live.deposit.dps.lib.cam.ac.uk

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0c:14:3f:15:e1:37:7c:17:80:44:9d:69:14:7f:24:e4 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=live.deposit.dps.lib.cam.ac.uk

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:14:3f:15:e1:37:7c:17:80:44:9d:69:14:7f:24:e4
Serial Number (int): 16055861411887334019047212800125379812
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0c:a8:78:59:c5:5e:1e:04:a5:d7:b1:56:7b:63:2d:43:ca:84:3b:6b
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 27:5d:05:f1:ee:85:46:07:d5:1d:66:5a:58:4e:22:91:4b:46:c5:95
Fingerprint (sha256): 01:a4:c0:1b:ae:7c:fe:93:73:b4:88:92:4f:fe:d0:dd:58:cf:ab:f9:27:cc:d2:d8:0c:39:10:fa:46:a6:7b:e4

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate live.deposit.dps.lib.cam.ac.uk

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for live.deposit.dps.lib.cam.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

live.deposit.dps.lib.cam.ac.uk
deposit.auth.live.deposit.dps.lib.cam.ac.uk
deposit.dps.lib.cam.ac.uk
auth.live.deposit.dps.lib.cam.ac.uk

Other certificates including the domain name cam.ac.uk

(limited to 100 certificates)
2015.gaobase.admin.cam.ac.uk
moorhen.magd.cam.ac.uk
iccs.cam.ac.uk
eh-ups1.net.homerton.private.cam.ac.uk
appleprofiles.csx.cam.ac.uk
www.payment.wolfson.cam.ac.uk
secure-euwe1-1.tessituranetwork.com
cam.ac.uk
suport.staff.utcluj.app
helpme.agilico.co.uk
webmail.medschl.cam.ac.uk
webserver.srcf.net
admissions.emeritus.org
*.st-edmunds.private.cam.ac.uk
www.jcr.magd.cam.ac.uk
cudl-prod-dev.lib.cam.ac.uk
darknessvisible.christs.cam.ac.uk
wiggum.educ.cam.ac.uk
cmih.maths.cam.ac.uk
www.kings.cam.ac.uk
www.cl.cam.ac.uk
infolib.blog.jbs.cam.ac.uk
www.lrc.girton.cam.ac.uk
winnie.srcf.net
webmail.mrc-mbu.cam.ac.uk
willow.csi.cam.ac.uk
mrc-epid.cam.ac.uk
www.cardiovascular.cam.ac.uk
whittle3d.eng.cam.ac.uk
accreditation.lumanity.com
apps.newn.cam.ac.uk
falcon-course.csx.cam.ac.uk
itservices.phy.cam.ac.uk
alumnicredentials.kcl.ac.uk
www.amest2020.eng.cam.ac.uk
camtools.admin.cam.ac.uk
go.jbs.cam.ac.uk
svr-swm11-bluespec.cl.cam.ac.uk
webapp.prod.rh-ballots.gcp.uis.cam.ac.uk
www.cne.psychol.cam.ac.uk
admin.phone.cam.ac.uk
secure-euwe1-1.tessituranetwork.com
learnonline3.cisl.cam.ac.uk
faraday.cam.ac.uk
econ.cam.ac.uk
intranet.geog.cam.ac.uk
achievements.launchyou.com
www.rnd2016.eng.cam.ac.uk
myip-external.uis.cam.ac.uk
shop.girton.cam.ac.uk
svr-rnw24-bsdcam.cl.cam.ac.uk
production.media.cam.ac.uk
imaging-xnat.cruk.cam.ac.uk
dada.cl.cam.ac.uk
www.eprg.group.cam.ac.uk
gradoffrt.maths.cam.ac.uk
cucmpub-a01-ms.phone.private.cam.ac.uk
www.syslog.cl.cam.ac.uk
www.eprg.group.cam.ac.uk
staging.apply.graduate.study.cam.ac.uk
live.deposit.dps.lib.cam.ac.uk
scop.mrc-lmb.cam.ac.uk
websvr-dev.newn.cam.ac.uk
pnp.arch.cam.ac.uk
heliconius.org
everify.cam.ac.uk
stage.learn.jbs.cam.ac.uk
map.cam.ac.uk
jbs.cam.ac.uk
www.eu.admin.cam.ac.uk
www.ccbi.cam.ac.uk
www-library.ch.cam.ac.uk
www.cbsb-4rdatabase.medschl.cam.ac.uk
www.cccw.cam.ac.uk
safety.eng.cam.ac.uk
www.interfaith.cam.ac.uk
helpdesk.centurionukrs.com
www.map.cam.ac.uk
achievements.launchyou.com
camtools.cam.ac.uk
inter-ace.cl.cam.ac.uk
alumni.d9.staging.drupal.uis.cam.ac.uk
*.lib.cam.ac.uk
www.seniortutors.admin.cam.ac.uk
heritage.arch.cam.ac.uk
mi.eng.cam.ac.uk
sensorid.cl.cam.ac.uk
steth.eng.cam.ac.uk
xnat01.wbic.cam.ac.uk
www.eprg.group.cam.ac.uk
web1-test.dns.cam.ac.uk
www.winton.phy.cam.ac.uk
www.digitalhumanities.cam.ac.uk
www.ch.cam.ac.uk
www.ccs.cam.ac.uk
www.laman-lab.path.cam.ac.uk
gitlab.dtg.cl.cam.ac.uk
h2-cluster.plantsci.cam.ac.uk
forms.girton.cam.ac.uk
fwmgmt.robinson.cam.ac.uk

Certificate

The complete raw certificate details for live.deposit.dps.lib.cam.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9OAFRaeEChswE/jNEYk
cATlNTVBNM2Up3KciHR/MebDtkXytDICnSgLe5s6nABkLRWQNQFpr8wtUan9L00S
HQR8DhDqvGFPyqZUIxCcuvP4HlnKUYKsZe8jc2hjWMSv/t19NNmedCujHHU0xu9u
dN2jtUBGemsnqrkjm9N3ExgQYmE4nVzk6LeFldQ9vTIHPak+q9rgi5d2Kl1diTTu
QeuhorvaOhbSZqauv698C4ZoZkI1VRPhe8ocCtcU31DOBdYZqu8X+yWU4dCK0o7G
yDl7LNY5PIUDzADDakSBy+K/cnptH/LphWt887q3GNLY383b09j9BMyWUKYVadrr
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16055861411887334019047212800125379812
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'live.deposit.dps.lib.cam.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23710857724440543562251131221559879775946857804069223111047214142557760975119514193268708373380806403857317529445326698956675558335388713767416896143797487587249255920922938779239752459785351890616847917332097658966386687958096912151272899492375036674779733179426601606130726992000017565607018729023563584481537568957033936159841115690671234819948353679978145919005637318765036683697328096004229230611724394764332341086968208259694107404835982380985072300095543541098240594239768869315483167413809302917822315188381308113448955546890031939735853307222187259015529757719303872659464243386093216691765822475721663769387
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0ca87859c55e1e04a5d7b1567b632d43ca843b6b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (144 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.deposit.dps.lib.cam.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deposit.auth.live.deposit.dps.lib.cam.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deposit.dps.lib.cam.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.live.deposit.dps.lib.cam.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0045066141cea79fd15489a136b9f39cbbe62fd55f76efa63453f2b6a4b74f6c6dc1ad465184feaaf2f2bec6dd396fa6f10e5faba1dd028adceb7509d772429d6af424df0a5296756bbab4776381797f300da764ad296015f3d1b09da39a3b90c27b92fb8d213b84dc109b117948a18d27cb50ec329c5382162eeecd66d08a787c2c8f13c219fc1ba1946070eb8237252d382831cde72b762ba822824ec1da48141d9b935d5543b0acf3f8c01dcd5c5f38b894f87308a26feb258ecd08a31a396c40819ee0b5b089039806be054c0a6245cddc424aea713c3370915c6ec27741e197568fe80004fe813054072d1dea1634e24a7b85a1f8b4ac3dcaed08e19289ee