ol.berklee.edu

Issued by Amazon

About this certificate

This digital certificate with serial number 0f:09:71:c4:5b:29:e2:b3:68:d8:ea:73:dd:15:1c:48 was issued on by Amazon.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ol.berklee.edu

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:09:71:c4:5b:29:e2:b3:68:d8:ea:73:dd:15:1c:48
Serial Number (int): 19987458077719389393475919687389092936
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 40:3e:2f:da:31:27:ae:98:9c:d0:db:a5:8b:dc:eb:6e:6b:10:a7:37
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 47:6d:07:bf:d0:fb:68:29:79:65:e0:1f:29:c5:8b:a7:0d:dc:b4:47
Fingerprint (sha256): 02:43:f6:f5:6d:37:c5:c6:01:44:aa:a3:ab:86:12:14:fc:86:a3:99:93:45:40:48:35:e9:34:9b:80:11:14:45

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate ol.berklee.edu

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ol.berklee.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ol.berklee.edu
dev.ol.berklee.edu
online.claflin.edu
inquire.roanoke.edu
elearn.nichc.org
learn.ndm.edu
lms.ethosschool.org
online.pmc.edu
myeclassroom.pcsb.org
sandbox.moodlerooms.extended.nau.edu
sandbox.ayersinstitute.org
train.ndm.edu
community.moodle2.lsu.edu
lsuonline.moodle3.lsu.edu
moodle.associationforsoftwaretesting.org
bbopenlms.mitchellcc.edu
elearn.pcsb.org
uhigh.moodle2.lsu.edu

Other certificates including the domain name berklee.edu

(limited to 100 certificates)
5674069752020992-fe1.pantheonsite.io
ucdc.edu
amploadvance.com
ask.library.berklee.edu
test.eis.uw.edu
ol.berklee.edu
guides.library.berklee.edu
development.moodlerooms.com
development.moodlerooms.com
acquia-sites.com
remix.berklee.edu
archives.berklee.edu
apsprd108.berklee.edu
development.moodlerooms.com
5674069752020992-fe1.pantheonsite.io
remote-vpn.berklee.edu
n002.offcampuspartners.com
san-14-s12.tlsprovisioning.exacttarget.com
n002.offcampuspartners.com
development.moodlerooms.com
acquia-sites.com
development.moodlerooms.com
n002.offcampuspartners.com
library-stage.berklee.edu
ol.berklee.edu
5674069752020992-fe1.pantheonsite.io
hub.berklee.edu
5674069752020992-fe1.pantheonsite.io
development.moodlerooms.com
5674069752020992-fe1.pantheonsite.io
offcampushousing.fau.edu
5674069752020992-fe1.pantheonsite.io
amploadvance.com
givingday.berklee.edu
apsprd014.berklee.edu
admissions.berklee.edu
welcome.online.berklee.edu
demo.canvas.online.berklee.edu
fts.berklee.edu
lrmedia.berklee.edu
development.moodlerooms.com
5674069752020992-fe1.pantheonsite.io
development.moodlerooms.com
centralnicstatus.com
san-14-s12.tlsprovisioning.exacttarget.com
ask.library.berklee.edu
5674069752020992-fe1.pantheonsite.io
208.lsnc.net
n002.offcampuspartners.com
n002.offcampuspartners.com
development.moodlerooms.com
development.moodlerooms.com
development.moodlerooms.com
development.moodlerooms.com
5674069752020992-fe1.pantheonsite.io
development.moodlerooms.com
acquia-sites.com
development.moodlerooms.com
n002.offcampuspartners.com
5674069752020992-fe1.pantheonsite.io
online.berklee.edu
acquia-sites.com
developer.blackboardopenlms.com
bos-isepan1.berklee.edu
scsc-casper.berklee.edu
offcampushousing.fau.edu
*.genesis.k8s.online.berklee.edu
remote-vpn.berklee.edu
development.moodlerooms.com
ask.library.berklee.edu
online.berklee.edu
development.moodlerooms.com
5674069752020992-fe1.pantheonsite.io
acquia-sites.com
development.moodlerooms.com
5674069752020992-fe1.pantheonsite.io
5674069752020992-fe1.pantheonsite.io
online.berklee.edu
opcpostback.berklee.edu
5674069752020992-fe1.pantheonsite.io
amploadvance.com
5674069752020992-fe1.pantheonsite.io
developer.blackboardopenlms.com
learningcenter-stage.berklee.edu
wbstst004.berklee.edu
learningcenter.berklee.edu
5674069752020992-fe1.pantheonsite.io
development.moodlerooms.com
5674069752020992-fe1.pantheonsite.io
*.online.berklee.edu
5674069752020992-fe1.pantheonsite.io
cms.online.berklee.edu
offcampushousing.fau.edu
5674069752020992-fe1.pantheonsite.io
5674069752020992-fe1.pantheonsite.io
demo.canvas.online.berklee.edu
guides.library.berklee.edu
development.moodlerooms.com
development.moodlerooms.com
blogs.online.berklee.edu

Certificate

The complete raw certificate details for ol.berklee.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiv6Be80Zpyq9YEFIrt2W
7zs3MWA2MJCLU7mdLT+sWr8H4w0hIU4pFfC2aiGrO8uGElt9pQTuqBK8WN2ybXZN
UVqQSyWuHiaPv5ABxgM2poVzkh0O2bmoMs/6pg8NMQ2LAC//IQV0EAa2WrqGA412
qknXWlJW6SbWaEWzQOpBQsMMx2eWl7w8ivKP87Ygi85kojgEu8NqgM2p9LOxLZc6
FAyIepe/biVlhNTD1v6oTddPVu5ONxEmKW7K76QkyA3e/VjTTwkaFIUCOMtX6rws
e0u+ZaTKUpGSs7qmPAPhWNIv1++fEEjWt2KvicnxVuPf76R9pZsUxN4l3ngJ/aZR
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19987458077719389393475919687389092936
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ol.berklee.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17546387570485877187777438579121785080326368037695454537667582494229434823559316132810230176761474613871991646563367043324918333963091392870954849654365991517182482450176896538169379154182814883657853440062746513902671279658831122573172353759718309533759793666637115511124214273218425384740466570425414423195472415555526497282816007188794060942981040790893023056942955315387879455976518823274717945649380316726576021138962345655966360552963047418823309485930456192355664071519873177369494746235251410923942593673854454931569839356607726790733581842573367181715348345770896642665599644618569476221629867635624903070047
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							403e2fda3127ae989cd0dba58bdceb6e6b10a737
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (417 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ol.berklee.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ol.berklee.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.claflin.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inquire.roanoke.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elearn.nichc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.ndm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lms.ethosschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.pmc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myeclassroom.pcsb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.moodlerooms.extended.nau.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.ayersinstitute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'train.ndm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.moodle2.lsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsuonline.moodle3.lsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moodle.associationforsoftwaretesting.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbopenlms.mitchellcc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elearn.pcsb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhigh.moodle2.lsu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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