org.ohio-state.edu

Issued by Amazon

About this certificate

This digital certificate with serial number 02:01:73:c8:6e:0b:07:d3:df:42:0a:e6:16:ff:04:5d was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=org.ohio-state.edu

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:01:73:c8:6e:0b:07:d3:df:42:0a:e6:16:ff:04:5d
Serial Number (int): 2665996645221975597681948182722839645
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 18:2f:93:65:e8:23:85:21:e6:23:f6:cf:b9:b6:5d:77:41:60:ac:c7
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 80:d8:50:ec:fb:36:56:2c:e9:fa:b5:e9:f2:e3:b7:e5:66:f9:67:fd
Fingerprint (sha256): 05:96:13:40:e7:38:6b:f8:38:43:4a:f7:d3:8f:67:62:be:cc:21:3a:78:5f:3f:ff:9b:fa:0c:68:d7:79:28:d4

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate org.ohio-state.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for org.ohio-state.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

org.ohio-state.edu
*.org.ohio-state.edu

Other certificates including the domain name ohio-state.edu

(limited to 100 certificates)
fcobcas.cob.ohio-state.edu
www.ctlr.ohio-state.edu
*.cfaes.ohio-state.edu
mail.ath.ohio-state.edu
opensource.osu.edu
mycvm.vet.ohio-state.edu
it-ftp-vm.oardcwin.ohio-state.edu
5762014039244800-fe4.pantheonsite.io
devel.mbi.ohio-state.edu
cse.engineering.osu.edu
5668753656250368-fe1.pantheonsite.io
rxp1.pharmacy.ohio-state.edu
socc1-vm2dev-idrac.cob.ohio-state.edu
nacs3-sec.net.ohio-state.edu
chembio.osu.edu
mediatransfer-test.it.ohio-state.edu
remote.studentaffairs.ohio-state.edu
help.cse.ohio-state.edu
cfaes.osu.edu
fosu.asc.ohio-state.edu
fw-hso.rf.ohio-state.edu
expertlink.it.ohio-state.edu
5668753656250368-fe1.pantheonsite.io
servicedesk.asc.ohio-state.edu
mbd.asc.ohio-state.edu
emat.it.ohio-state.edu
5651124426113024-fe1.pantheonsite.io
portal.infosec.ohio-state.edu
5751700212154368-fe2.pantheonsite.io
alprweb21.it.ohio-state.edu
5736592127819776-fe3.pantheonsite.io
telr.ohio-state.edu
intranet.mecheng.ohio-state.edu
vpn.cfaes.osu.edu
exchange.lima.ohio-state.edu
socc2-vm4-idrac.cob.ohio-state.edu
5751700212154368-fe2.pantheonsite.io
*.chrr.ohio-state.edu
5663052624035840-fe4.pantheonsite.io
coe-portal.cse.ohio-state.edu
5690665774088192-fe2.pantheonsite.io
5751700212154368-fe2.pantheonsite.io
certs.asc.ohio-state.edu
elements-test.it.ohio-state.edu
socc1-vm3-idrac.cob.ohio-state.edu
cura-gis-web.asc.ohio-state.edu
5701330244993024-fe3.pantheonsite.io
5762014039244800-fe4.pantheonsite.io
5651124426113024-fe1.pantheonsite.io
farnsworth.ece.ohio-state.edu
amc.net.ohio-state.edu
species-interactions.asc.ohio-state.edu
5762014039244800-fe4.pantheonsite.io
vpn1.newark.ohio-state.edu
scalar.asc.ohio-state.edu
org.ohio-state.edu
guestauth.infosec.ohio-state.edu
*.vet.ohio-state.edu
arcgis.asc.ohio-state.edu
www.ecr6.ohio-state.edu
web.engineering.osu.edu
5651124426113024-fe1.pantheonsite.io
owa.newark.ohio-state.edu
5651124426113024-fe1.pantheonsite.io
ccbbi.osu.edu
streaming-01.asc.ohio-state.edu
sslvpn.busfin.ohio-state.edu
www.opensource.osu.edu
5701330244993024-fe3.pantheonsite.io
elements-dev.it.ohio-state.edu
5751700212154368-fe2.pantheonsite.io
foo.cns.ohio-state.edu
cayuse.rf.ohio-state.edu
mysite.studentaffairs.ohio-state.edu
5663052624035840-fe4.pantheonsite.io
5701330244993024-fe3.pantheonsite.io
bfap-web-01.busfin.ohio-state.edu
confluence.asc.ohio-state.edu
*.portal.infosec.ohio-state.edu
mbd.asc.ohio-state.edu
rails.asc.ohio-state.edu
5751700212154368-fe2.pantheonsite.io
www.esue.ohio-state.edu
5701330244993024-fe3.pantheonsite.io
library.ohio-state.edu
busfin.ohio-state.edu
access.gradsch.ohio-state.edu
recruiting.cob.ohio-state.edu
confluence.asc.ohio-state.edu
*.cob.ohio-state.edu
alprweb21.it.ohio-state.edu
a2a-db.asc.ohio-state.edu
vpn1.net.ohio-state.edu
socc1-vm3dev-idrac.ad.cob.ohio-state.edu
5762014039244800-fe4.pantheonsite.io
5762014039244800-fe4.pantheonsite.io
engineering.osu.edu
www.dent.ohio-state.edu
intranet.rf.ohio-state.edu
mail.ular.ohio-state.edu

Certificate

The complete raw certificate details for org.ohio-state.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3m9m317Hy7lSeqxuSJ6z
3AwpLAI68RAr00U0upJQhFN3o411EArsalFQQYBbL35qEFZyBaZPjrmHD3VWCvZe
L0P1p61m/FoJpyVYmD8muU438lB07klBeG8ewnrlUDmQXikdIyw7Ni1ATa2wBWif
7tXgHK+Zj5OOof88rQRau+LFW+9bN7mQz5fO298gP2vgsqHosMSzacwy2ui3zG7J
yFT4qzNqR6KlqoCjbEE19tvC9k/CwS1gYhKp0Bfm0DslFZsNfjIPd0NSSgx1Vizh
MvaFJI6hymEmrVBTV51/5wLA5XLO2R0S0EcDlNt63cQ0y8oNr32pQsdvJQm/rdaX
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2665996645221975597681948182722839645
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-05 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'org.ohio-state.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28079838000087554005374963661296241914852860619831230075208166772147512589021273338548839515817525821649593719784332642595046475644909364881413463533742173971897250983483848550710737924547908336404503128763792710333204651598919234728049847097928022553876042248414213248821643216460650227425397477801936145997050942690764856662134577514333273424932147990891568680426450809030498655695855618182045232975405939800616090749924731255187413341924955206346044938840960639117759994843625585782080459198780585522964019731317046993636148695727157790107354369108372901449570301348322518477442807034409829629927619248749920294793
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							182f9365e8238521e623f6cfb9b65d774160acc7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'org.ohio-state.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.org.ohio-state.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016e3c44b5c00000040300483046022100aaa6b949840a1704cc73f1e1ddd98e0bd9c18132953b49f66cd9a8346efca492022100f302328c1a36c1e80cd7c0827309a2444a711e2d03c0d031fbe5ff746abeabfa0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016e3c44b6a400000403004730450220426c370c970ad9122fd33e76cb42365b14aa97068390b1a5c5bacf91aa4543dd022100a5181c3b0512dbbb568f7194b272c7e71d7dc81ff1fc266c92f35691bc8292f3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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