learn7syst-internal.open.ac.uk

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0e:6c:14:dd:63:c5:0f:32:e0:54:40:9d:5b:33:8c:39 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=learn7syst-internal.open.ac.uk

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:6c:14:dd:63:c5:0f:32:e0:54:40:9d:5b:33:8c:39
Serial Number (int): 19170383190203818423137986054169267257
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f2:f1:fa:64:f9:22:48:9f:be:e2:1f:0f:36:83:aa:51:0a:85:6e:de
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 88:6f:da:d5:51:fb:2c:55:4c:9f:55:e0:bc:b4:23:d3:c2:a8:dd:d4
Fingerprint (sha256): 05:b3:d8:9c:43:2e:90:88:e4:65:24:5e:b6:82:86:ce:12:f8:04:c0:40:24:03:3f:83:b9:74:7d:a5:f3:2a:ad

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate learn7syst-internal.open.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for learn7syst-internal.open.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

learn7syst-internal.open.ac.uk

Other certificates including the domain name open.ac.uk

(limited to 100 certificates)
filetransfer.open.ac.uk
san-12-s50.tlsprovisioning.exacttarget.com
xai.kmi.open.ac.uk
blog.cohere.open.ac.uk
*.alumni.open.ac.uk
kmi.open.ac.uk
e1p-internal-sandbox.mrooms.net
dsg.kmi.open.ac.uk
sas-va-test.open.ac.uk
people.kmi.open.ac.uk
internationalfunders.open.ac.uk
technologies.kmi.open.ac.uk
e1p-internal-sandbox.mrooms.net
weblab.open.ac.uk
events.kmi.open.ac.uk
dev-ext.kmi.open.ac.uk
dsg.kmi.open.ac.uk
livestream01-podcast.open.ac.uk
forge.kmi.open.ac.uk
www3.open.ac.uk
hr-myvw-acct.open.ac.uk
impact.kmi.open.ac.uk
e1p-internal-sandbox.mrooms.net
impact.kmi.open.ac.uk
learn7-internal.open.ac.uk
maptesting.kmi.open.ac.uk
skm.kmi.open.ac.uk
msds-acct.open.ac.uk
arvr.kmi.open.ac.uk
blog.cohere.open.ac.uk
internationalfunders-systest.open.ac.uk
css2.open.ac.uk
iserve.kmi.open.ac.uk
hasta.open.ac.uk
www-jime.open.ac.uk
valencia.open.ac.uk
healthwellbeing.kmi.open.ac.uk
connections.kmi.open.ac.uk
osl.open.ac.uk
bigdata.kmi.open.ac.uk
dc-live-c.open.ac.uk
e1p-internal-sandbox.mrooms.net
directaccess-nls-acct.open.ac.uk
healthwellbeing.kmi.open.ac.uk
learn7syst-internal.open.ac.uk
instituteofcoding.open.ac.uk
news.kmi.open.ac.uk
instituteofcoding.open.ac.uk
instituteofcoding.open.ac.uk
oubs-business-exchange.kmi.open.ac.uk
intranet6.open.ac.uk
e1p-internal-sandbox.mrooms.net
*.figshare.com
knowledgemakers.kmi.open.ac.uk
msds-acct.open.ac.uk
live.kmi.open.ac.uk
oubs-business-exchange.kmi.open.ac.uk
www.open.ac.uk
cso.kmi.open.ac.uk
pt-anywhere.kmi.open.ac.uk
50.open.ac.uk
healthwellbeing.kmi.open.ac.uk
led.kmi.open.ac.uk
development.moodlerooms.com
rdswebgwlivea.open.ac.uk
www-dev.open.ac.uk
applaud.open.ac.uk
css2-acct.open.ac.uk
san-12-s50.tlsprovisioning.exacttarget.com
exec-ed.open.ac.uk
skg.kmi.open.ac.uk
mac-mgmt-live.open.ac.uk
www-acct.open.ac.uk
learn4.open.ac.uk
blockchain.kmi.open.ac.uk
e1p-internal-sandbox.mrooms.net
greendata.kmi.open.ac.uk
project-rbz.kmi.open.ac.uk
kmi.open.ac.uk
acqua.kmi.open.ac.uk
dev-ext.kmi.open.ac.uk
blockchain7.kmi.open.ac.uk
evolution-megalab.open.ac.uk
e1p-internal-sandbox.mrooms.net
peermiles-project.kmi.open.ac.uk
san-12-s50.tlsprovisioning.exacttarget.com
soa-admin-acct.open.ac.uk
live.kmi.open.ac.uk
san-12-s50.tlsprovisioning.exacttarget.com
intranet6.open.ac.uk
e1p-internal-sandbox.mrooms.net
exec-ed.open.ac.uk
e1p-internal-sandbox.mrooms.net
blockchain.kmi.open.ac.uk
people.kmi.open.ac.uk
e1p-internal-sandbox.mrooms.net
dsg.kmi.open.ac.uk
css2.open.ac.uk
library-analytics.open.ac.uk
iet.open.ac.uk

Certificate

The complete raw certificate details for learn7syst-internal.open.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tCSFfAlJiUyJo8ipHD9
yTliq/X1OB/Lf6Pdm3iJM9JmxvFbeLL3rDOILfoyCN7Y/uL0U9k87XwQSikJIPJt
+IEygL/Dl3bGrZsKeXKey7OeYM4EmBuMFL11xgEZtklamZc3lbhUXYXYYSr+gXda
67Q4QoeMfztR1B+MV+LCdu1MCpEJlGaPoOgqYKOABS9lfWGqVq1BS9Xsp5bm8lYf
qnvMxrrRCaRnlEXBe+tBUi3lsgdXyTR7hB1AzjbnU57jhoyz0qi9dHcZjNw0drkp
2Igv2k+zqUqiR82s15LEG72ezDaWrHfK9bOuezX4qLo5ydT8S3p1tpvDI2ahOGPz
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19170383190203818423137986054169267257
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'learn7syst-internal.open.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26612894062303183662235482644181936886622659402795322558759873208043318628594756684573917345297357675874143459205490037596271699042767808021819471807985798889876372207295728032523575171359116834481597602000966450270571662227080224779365538972315029649239051029245148345767760795886255675843486080212036191422272121009649297229932250755391705140544291287109764481269400529982508194867336167542157990623680453668148884774076625729484531702691592599749602900664996983105366843196613334711676947411846393598151473764692838718336554510306945353707631845148695167485863250603019142500389375471633043434354227312256031650693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f2f1fa64f922489fbee21f0f3683aa510a856ede
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn7syst-internal.open.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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