*.cwng-prod.edgenuityapp.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 05:ff:74:35:31:fa:88:81:7b:ec:b5:29:5b:b5:bb:81 was issued on by Amazon.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.cwng-prod.edgenuityapp.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:ff:74:35:31:fa:88:81:7b:ec:b5:29:5b:b5:bb:81
Serial Number (int): 7972532651925238826124314996209204097
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 79:ff:aa:6d:60:a6:27:6f:8f:1d:24:59:60:ba:d7:44:59:79:4f:af
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 33:0f:a3:ef:ab:1e:b1:6f:d0:a1:3c:9a:2b:a7:fd:37:40:20:b3:bf
Fingerprint (sha256): 0d:6d:a0:bf:3d:a9:1c:f7:da:94:a7:99:89:9d:a6:17:99:23:26:f9:76:10:14:3e:c1:cb:15:d1:ac:80:80:a8

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.cwng-prod.edgenuityapp.com

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.cwng-prod.edgenuityapp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cwng-prod.edgenuityapp.com
licensing-api.ex.edgenuity.com
error-dashboard-api.cwng.imaginelearning.engineering
grading-api.ex.edgenuity.com
enote-api.ex.edgenuity.com
catalog-api.ex.edgenuity.com
enrollment-api.ex.edgenuity.com
impersonation-banner-ui.ex.edgenuity.com
org-api.ex.edgenuity.com
course-api.ex.edgenuity.com
student-api.ex.edgenuity.com
section-api.ex.edgenuity.com
student.ex.edgenuity.com
feature-flag-api.ex.edgenuity.com

Other certificates including the domain name edgenuityapp.com

(limited to 100 certificates)
*.cosmos-prod.edgenuityapp.com
*.mptools-prod.edgenuityapp.com
*.cwng-staging.edgenuityapp.com
*.cwng-prod.edgenuityapp.com
*.cwng-prod.edgenuityapp.com
*.cwng-integrations-qa.edgenuityapp.com
*.lmsadmin-qa.edgenuityapp.com
*.licenseservice-dev.edgenuityapp.com
subscriptions-qa.edgenuityapp.com
*.armstrong-dev.edgenuityapp.com
*.assessment-service-mf-ui-dev.edgenuityapp.com
*.cwng-dev.edgenuityapp.com
*.lmsadmin-prod.edgenuityapp.com
*.edgelms-prod.edgenuityapp.com
subscriptions-staging.edgenuityapp.com
*.lmsadmin-prod.edgenuityapp.com
*.assessment-prod.il-apps.com
*.zoomservice-prod.edgenuityapp.com
*.rad-prod.edgenuityapp.com
*.strategicapps-staging.edgenuityapp.com
*.assessment-service-mf-ui-dev.edgenuityapp.com
*.assessment-dev.il-apps.com
*.armstrong-prod.edgenuityapp.com
*.assessment-prod.il-apps.com
*.lmsadmin-qa.edgenuityapp.com
*.cwng-integrations-prod.edgenuityapp.com
*.armstrong-staging.edgenuityapp.com
*.ow-qa.edgenuityapp.com
*.lmsadmin-dev.edgenuityapp.com
*.rad-prod.edgenuityapp.com
*.cwng-dev.edgenuityapp.com
*.lmsadmin-dev.edgenuityapp.com
*.cwng-prod.edgenuityapp.com
*.armstrong-qa.edgenuityapp.com
*.ow-prod.edgenuityapp.com
*.imlp-prod.edgenuityapp.com
*.imlp-prod.edgenuityapp.com
*.lmsadmin-qa-app.wna.cloud
*.strategicapps-staging.edgenuityapp.com
*.armstrong-prod.edgenuityapp.com
*.imlp-dev.edgenuityapp.com
*.cosmos-prod.edgenuityapp.com
*.edgelms-qa.edgenuityapp.com
*.cwng-integrations-prod.edgenuityapp.com
*.cwng-integrations-staging.edgenuityapp.com
*.lmsadmin-dev.edgenuityapp.com
*.licenseservice-prod.edgenuityapp.com
*.ops.wna.cloud
*.sequencer-prod.edgenuityapp.com
*.ow-prod.edgenuityapp.com
*.cwng-qa.edgenuityapp.com
*.mptools-prod.edgenuityapp.com
*.doolittle-production.wna.cloud
*.lmsadmin-prod.edgenuityapp.com
*.ow-prod.edgenuityapp.com
*.cwng-qa.edgenuityapp.com
*.cwng-integrations-prod.edgenuityapp.com
*.ow-prod.edgenuityapp.com
*.doolittle-production.wna.cloud
*.assessment-prod.il-apps.com
*.armstrong-dev.edgenuityapp.com
*.imlp-qa.edgenuityapp.com
*.lmsadmin-dev.edgenuityapp.com
*.strategicapps-qa.edgenuityapp.com
*.sequencer-prod.edgenuityapp.com
*.armstrong-qa.edgenuityapp.com
*.edgelms-prod.edgenuityapp.com
*.armstrong-prod.edgenuityapp.com
*.lmsadmin-prod.edgenuityapp.com
*.cwng-integrations-dev.edgenuityapp.com
*.sequencer-dev.edgenuityapp.com
*.cwng-dev.edgenuityapp.com
*.armstrong-prod.edgenuityapp.com
*.imlp-qa.edgenuityapp.com
*.cwng-dev.edgenuityapp.com
*.armstrong-qa.edgenuityapp.com
*.doolittle-production.wna.cloud
*.lmsadmin-dev.edgenuityapp.com
*.armstrong-prod.edgenuityapp.com
*.cwng-integrations-qa.edgenuityapp.com
*.ow-qa.edgenuityapp.com
*.doolittle-nonprod.wna.cloud
*.assessment-prod-app.wna.cloud
*.cwng-prod.edgenuityapp.com
*.lmsadmin-dev-app.wna.cloud
*.cwng-integrations-prod.edgenuityapp.com
*.cwng-integrations-prod.edgenuityapp.com
*.cwng-integrations-qa.edgenuityapp.com
*.strategicapps-qa.edgenuityapp.com
*.strategicapps-prod.edgenuityapp.com
*.imlp-prod.edgenuityapp.com
*.imlp-dev.edgenuityapp.com

Certificate

The complete raw certificate details for *.cwng-prod.edgenuityapp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa7Q/kLGJwqOjwVYaF2b
obC1gmHsxl8sxQkAMuQExyVIhesiYZG1wD2grXB0K0e9bKjt/63P9XWizZRz5UeK
tde7wQDBSyJce1K+6huYE4k20O7O3F/cp+rzYWKU8VOCMCGcj+QNHU/h5hNG7Ejj
VhTlrk7a403XJSlwBvIPiEHaHKuXa7pY9e9NENWOOSRCoOS6QjUBkZlGfcLf11nN
LxWECae1zhJmhKAyd8E8GOo4884qGw3ICU7eEDbyL1YUsAktthCRD4RsQEd94yTU
He3H3zBe3uorleT8K9B8mpcfTZF7eHKxZV49EkgsR0ZlA0JjD4Gt1rwxVuQkvwgV
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7972532651925238826124314996209204097
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cwng-prod.edgenuityapp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20915525489146564803723775462354231398950260633951079373033667366362620793091973765972320787198312275054803824239103530661123871282565054856555974644420189662161583732349536342973660177272045748064178925820410559333089772384634572510939049583505355316372585908676357095153630583743111529691236996872806643331102357998658054336452713723575566737511083970824493933485212739813223840190284104154684226587065163182430995928177231418487690699441616034267256664067396508613342533469404190405555937501540951091309688218615823080313845896929838144771256439879207619368534815378584471203840802717985091784026608925696355472651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							79ffaa6d60a6276f8f1d245960bad74459794faf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (459 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cwng-prod.edgenuityapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'licensing-api.ex.edgenuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'error-dashboard-api.cwng.imaginelearning.engineering'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grading-api.ex.edgenuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enote-api.ex.edgenuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog-api.ex.edgenuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enrollment-api.ex.edgenuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impersonation-banner-ui.ex.edgenuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'org-api.ex.edgenuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'course-api.ex.edgenuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'student-api.ex.edgenuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'section-api.ex.edgenuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'student.ex.edgenuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feature-flag-api.ex.edgenuity.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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