bucknellcareerconnect.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0c:1e:1e:4e:ff:33:b0:a3:30:92:53:d6:89:9d:bf:92 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bucknellcareerconnect.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:1e:1e:4e:ff:33:b0:a3:30:92:53:d6:89:9d:bf:92
Serial Number (int): 16107119586240987834496210053468372882
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b5:a5:2e:f4:ac:50:3e:82:f4:1c:d6:60:95:81:62:d9:7b:74:25:65
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 6a:90:be:e5:1d:1b:9b:16:23:2c:86:08:a4:c1:5a:f9:56:c3:83:fd
Fingerprint (sha256): 02:ee:5b:d9:87:b9:95:d9:a9:97:a3:d3:81:4f:cf:58:f4:5d:52:52:e2:96:40:21:a5:38:b5:2b:21:96:ba:64

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate bucknellcareerconnect.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bucknellcareerconnect.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bucknellcareerconnect.com
www.bucknellcareerconnect.com

Other certificates including the domain name bucknellcareerconnect.com

(limited to 100 certificates)
graduway.com
bucknellcareerconnect.com
baalumninetwork.com
ipadeconnect.com
ipadeconnect.com
ipadeconnect.com
graduway.com
ipadeconnect.com
ipadeconnect.com
ipadeconnect.com
graduway.com
ipadeconnect.com
ipadeconnect.com
ipadeconnect.com
graduway.com
bobcatconnect.org
ipadeconnect.com
beachwoodconnect.com
bucknellcareerconnect.com
beachwoodconnect.com
baalumninetwork.com
ipadeconnect.com
graduway.com
graduway.com
bestbuddiesconnect.org
graduway.com
ipadeconnect.com
ipadeconnect.com
graduway.com
boscoalumni.org
graduway.com
beachwoodconnect.com
m.bucknellcareerconnect.com
bergencatholicconnect.com
ipadeconnect.com
m.bucknellcareerconnect.com
beachwoodconnect.com
ipadeconnect.com
bbnsconnect.org
bbnsconnect.org
ipadeconnect.com
bobcatconnect.org
graduway.com
ipadeconnect.com
bobcatconnect.org
graduway.com
graduway.com
bucknellcareerconnect.com
ipadeconnect.com
graduway.com
graduway.com
bobcatconnect.org
bergencatholicconnect.com
bbnsconnect.org
graduway.com
ipadeconnect.com
ipadeconnect.com
bucknellconnect.com
bobcatconnect.org
graduway.com
graduway.com
ipadeconnect.com
bucknellcareerconnect.com
ipadeconnect.com
ipadeconnect.com
ipadeconnect.com
badgersinfinance.net
graduway.com
ipadeconnect.com
graduway.com
baalumninetwork.com
graduway.com
bobcatconnect.org
ipadeconnect.com
graduway.com
bucknellcareerconnect.com
ipadeconnect.com
backlot.afi.com
bobcatconnect.org
ipadeconnect.com
ipadeconnect.com
ipadeconnect.com
boyslatinconnect.com
bobcatconnect.org
ipadeconnect.com
bucknellcareerconnect.com
graduway.com
ipadeconnect.com
bucknellconnect.com
graduway.com
graduway.com
baalumninetwork.com
graduway.com
ipadeconnect.com
ipadeconnect.com
graduway.com
ipadeconnect.com
boscoalumni.org
graduway.com
graduway.com

Certificate

The complete raw certificate details for bucknellcareerconnect.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov1uwqfODxuPB4gVnZVu
n48lyKPSWINxqd08Lnc1zXG1lb2GNaSw05DAMHe7CmfZnPaKi78bxORUZfreuXWi
2Aw2c7928iTmYmDwXJNeQGsAU1aBtyHV/F2Tcm5o/V4NUUIAfSVyFCmGTv/HNSxv
x4osp53CUcmkJwZyWEsPsioBb8MMbGUhZQAkmeiTpzPYzZyxiRcGoZ+s4tyBP1SJ
haiDiSiwl3YSY76rKXYILiCe3Ps8CmStUcKtzfymfj2DPzkBSp7qIQaw3jVAXTgN
WdvBQpyk/bm58+6jdmcHCQ5nGY4015HAfLRGXGN/byQiyZ3eh1zy1V+gd5mvrbCA
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16107119586240987834496210053468372882
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bucknellcareerconnect.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20575577705798289319036186710444372364933164502797157820931802023647118752383597345200136069312537667983464147444783110540875329897839770861269469285092570187306561404510749230864986951316677014608945798231480766361055665234395822037623058637678507501854316734221303960248629032512359022785527754596937591228411265471824433016722495842554465125765777927937199350899257073908073230934814435164886831809233557067337938732303252117399959336608009385767029687361327151288479648256545145430968258567450776895562255055940622690916709475636172438324516553747548576819154683277913803298124645600595769193471332221432737333349
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b5a52ef4ac503e82f41cd660958162d97b742565
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucknellcareerconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bucknellcareerconnect.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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