernatx.com
leapfrog-ssl-14.gcs-web.com
*.eua.modernatx.com
sandbox.sbx.dev-blsp.modernatx.com
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
stg.api.d4e.modernatx.com
auth.modernatx.com
smetrics.modernatx.com
cert1.a2.atm.aqfer.net
leapfrog-ssl-14.gcs-web.com
cert1.a2.atm.aqfer.net
i.modernatx.com
dev.api.d4e.modernatx.com
cert1.a2.atm.aqfer.net
leapfrog-ssl-14.gcs-web.com
stg.gating.modernatx.com
mrna-access.modernatx.com
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
leapfrog-ssl-14.gcs-web.com
verify.livelifeapp.com
leapfrog-ssl-14.gcs-web.com
prime.modernatx.com
publication-data.modernatx.com
tools.preview.modernatx.com
leapfrog-ssl-14.gcs-web.com
manoburguer.com.br
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
qa.gating.modernatx.com
cert1.a2.atm.aqfer.net
preview.atlas.modernatx.com
leapfrog-ssl-14.gcs-web.com
leapfrog-ssl-14.gcs-web.com
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
payablesdev.modernatx.com
atlas.poc-dev.modernatx.com
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
develop.modernatx.com
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
leapfrog-ssl-14.gcs-web.com
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
vaccines.modernatx.com
cert1.a2.atm.aqfer.net
production.eap.prd-blsp.modernatx.com
atlas.k8s.stg.modernatx.com
medinfo.modernatx.com
dev.customerplatform.modernatx.com
leapfrog-ssl-14.gcs-web.com
metrics-portal-staging.modernatx.com
leapfrog-ssl-14.gcs-web.com
cert1.a2.atm.aqfer.net
tools.qa.modernatx.com
content.modernatx.com
cert1.a2.atm.aqfer.net
leapfrog-ssl-14.gcs-web.com
contentful.preview.atlas.modernatx.com
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
cert1.a2.atm.aqfer.net
leapfrog-ssl-14.gcs-web.com
cert1.a2.atm.aqfer.net
contentful.preview.atlas.modernatx.com
cert1.a2.atm.aqfer.net
mrna-access.modernatx.com
quality.qs4.val-blsp.modernatx.com
cert1.a2.atm.aqfer.net
pages.modernatx.com
cert1.a2.atm.aqfer.net
stg.gating.modernatx.com
*.modernatx.com
leapfrog-ssl-14.gcs-web.com
cert1.a2.atm.aqfer.net
leapfrog-ssl-14.gcs-web.com
cert1.a2.atm.aqfer.net

Certificate

The complete raw certificate details for *.modernatx.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjUwCW6on3L44ogOJhFgy
1D2UskQxpH8bHtvkIUaR6WsziNniskyy3ZesgAAx8p6+zrHyEv+aIoDIeJl0JDJF
KPR0RUA8++6QdoUP7wIl9l3MXYsQNO6TcqLmJ+Np0ILydAhJyS8JRUH+4WaOO+cB
eUscg4UndkoSOYGRKLmxMSp8UqQB4EqDxG6M9zh/4TArLswRjRhASbqV/s+srB0i
uyDFHRrWnT6QdpJdMUisbSBjMyFWQn0Ay4XchV0x8oI1uiz8WhuvoLz/5v1+y6h1
lK7yjf8zi5orGHeCkSTYaHaMh1Dhct8/UKVvx5tdGQfml/GBSYgZ+Q9LNio/PCAW
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18440423682717742930423960024558118309
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-05-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cambridge'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Moderna Therapeutics, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.modernatx.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17837082539209068592870444618564209838344026627137807996451303846647085882721591937111845495146805744317427318145452796307281791623954898678734201214373919274308645788007980241218680115651447656873518083381241535494770840822219007893670553187661382608536851685997288741611811985459210082556501067026975696220028734399595080158918934057525046688602659057185083091101303859088242586623315533988948174051812562945806276105987847791880800497948519671762856316688181737689711093950170414926028522215621194087368515125661203580605008150883601816423683170743261763008658018808032142426265092418186202019840990975177231701737
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1f2f3229987c419635affaf6b6848da2a97d062
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.modernatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'modernatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alexion.collab.modernatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'astrazeneca.collab.modernatx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quietx.collab.modernatx.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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