ol.berklee.edu

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 03:6e:1f:e2:12:55:cf:19:f6:71:8b:1a:2d:c1:63:71 was issued on by Amazon.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ol.berklee.edu

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6e:1f:e2:12:55:cf:19:f6:71:8b:1a:2d:c1:63:71
Serial Number (int): 4559483307730486963613352609223631729
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: c8:c3:a0:8d:84:52:8f:c6:62:9e:80:c9:bc:e2:39:52:5c:d5:5a:c7
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 65:9b:6c:86:7b:e5:f3:6d:ff:c2:b0:1e:82:d2:58:92:f1:0e:71:70
Fingerprint (sha256): 06:0d:b0:62:49:87:dc:e1:16:11:32:1d:e3:bf:f0:50:6a:a9:9e:36:6d:ca:63:86:1e:d4:0d:c3:39:85:8c:33

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate ol.berklee.edu

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ol.berklee.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ol.berklee.edu
dev.ol.berklee.edu
online.claflin.edu
inquire.roanoke.edu
elearn.nichc.org
learn.ndm.edu
lms.ethosschool.org
online.pmc.edu
myeclassroom.pcsb.org
sandbox.moodlerooms.extended.nau.edu
sandbox.ayersinstitute.org
train.ndm.edu
community.moodle2.lsu.edu
lsuonline.moodle3.lsu.edu
moodle.associationforsoftwaretesting.org
bbopenlms.mitchellcc.edu
elearn.pcsb.org
uhigh.moodle2.lsu.edu

Other certificates including the domain name berklee.edu

(limited to 100 certificates)
informer.berklee.edu
5674069752020992-fe1.pantheonsite.io
ucdc.edu
amploadvance.com
ask.library.berklee.edu
test.eis.uw.edu
ol.berklee.edu
guides.library.berklee.edu
development.moodlerooms.com
development.moodlerooms.com
acquia-sites.com
remix.berklee.edu
archives.berklee.edu
apsprd108.berklee.edu
development.moodlerooms.com
5674069752020992-fe1.pantheonsite.io
remote-vpn.berklee.edu
n002.offcampuspartners.com
san-14-s12.tlsprovisioning.exacttarget.com
n002.offcampuspartners.com
development.moodlerooms.com
acquia-sites.com
development.moodlerooms.com
n002.offcampuspartners.com
library-stage.berklee.edu
ol.berklee.edu
5674069752020992-fe1.pantheonsite.io
hub.berklee.edu
5674069752020992-fe1.pantheonsite.io
development.moodlerooms.com
5674069752020992-fe1.pantheonsite.io
offcampushousing.fau.edu
5674069752020992-fe1.pantheonsite.io
amploadvance.com
givingday.berklee.edu
apsprd014.berklee.edu
admissions.berklee.edu
welcome.online.berklee.edu
demo.canvas.online.berklee.edu
fts.berklee.edu
lrmedia.berklee.edu
development.moodlerooms.com
5674069752020992-fe1.pantheonsite.io
development.moodlerooms.com
centralnicstatus.com
san-14-s12.tlsprovisioning.exacttarget.com
ask.library.berklee.edu
5674069752020992-fe1.pantheonsite.io
208.lsnc.net
n002.offcampuspartners.com
n002.offcampuspartners.com
development.moodlerooms.com
development.moodlerooms.com
development.moodlerooms.com
development.moodlerooms.com
5674069752020992-fe1.pantheonsite.io
development.moodlerooms.com
acquia-sites.com
development.moodlerooms.com
n002.offcampuspartners.com
5674069752020992-fe1.pantheonsite.io
online.berklee.edu
acquia-sites.com
developer.blackboardopenlms.com
bos-isepan1.berklee.edu
scsc-casper.berklee.edu
offcampushousing.fau.edu
*.genesis.k8s.online.berklee.edu
remote-vpn.berklee.edu
development.moodlerooms.com
ask.library.berklee.edu
online.berklee.edu
development.moodlerooms.com
5674069752020992-fe1.pantheonsite.io
acquia-sites.com
development.moodlerooms.com
5674069752020992-fe1.pantheonsite.io
5674069752020992-fe1.pantheonsite.io
online.berklee.edu
opcpostback.berklee.edu
5674069752020992-fe1.pantheonsite.io
amploadvance.com
5674069752020992-fe1.pantheonsite.io
developer.blackboardopenlms.com
learningcenter-stage.berklee.edu
wbstst004.berklee.edu
learningcenter.berklee.edu
5674069752020992-fe1.pantheonsite.io
development.moodlerooms.com
5674069752020992-fe1.pantheonsite.io
*.online.berklee.edu
5674069752020992-fe1.pantheonsite.io
cms.online.berklee.edu
offcampushousing.fau.edu
5674069752020992-fe1.pantheonsite.io
5674069752020992-fe1.pantheonsite.io
demo.canvas.online.berklee.edu
guides.library.berklee.edu
development.moodlerooms.com
development.moodlerooms.com

Certificate

The complete raw certificate details for ol.berklee.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHXxFdJvAFz+PrXQIw9a
il+n2oSDQmunuuHKXasyzjSZ/MPbnvZsvvfqA+WoQmm3LDfbT3Ywdy5hwkjMFHiL
XredpxIMUcn0OmGSSu9kUN4P4CF0Zo/B/kbaMPAxkh7CCyJHhftjUM8hxYXP7Rve
+EhWkpsURfeEMNW6fnEVujZV+nSyBTGyLNCkx1itvFohulbWEX5d7Y60f/5bRuLi
5tObifjo5GSTCh48JAyD4cTcBTuGmFccwTfrzJSgmLzLl+i21QYJ1X7Rmwgpd46n
GUF8c2xfGbiYP1m8q6zkXduq1t6cUo0TMCzP37BKWzTaIbevxvLM+3J8d+I9LW0O
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4559483307730486963613352609223631729
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ol.berklee.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24295913792720812699180769824300875547030360078212180801799069656584789367876861990808571811606788530847121740908119847409708779153960153249224848808087405945552244271173618719177141413829208270782939289965584593157614785449610342137834579613849290693488683308439773013132805143864556004000543136651106105286208295776968294683872906213306656348769581320372911186954850269180516889135132193489687832156753063215006628740854546294497868198214025420669555594924590014688533459119827946154997209910764221127494750933981432836600868144801736685720176339683263120048593430800564763431951412526539664014021496784370363338327
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c8c3a08d84528fc6629e80c9bce239525cd55ac7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (417 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ol.berklee.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ol.berklee.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.claflin.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inquire.roanoke.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elearn.nichc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.ndm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lms.ethosschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.pmc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myeclassroom.pcsb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.moodlerooms.extended.nau.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox.ayersinstitute.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'train.ndm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'community.moodle2.lsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lsuonline.moodle3.lsu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moodle.associationforsoftwaretesting.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbopenlms.mitchellcc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elearn.pcsb.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhigh.moodle2.lsu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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