dev.adtalem.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0e:7b:81:de:6f:85:f4:a2:3d:92:41:6d:af:79:cd:15 was issued on by Amazon.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dev.adtalem.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:7b:81:de:6f:85:f4:a2:3d:92:41:6d:af:79:cd:15
Serial Number (int): 19250478508594333725539273819922484501
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 2c:f7:78:f2:c6:cd:7a:e5:e5:15:46:8c:6b:d7:51:17:73:a3:d7:6e
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): d7:6b:dd:14:aa:9c:37:8b:25:3e:87:5a:61:c7:cb:67:a4:be:50:61
Fingerprint (sha256): 05:75:d1:f0:7e:9d:65:c3:02:5a:3a:1e:5c:c9:51:f6:26:ff:19:d9:01:22:97:ba:1d:0a:23:df:35:81:d3:b1

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate dev.adtalem.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev.adtalem.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dev.adtalem.com
dev.rossu.edu
medical.dev.rossu.edu
www.dev.adtalem.com
www.dev.aucmed.edu
www.dev.rossu.edu
veterinary.dev.rossu.edu
merp.dev.medschoolprep.com
ccdm.dev.aucmed.edu
med.dev.rossu.edu

Other certificates including the domain name adtalem.com

(limited to 100 certificates)
secured2.san1.raxcdn.com
www.int.devry.edu
cyberark.adtalem.com
api.dev.adtalem.com
sso.adtalem.com
internalservices.adtalem.com
secured2.san1.raxcdn.com
patho.games.adtalem.com
savinglives.games.adtalem.com
*.adtalem.com
myross.adtalem.com
secure12.san1.raxcdn.com
caw-cbrp00wa01.dvuadmin.net
adtalem.com
dev.adtalem.com
icc.games-dev.adtalem.com
sso.adtalem.com
adtalem.com
edge-exe104.vmce.adtalem.com
dev.adtalem.com
services.adtalem.com
jenkinssand.dev.adtalem.com
bi.qa.adtalem.com
www.adtalem.com
atge.idm.qa.adtalem.com
adtalem.com
aos.dev.adtalem.com
stumerp2.qa.adtalem.com
dev5195-exc102.vmce.adtalem.com
icc.games-dev.adtalem.com
adtalem.com
jira-ies.adtalem.com
venafitest.adtalem.com
edge-exe106.vmce.adtalem.com
edge-exe202.vmce.adtalem.com
savinglives.games.adtalem.com
connect.adtalem.com
cdn-myvrscope-elt-dev.adtalem.com
wsr.dev.adtalem.com
por.games-qa.adtalem.com
as.adtalem.com
venafitesting123.adtalem.com
sl.adtalem.com
qa.adtalem.com
int.adtalem.com
confluence-ies.adtalem.com
5195dev3-cuc11-ms.vmce.adtalem.com
adtalem.com
lms-analytics-dev.adtalem.com
bamboo-ies.adtalem.com
games.adtalem.com
dss.adtalem.com
sl-dev.adtalem.com
qa.adtalem.com
budget.qa.adtalem.com
cal-epcd00wa01.dev.adtalem.com
bi.adtalem.com
aem.adtalem.com
adtalem.com
dss.qa2.adtalem.com
int.adtalem.com
jenkinssand.dev.adtalem.com
patho.games-dev.adtalem.com
secure4.san1.raxcdn.com
secure12.san1.raxcdn.com
por.games-dev.adtalem.com
bios242.games.adtalem.com
games-qa.adtalem.com
secure12.san1.raxcdn.com
release-notes-ies.adtalem.com
secure12.san1.raxcdn.com
secure12.san1.raxcdn.com
afe.games-dev.adtalem.com
blog.qa.devry.edu
wso2aui.adtalem.com
aem.qa.adtalem.com
afe.games-qa.adtalem.com
wso2aui.adtalem.com
afe.games.adtalem.com
mobile.adtalem.com
www.stg.adtalem.com
sia-qa.adtalem.com
nexus-ies.adtalem.com
dev5195-exc208.vmce.adtalem.com
www.adtalem.com
release-notes-ies.adtalem.com
secure12.san1.raxcdn.com
*.qa.adtalem.com
adtalem.com
blog.qa.devry.edu
edge-exe106.vmce.adtalem.com
aemecomm.dev.adtalem.com
remote.adtalem.com
dss.dev2.adtalem.com
*.mobile.dev.adtalem.com
games-qa.adtalem.com
bios242.games-qa.adtalem.com
sl-qa.adtalem.com
services.int.adtalem.com
m.stg.rossu.edu

Certificate

The complete raw certificate details for dev.adtalem.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2D7SNa1VEr5r/bCQexyf
fAtsymnMLX3qQCzYYjkPVnZb3o0cwdKBDo4w01Tk3xEmdVlwpvtckfgKQXsyoWAA
8wfhpWB2L/BRefo/1TXVK6iIYg69LIMQqQ1tICUvmVGgiu+OoqlhhfW3ZE0gzNzL
kLqmLo1ANF/NaL/1sFsJhXaHi+77PQlDIpAusHbsp5mQ2kq2fFx9ZA7jIpBBWo5s
8DaQj3P9mbJHRlr4I8gaXHwjyWGjUHawaNTV8njH2iUETD7jc9Z2shu8wDyWpJke
OjWCtYISAr/7n68SfQRQhu1nZvCAjB/H2cODBw0t5VAVIWOV+wIfOMEy9xAzR+b1
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19250478508594333725539273819922484501
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.adtalem.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27298452127209960447505851238870976525198765125838359374509391793078388471184691457725631736066115684243143894548101974933867182675263307107792550401565082765067564013863310879183177304165774146399305336325449607900304274422167486802512993882593717218520099887687952373347865730696793621971313979759429793263533448576652490272954149825289615905104094981555378113552371836946317497628292797665415070861729957051644225635633971608070551762054177832562779490292480494889765438355995396381858759744278711059768646153424003616007972812579366965626065537902631872220098129742694509660654312831988644956024091724704905622793
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2cf778f2c6cd7ae5e515468c6bd7511773a3d76e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (212 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.adtalem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.rossu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medical.dev.rossu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.adtalem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.aucmed.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.rossu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'veterinary.dev.rossu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merp.dev.medschoolprep.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccdm.dev.aucmed.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'med.dev.rossu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000168480ea1e7000004030046304402204ad08bbad44b3da9cacd84855baeae86ac06fd37404d3687fd2e671772a5d1d20220467754483ec990f597d21f60fc8e54018d203be7256bfc4032380a520cdf90ac0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000168480ea2c1000004030046304402206368624c55035962f7933110b856bae54b91f06f6463819521b325ef785ce7ae022020bf149b652715c41fb36069cafc306e6df5cba2d89abc00b79fed19ad7afc86
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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