dairyknow.umn.edu

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 06:21:23:88:87:75:b8:96:7d:60:24:25:2a:d8:7a:f5 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dairyknow.umn.edu

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:21:23:88:87:75:b8:96:7d:60:24:25:2a:d8:7a:f5
Serial Number (int): 8147434472330166635834315173313149685
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: d3:ad:9d:ff:a6:bf:b9:1f:fc:45:7f:4c:3b:23:fa:34:1c:66:8b:3d
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 1f:f7:d3:14:10:41:30:9e:fc:b7:58:13:22:a2:80:06:e6:fd:ea:59
Fingerprint (sha256): 00:b6:13:0e:07:7c:c2:fd:e0:6c:e7:c6:22:36:83:b4:79:5e:5d:f1:03:27:ce:43:5f:21:51:b9:22:60:5d:9d

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate dairyknow.umn.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dairyknow.umn.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dairyknow.umn.edu
cares.dairyknow.umn.edu

Other certificates including the domain name umn.edu

(limited to 100 certificates)
sni.cloudflaressl.com
sni.cloudflaressl.com
axiumssl-prod.ahc.umn.edu
ggg.umn.edu
rhrc.umn.edu
scholarship.law.umn.edu
stg-webfilesdev.ad.umn.edu
sni.cloudflaressl.com
p.acm.umn.edu
futureservicesinstitute.umn.edu
www.ncfpd.umn.edu
ceed.umn.edu
sni.cloudflaressl.com
www-test.hhh.umn.edu
ur.umn.edu
sni.cloudflaressl.com
www.finpack.umn.edu
test.statefair.umn.edu
bema.dash.umn.edu
research.cs.umn.edu
fmp.cla.umn.edu
sni.cloudflaressl.com
*.psepbizplan.umn.edu
msa.umn.edu
sni.cloudflaressl.com
www.claoit.umn.edu
nutnet.umn.edu
givingday.umn.edu
sni.cloudflaressl.com
incapsula.com
lawandinequality.org
sni.cloudflaressl.com
umartauth.umn.edu
umconnect-v9-test.oit.umn.edu
1819subfield.dash.umn.edu
itg-dev.oit.umn.edu
dairyknow.umn.edu
oreapps.d.umn.edu
sni.cloudflaressl.com
sl2-dev.d.umn.edu
cla-comm-copy-lw.d.umn.edu
sni.cloudflaressl.com
www.bellmuseum.umn.edu
provost.umn.edu
sni.cloudflaressl.com
controller.umn.edu
www.psych.umn.edu
usvcs-pvve022l.uservices.umn.edu
sni.cloudflaressl.com
umnd801.umn.edu
www.plantinfo.umn.edu
ds.umn.edu
fmresident-database.umn.edu
*.charfac.umn.edu
5659822271758336-fe3.pantheonsite.io
www.ahcs.umn.edu
camp.dash.umn.edu
clagency.umn.edu
requests.cseit.umn.edu
cpheo2.sph.umn.edu
p.acm.umn.edu
prodtest.extension.umn.edu
cf-test1.crk.umn.edu
printing.umn.edu
viviendasite.mbc.dash.umn.edu
cascw.umn.edu
sichl.dash.umn.edu
pias02-r.uservices.umn.edu
drivenvolunteers.umn.edu
madyun.dash.umn.edu
umnstandard.umn.edu
ecrt.oit.umn.edu
acm.umn.edu
sni.cloudflaressl.com
ici-risp-dev-api-01.oit.umn.edu
rt.msi.umn.edu
sunfish.biostat.umn.edu
pilot.cap.oit.umn.edu
emis-hub.ahc.umn.edu
aux400.auxs.umn.edu
sni.cloudflaressl.com
cpheo1.sph.umn.edu
sni.cloudflaressl.com
mnlink.org
drupalmigrate.umn.edu
incapsula.com
ihrca.dash.umn.edu
*.elevator.umn.edu
sni.cloudflaressl.com
*.law.umn.edu
www.msi.umn.edu
ahcauth.ahc.umn.edu
research-innovation.umn.edu
grouper.umn.edu
chan-lab.umn.edu
www.ofyp.umn.edu
www.afrotc.umn.edu
careers.cvm.umn.edu
lcms.ahc.umn.edu
sni.cloudflaressl.com

Certificate

The complete raw certificate details for dairyknow.umn.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNVcHVLBfHMptDJILFVn
mO6wbdHeyiOGFILJnrwecA9Pj126SRrj3h/egRwo8gjqcYCbMdmh0BoKOO/uRLh9
+XkmeC0Msd4/K/6zbxeh6Tgm7rcWML6CTCOQQxgEyS5gnJjatZWA3r1MbPO6IuJr
DuqrwJsimOy7WmbFwsgoIS7aYc3FnGH+9UqlLUfRDTJzvef0ON4fTI2i91HbJxvV
Ral2QZQpwteFhUp6X27wLn4mlmRtPO/yB0UCqhovVYHW0kWsPsm9is/xutmmRYB8
l5A1iefe3vdj/VRDz2nPUILjOZLlz7A0GScxvyePB324S21gJQ4AvqZH3zVzqqPG
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8147434472330166635834315173313149685
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dairyknow.umn.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22828106543626375861975626393916914166674265696423520834019621336369231989310704199972820797391677449226064685436962463995029735921050427052708457163872705703707601668663681055200368558639397338799080772058068508886850534899545713682746098184908018823500027351623519216405577516655122750701467524368245449988166925805771036803415314220381767378133240907725130774402538433674851501675007498798576361154167355296661368667241333484349580270796389521669462965833085358265166583424033567357909740608157452836503817042742681423902790586858024495704465076876400934195270852423656957740630389052689710004598231581970474976909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d3ad9dffa6bfb91ffc457f4c3b23fa341c668b3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dairyknow.umn.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cares.dairyknow.umn.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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