byu.edu

Issued by Amazon

About this certificate

This digital certificate with serial number 06:81:55:6a:98:28:19:7d:a1:d1:7a:ae:d1:d1:71:82 was issued on by Amazon.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=byu.edu

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:81:55:6a:98:28:19:7d:a1:d1:7a:ae:d1:d1:71:82
Serial Number (int): 8646906719552223807803449189650755970
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 75:5b:4e:e1:2d:47:b1:43:68:67:1e:5e:28:a1:cc:51:e4:24:3c:66
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 1a:17:76:76:d8:7d:ee:24:ab:72:5b:63:1f:12:3e:83:b5:75:d4:ba
Fingerprint (sha256): 01:6d:25:a7:a0:63:cc:a6:44:29:64:cf:fb:9f:c8:9b:91:37:43:8b:60:a0:95:0e:e6:92:c3:e6:a6:3b:e6:3e

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate byu.edu

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for byu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

byu.edu
coupleswithdiabetes.org
www.techtransfer.byu.edu
www.coupleswithdiabetes.org
prod.brigham-young.psdops.com
*.prod.brigham-young.psdops.com
auth.brightspot.byu.edu
*.weusemath.org
weusemath.org
*.byu.edu

Other certificates including the domain name byu.edu

(limited to 100 certificates)
mentoring.byu.edu
cdt.byu.edu
ifip.byu.edu
is.byu.edu
*.byu.edu
emsweb-dev.byu.edu
byu-oit-swat-trn.amazon.byu.edu
elcwriter.byu.edu
civatthemoa.byu.edu
print-drivers.byu.edu
byu7.domains.byu.edu
homecoming.byu.edu
arts-sandbox.cfacarts.byu.edu
jdtobe.byu.edu
helium13-idrac.byu.edu
crashplan.byu.edu
sup.osc.byu.edu
magiccvs.byu.edu
*.sim-dev.byu.edu
ysa49th.byu.edu
fhtl.byu.edu
titanium12-idrac.byu.edu
byu-oit-paymentsystems-dev.amazon.byu.edu
spacecraft.byu.edu
dev.byu.edu
phdprep.byu.edu
humanities.byu.edu
www.idealabs.byu.edu
humanities.byu.edu
cpcalendars.byucougarcapital.org
jpf.byu.edu
humwp-farm.byu.edu
employee.osc.byu.edu
corpusconference.byu.edu
oare.byu.edu
scholarsarchive.byu.edu
ifip.byu.edu
training.titleix.byu.edu
uconnectlabs.com
jrcb-event-scheduler.byu.edu
test.byu-org-trn.amazon.byu.edu
byu-dept-hawaii-dev.amazon.byu.edu
marvin.byu.edu
bluto.cs.byu.edu
loginerror.byu.edu
avi.fhtl.byu.edu
enclave.byu.edu
panda.byu.edu
*.dev-oit-byu.amazon.byu.edu
byu.edu
byushowcase2017.com
jrcb-cdn.byu.edu
vita.byu.edu
hbc.byu.edu
sebulba.cs.byu.edu
magiccvs.byu.edu
zappala.byu.edu
newsnet.byu.edu
uconnectlabs.com
rocket.byu.edu
vetfinder.fhtl.byu.edu
ifootball.byu.edu
gestudy.byu.edu
drupalebc.embc.byu.edu
byu8.domains.byu.edu
byu8.domains.byu.edu
aphasia.byu.edu
elc.byu.edu
osc.byu.edu
aluminum03-esxi.byu.edu
gestudy.byu.edu
acm.byu.edu
helium02-idrac.byu.edu
api.muschoir.byu.edu
compclinic.byu.edu
api.dental.byu.edu
saascon.byu.edu
api.cfacprweb.byu.edu
organplayingwiki.byu.edu
resourceplanning-dev.byu.edu
we.byu.edu
sitepublisher3.domainssupport.byu.edu
vita.byu.edu
*.byu.edu
ypay.byu.edu
byu-dept-shc-dev.amazon.byu.edu
ucs.byu.edu
msedev1.byu.edu
lsopencloud.byu.edu
sl2web.byu.edu
humwp-nonfarm.byu.edu
compliantmechanisms.byu.edu
hummedia.byu.edu
itb-lab-asa.byu.edu
jrcb-lar01.byu.edu
womeninbusiness.byu.edu
brand.byu.edu
imaal.byu.edu
*.cs.byu.edu
planningandassessment.byu.edu

Certificate

The complete raw certificate details for byu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ajH4FR90TpyliE81Pzj
SiXDXlAEKBzKMDPLnXVPMJa+MO+9C1v1NWeKu9GDRP3mdAhQG503mW95V2JS40Nm
rxL9+q8gP/+TWopxpXXRCAlQ+YP7eqEhgpe5w9OIQ6yjt4TumR3sTqxMVsZHx4kf
GFMgHzDCYdUQOYZhSNRz3gP2cMsa4Fprmlwq+IloBPfJuYjkrwN4U05wJuZcglpZ
8fukV3xIJBNlUt/4S2rGG6NGRbpb7goCSDj+44GkrU+7y9RCBPFrgvrv/21ldcFB
lJxf4PRvK/IlvbA463TB9DZXX1zMEhE8PAc1FIWwvsyI8b+ugK1l6+ZZr0zIAdUN
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8646906719552223807803449189650755970
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'byu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29496753955161979218084498413994963109825975536347689127061113555634507595828158476218704074550888014291193618844560574995844623361166340701232894895133958346694971822778143279204972674994778547628987131920017494893608778761214605206268955095124044734228207241112385884238670633863610633698794249333810962845911662846443619539320476162895048707261933351500936703729933670206170442285154656405943920163720739179360642246017600733880849604841410597523897038642608176258336773688857961041085099549529718852248131609724215766411878275400560910322382751359420746683261963284846031369400639183105554640315259546218689531387
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							755b4ee12d47b14368671e5e28a1cc51e4243c66
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (224 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coupleswithdiabetes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.techtransfer.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coupleswithdiabetes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.brigham-young.psdops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.brigham-young.psdops.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.brightspot.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.weusemath.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weusemath.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.byu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016dfe70dc50000004030047304502201c7fe422f54f2ef773e42b79680c20fdf6f5a743da573ce0cce1d76889c47d5202210081b34f490a8efb4132dc7c4821ca0f1664b247f5f198c0dc302dfef3d3796ba60077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016dfe70dd160000040300483046022100f9446ee9bd3eb0dea20188576a6241d8962a49940dbcb0ee6114f2eb134d8d52022100e469b83a80e929d3e44ebf17871df1b70965bd266afb38e3ae861ddefec9f191
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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