psi.arizona.edu

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0c:c5:db:29:a4:3d:51:2f:af:43:ec:d1:3f:44:43:01 was issued on by Amazon.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=psi.arizona.edu

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:c5:db:29:a4:3d:51:2f:af:43:ec:d1:3f:44:43:01
Serial Number (int): 16978063577437883795335244003217261313
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7e:60:f9:e3:67:a7:51:b1:e2:c7:ae:2e:82:f0:30:3a:0b:8b:8d:cd
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 6b:16:c9:30:56:1d:39:56:01:e9:30:f4:da:48:ba:9f:73:07:10:76
Fingerprint (sha256): 01:46:f4:47:94:ac:6d:3b:95:b0:5c:64:80:14:c9:12:17:50:2d:d7:5b:d8:1b:10:e7:95:a3:d7:58:2c:8c:f6

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate psi.arizona.edu

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for psi.arizona.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

psi.arizona.edu
rmm.arizona.edu
spifi.arizona.edu
saguarostudy.arizona.edu
www.psi.arizona.edu
www.rmm.arizona.edu
www.saguarostudy.arizona.edu
www.spifi.arizona.edu
step-up.arizona.edu
www.step-up.arizona.edu

Other certificates including the domain name arizona.edu

(limited to 100 certificates)
5734743547052032-fe3.pantheonsite.io
5698998010642432-fe4.pantheonsite.io
webservice.oscr.arizona.edu
5658514613600256-fe2.pantheonsite.io
5693703389708288-fe3.pantheonsite.io
drc-dev.arizona.edu
*.ezproxy2.library.arizona.edu
test-web-lws.edu.help
p21.uawebhost.arizona.edu
carpepm.almonds.com
photonicshub2.uawebhost.arizona.edu
5697124062724096-fe2.pantheonsite.io
5767917874446336-fe1.pantheonsite.io
5767917874446336-fe1.pantheonsite.io
5703128158568448-fe1.pantheonsite.io
aer.arizona.edu
5723088213770240-fe3.pantheonsite.io
it.uahs.arizona.edu
pictor.as.arizona.edu
accona-idrac.fm.arizona.edu
helpdesk.travelleaders.com
cluster3.technolutions.net
remote.azgs.arizona.edu
helpdesk.travelleaders.com
imr.uawebhost.arizona.edu
libguides.library.arizona.edu
5631943370604544-fe1.pantheonsite.io
mis-mallinfra1.microagelab.arizona.edu
5702351037923328-fe2.pantheonsite.io
5720453519769600-fe1.pantheonsite.io
5685665089978368-fe3.pantheonsite.io
ucdc.edu
cluster3.technolutions.net
5733052001026048-fe3.pantheonsite.io
survey.pharmacy.arizona.edu
5643365030821888-fe1.pantheonsite.io
5685665089978368-fe3.pantheonsite.io
nartc.fcm.arizona.edu
5732910535540736-fe1.pantheonsite.io
xlr7.lpl.arizona.edu
azmesa.arizona.edu
tinker.lpl.arizona.edu
in.arizona.edu
calendar.sdzsafaripark.org
5763210187636736-fe2.pantheonsite.io
amonhen-th-01.ucode.arizona.edu
legacy.fso.arizona.edu
5700866052980736-fe2.pantheonsite.io
l3.shared.global.fastly.net
jsw.arizona.edu
5723088213770240-fe3.pantheonsite.io
ba-vpn.lpl.arizona.edu
data.library.arizona.edu
consciousness.arizona.edu
housing.arizona.edu
5743114304094208-fe3.pantheonsite.io
5693341270278144-fe4.pantheonsite.io
cls.uawebhost.arizona.edu
skycenter.arizona.edu
vas.uawebhost.arizona.edu
samis.webhost.uits.arizona.edu
5685665089978368-fe3.pantheonsite.io
5679846214598656-fe1.pantheonsite.io
5763210187636736-fe2.pantheonsite.io
mesupport.saloncloudsplus.com
cesd.arizona.edu
udallcenter.uawebhost.arizona.edu
www2.engr.arizona.edu
5650082896543744-fe3.pantheonsite.io
*.playposit.com
5693703389708288-fe3.pantheonsite.io
5689792285114368-fe2.pantheonsite.io
5736449051721728-fe1.pantheonsite.io
law.arizona.edu
accounting.eller.arizona.edu
5754818358411264-fe2.pantheonsite.io
5662329727352832-fe1.pantheonsite.io
5721489412194304-fe1.pantheonsite.io
psi.arizona.edu
banking-business-review.com
5650082896543744-fe3.pantheonsite.io
5636635823702016-fe2.pantheonsite.io
apps.iam.arizona.edu
5692201761767424-fe3.pantheonsite.io
portal.environment.arizona.edu
5747976207073280-fe2.pantheonsite.io
cdn-test.battlefields.org
rds.athletics.arizona.edu
test.eis.uw.edu
aemrc.arizona.edu
cybersw.org
5703128158568448-fe1.pantheonsite.io
5634612826996736-fe4.pantheonsite.io
5734743547052032-fe3.pantheonsite.io
5668906396024832-fe3.pantheonsite.io
5639026912526336-fe4.pantheonsite.io
*.mosaic.arizona.edu
r-barthelson-lab.uawebhost.arizona.edu
i3.shared.global.fastly.net
2016.arche.peds.arizona.edu

Certificate

The complete raw certificate details for psi.arizona.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRvbQFNxnHpY5ipz8RI6
oKNtRnoBZTC3ANFdJ49Twsg/2GBj+kYkw2l8Sb6afoUwMgoCOGpNvvbruGX/aSWY
RN2HYnb5UEjT7+eTITK0n2s+y+stX2w3WVN9yJcHhmMBhtBC9NKTUbWbZgOmFM0x
RohC4vkynDD0IaZcLwUtJ8mw7TXc3zNgJYAxMzIx3Fb9VHz1nJVQOvtrEZU7V25Y
SZUQEH5A959pf3WBhkcqwkAW5U76ai5EGE2OxSdDdyW42wBsCFUEyengRL5qh3OX
Jm/5A+fooMuIMYDrmiAnL3uBrJTZdrcIK6DNWRt2O6QETB3liruPoUGZzC5G6CrS
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16978063577437883795335244003217261313
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'psi.arizona.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23367822946324334577871953190637215401237930159186602963102062890296772270389076898793915758134994332839535376350085197618275994627845831916286285309046741018483857066371903447849138990786042041090600997724611175550190572473121260722913364178465329696708338765562456119318101652205552246700285012272669832008004461811832197553275642648188959270425114044700257822531915988431560556823073137404112709228661732596029642490574716247779354317055142257869430468259575874818185102828479854958790917692536436363589736433838576804813156437260775611182756629101496672707056431741382786372739533017587573618179832662233841324663
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7e60f9e367a751b1e2c7ae2e82f0303a0b8b8dcd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (223 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psi.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rmm.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spifi.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saguarostudy.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psi.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rmm.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saguarostudy.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spifi.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'step-up.arizona.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.step-up.arizona.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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