ted.peopleadmin.com

Issued by Amazon

About this certificate

This digital certificate with serial number 07:5a:16:f5:a8:51:e3:1c:73:0e:b7:4a:63:07:d9:9d was issued on by Amazon.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ted.peopleadmin.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:5a:16:f5:a8:51:e3:1c:73:0e:b7:4a:63:07:d9:9d
Serial Number (int): 9772368363766119071772398825786300829
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: e9:7c:1a:55:b2:b1:1f:7f:ba:14:6f:9e:b4:66:ae:6e:10:6c:30:72
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 01:d5:50:be:29:f2:2d:3c:d4:dc:67:c9:6d:df:eb:f0:d2:4d:e3:07
Fingerprint (sha256): 04:7e:96:cb:fe:54:38:18:a9:64:cf:91:70:11:49:f8:dc:0c:20:7e:4b:cd:36:a6:00:9f:f7:76:fa:9a:bb:15

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate ted.peopleadmin.com

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ted.peopleadmin.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ted.peopleadmin.com
*.ted.peopleadmin.com
tedk12.com
*.tedk12.com
talentedk12.com
*.talentedk12.com
*.cloud.talentedk12.com
schoolrecruiter.net
*.schoolrecruiter.net
britelocker.com
*.britelocker.com
britelocker.net
*.britelocker.net
mybl.me
*.mybl.me

Other certificates including the domain name peopleadmin.com

(limited to 100 certificates)
community.peopleadmin.com
edge-uc2.peopleadmin.com
edge-uc2.peopleadmin.com
ted.peopleadmin.com
edge_uc3.peopleadmin.com
edge-uc3.peopleadmin.com
*.peopleadmin.com
imperva.com
peopleadmin.com
imperva.com
edge_uc2.peopleadmin.com
peopleadmin.com
edge-uc1.peopleadmin.com
edge-uc3.peopleadmin.com
edge-uc4.peopleadmin.com
imperva.com
imperva.com
edge-uc4.peopleadmin.com
*.demofaculty.peopleadmin.com
edge_uc4.peopleadmin.com
lb03.pacloud.com
*.services.peopleadmin.com
imperva.com
ha.peopleadmin.com
imperva.com
edge_uc4.peopleadmin.com
edge_uc3.peopleadmin.com
ha.peopleadmin.com
edge-uc3.peopleadmin.com
edge-uc3.peopleadmin.com
incapsula.com
edge_uc3.peopleadmin.com
*.ca.services.peopleadmin.com
ha.peopleadmin.com
edge_uc3.peopleadmin.com
edge_uc4.peopleadmin.com
edge_uc2.peopleadmin.com
ha.peopleadmin.com
peopleadmin.com
ted.peopleadmin.com
edge_uc4.peopleadmin.com
peopleadmin.com
edge-uc4.peopleadmin.com
edge_uc3.peopleadmin.com
edge_uc3.peopleadmin.com
edge_uc4.peopleadmin.com
edge-uc1.peopleadmin.com
imperva.com
edge-uc2.peopleadmin.com
ted.peopleadmin.com
peopleadmin.com
edge_uc3.peopleadmin.com
imperva.com
edge-uc1.peopleadmin.com
edge-uc4.peopleadmin.com
edge-uc2.peopleadmin.com
edge_uc3.peopleadmin.com
imperva.com
edge_uc2.peopleadmin.com
edge-uc3.peopleadmin.com
patest.peopleadmin.com
edge-uc3.peopleadmin.com
edge-uc3.peopleadmin.com
sfqa.peopleadmin.com
imperva.com
ha.peopleadmin.com
*.sandboxfaculty.peopleadmin.com
lb03.pacloud.com
imperva.com
ha.peopleadmin.com
highered-ci.peopleadmin.com
ha.peopleadmin.com
edge-uc3.peopleadmin.com
*.peopleadmin.com
edge_uc3.peopleadmin.com
edge_uc1.peopleadmin.com
*.services.peopleadmin.com
edge_uc3.peopleadmin.com
edge-uc1.peopleadmin.ca
edge_uc1.peopleadmin.com
edge_uc2.peopleadmin.com
edge_uc1.peopleadmin.com
edge-uc1.peopleadmin.com
uc1.pacloud.net
ha.peopleadmin.com
edge_uc2.peopleadmin.com
edge_uc3.peopleadmin.com
edge-uc3.peopleadmin.com
peopleadmin.com
peopleadmin.com
imperva.com
peopleadmin.com
edge-uc3.peopleadmin.com
edge_uc3.peopleadmin.com
edge_uc1.peopleadmin.ca
edge-uc4.peopleadmin.com
edge-uc2.peopleadmin.com
edge-uc4.peopleadmin.com
edge_uc3.peopleadmin.com
ha.peopleadmin.com

Certificate

The complete raw certificate details for ted.peopleadmin.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsICN3+0GQfnjTzOjCYqK
UGd6F/8Lus96PKo3AeWgwEmtWSWkazFTfSRWPjLSw92UO0vKUt/nOA8sRWAwx4Cs
sGQbjnLcC/fwKO3k5X3s1UWLe25gfJ6/kIkA0EfOaaeVw49Ce8uuKDLaxtIOFIM4
LqdZstrIURsSLLmBq0S+52O9JwbfqgnQPbDOczBb/X7A9iZEfnyxnqq3XEnw9dIW
r2dC3YHJwTk2f744vSwgMOM+iovFIwVQM/NwPCde9azt8U7MtChyqdrnhmArj6EJ
7xVAdiT4kF1ijyGiEPjjGrHuQ/+Hwi095l29Zs4sje3ZSoN3vixwh+rObXHnPmDx
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9772368363766119071772398825786300829
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ted.peopleadmin.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22281334111771882160701773993420987722876368885810439160979063148302016245488648673483711465925747814542429797158612028770306386838727121629238113357763764453659010675419085662052340352402521923707201058506120448456331070834553731050128490118101036727086000447561307832349755241205288745369141634962993607936507822763798980612314478307769387734349601618116332843806382514861070617904808893441715340865481438370786188970767692901781914473323406417320348149285730585028641317040358349951559516583866984110826258117992147822974991334307664673714634364773245871954033085796039651979249282164275645262226567692708695044501
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e97c1a55b2b11f7fba146f9eb466ae6e106c3072
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (271 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ted.peopleadmin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ted.peopleadmin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tedk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tedk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talentedk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.talentedk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloud.talentedk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolrecruiter.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schoolrecruiter.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'britelocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.britelocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'britelocker.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.britelocker.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybl.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mybl.me'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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