dar.connect.gwu.edu

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 01:5b:ae:86:c9:16:f8:c6:52:3b:4b:ca:d6:50:9e:db was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dar.connect.gwu.edu

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:5b:ae:86:c9:16:f8:c6:52:3b:4b:ca:d6:50:9e:db
Serial Number (int): 1805266827990655636565458574168334043
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 13:0b:42:fd:b5:da:48:0a:c5:02:09:22:75:0c:e4:f9:b3:b5:e3:d1
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 5c:d3:2c:26:de:8f:89:63:d1:86:1d:0a:43:bc:f6:83:07:94:9e:7d
Fingerprint (sha256): 02:ea:fb:90:44:8b:34:33:ed:8a:67:e7:f0:8f:70:2b:88:c9:56:3c:c3:98:0c:7a:7f:cd:80:e4:28:8e:5f:9e

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate dar.connect.gwu.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dar.connect.gwu.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dar.connect.gwu.edu
dar-search.connect.gwu.edu

Other certificates including the domain name gwu.edu

(limited to 100 certificates)
keystone.it.gwu.edu
webrequest.gwu.edu
progressreport.publichealth.gwu.edu
it.uahs.arizona.edu
secure.mdl.io
fb-webexhybrid-c.uc.gwu.edu
identity.gwu.edu
5679413765079040-fe4.pantheonsite.io
linc.seas.gwu.edu
sni.cloudflaressl.com
assets.library.gwu.edu
secure.mdl.io
guides.himmelfarb.gwu.edu
uconnectlabs.com
banweb.gwu.edu
ode.hr.gwu.edu
sonxr1.erp.gwu.edu
hcsi.seas.gwu.edu
ipcc.seas.gwu.edu
www.design-engineering.princeton.edu
uconnectlabs.com
bigdata.seas.gwu.edu
5650817738604544-fe4.pantheonsite.io
5649202965118976-fe1.pantheonsite.io
biostatcenter.gwu.edu
www.hcii.cs.cmu.edu
dataprograms.gwu.edu
landing.healthsciencesprograms.online.gwu.edu
securetransfer.gwu.edu
208.lsnc.net
sni.cloudflaressl.com
www.blogs.earthjustice.org
useastucc5.acquia.com
hsrc.himmelfarb.gwu.edu
hsrc.himmelfarb.gwu.edu
careerconnect.gwu.edu
alumnifamiliesweekend.gwu.edu
healthsciencesprograms.online.gwu.edu
linc.seas.gwu.edu
hermes.gwu.edu
webdev.colorado.edu
virtual2.unlv.edu
dar.connect.gwu.edu
*.mfa.gwu.edu
sa.gwu.edu
ieres.elliott.gwu.edu
getinfo.gspm.gwu.edu
tftcav.seas.gwu.edu
natsecuritymedia.gwu.edu
test-admin.gworld.gwu.edu
jacob.law.gwu.edu
*.publichealthonline.gwu.edu
5679413765079040-fe4.pantheonsite.io
servicedesk.kerrylogistics.com
efc.gwu.edu
uconnectlabs.com
servicedesk.kerrylogistics.com
scholarship.law.gwu.edu
dit-sebmsfb-p01.ead.gwu.edu
scholarship.law.gwu.edu
hub.meed.com
amer-san1.blackboard.com
208.lsnc.net
uconnectlabs.com
www.cspri.seas.gwu.edu
webrequest.gwu.edu
services.gworld.gwu.edu
archivesspace.library.gwu.edu
dev.wellness.yale.edu
5679413765079040-fe4.pantheonsite.io
onlineemse.seas.gwu.edu
oak.itl.gwu.edu
uconnectlabs.com
els.at.gwu.edu
sni.cloudflaressl.com
5650817738604544-fe4.pantheonsite.io
*.mfa.gwu.edu
sa.gwu.edu
dnp2019.columbian.gwu.edu
live.ucdavis.edu
info-dev.calperformances.org
*.publichealthonline.gwu.edu
bmeday.seas.gwu.edu
secure.mdl.io
sorger.seas.gwu.edu
www.cesun2016.seas.gwu.edu
good.gsm.cornell.edu
fb-webexhybrid-c.uc.gwu.edu
hpcat.seas.gwu.edu
business.gwu.edu
eagle.phys.gwu.edu
scom.it.gwu.edu
uwspoctmct1.es.gwu.edu
kbox.seas.gwu.edu
hermes.gwu.edu
landing.gsehd.gwu.edu
servicedesk.kerrylogistics.com
*.elliott.gwu.edu
gwoffice.it.gwu.edu
liberalarts.ss.pacific.edu

Certificate

The complete raw certificate details for dar.connect.gwu.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1w6mfbedTjHKnv9ztfE5
nJeszN9MRB+/je2oOzyczl0DzTc0FrEFiDiwmr8Y0GAFLzfgImLPIVO3hOcicmM2
0Gl4r3aaXI3cmJnW2O5JkLgKRNlnhUemI8ECSuAnR8Hnt5hHcEfyKrZgGdWAZ7ou
ChQMUe1ydkDCi9Jlag3sX9bhaK7DeXDDunvx5d9B+fWfasf60DIQ+ZsnH0Rm4vL5
4gxpgoyA/yOjKw6c5fFntmKQa8nP/9KXpEmEsSY+qrzzf6Bp0zqyBt4sumL/ppW/
EgMFffBkzYRUH/jp5avu3S02meed3XS1JOHCqauFYVRyfvVUt38UoboyeB0cgffF
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1805266827990655636565458574168334043
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dar.connect.gwu.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27148459927399660139124960430612346599490438787813378333014954766483815499800898664400810760382665301298944995168846980456920456634860657830070849884004066673100943014664758939954070815210520494224731330922145215221596419641266636094465868824604457951567738855617949664752356097647740931983646199573724154195336488033049074000511671144260185365052787259080748464709884172794111202389614939067293774532776892134033846614338049591923064056378992509638100232789787449614342150143310587533356571094640193076527669704769728626125300777344451383270380228782848398821416247324795077982010642074557526369447668780169162114419
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							130b42fdb5da480ac5020922750ce4f9b3b5e3d1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dar.connect.gwu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dar-search.connect.gwu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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