*.wm.edu

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 07:ec:23:ca:12:cc:44:f1:81:1b:ff:2e:a9:2a:64:0d was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.wm.edu

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:ec:23:ca:12:cc:44:f1:81:1b:ff:2e:a9:2a:64:0d
Serial Number (int): 10530703923351262740395941125029520397
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ad:d3:a7:e9:41:6d:97:65:63:ba:24:6f:07:75:1a:d9:80:94:40:34
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 15:23:2f:9f:ef:9c:17:e3:2e:27:5b:f4:60:ad:68:93:24:de:a7:8b
Fingerprint (sha256): 0d:a7:c9:58:f1:0d:74:4f:84:3b:a9:ef:fe:34:b8:76:39:7a:57:9f:12:4a:17:f5:86:a8:9f:a6:af:c0:ee:62

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate *.wm.edu

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.wm.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.wm.edu
*.blogs.wm.edu
*.sites.wm.edu
www.weekend.wm.edu

Other certificates including the domain name wm.edu

(limited to 100 certificates)
sql2014dev.campus.wm.edu
info.mason.wm.edu
scholarworks.wm.edu
printshop.wm.edu
tribetrek.wm.edu
umacnas1.campus.wm.edu
image.partnerapp1.myworld.com
dilbert.physics.wm.edu
qliktest.wm.edu
people.wm.edu
blueprod2012r2.campus.wm.edu
image.partnerapp1.myworld.com
scholarworks.wm.edu
tedx.wm.edu
dilbert.physics.wm.edu
image.partnerapp1.myworld.com
image.partnerapp1.myworld.com
simpos-sql-prod.campus.wm.edu
blog.oieahc.wm.edu
gp2.wm.edu
stdirector.campus.wm.edu
image.partnerapp1.myworld.com
*.wm.edu
wmvidsquadnas1.campus.wm.edu
explore.mason.wm.edu
image.mktmarathonkids.org
studyabroad.wm.edu
mapi.wm.edu
*.wm.edu
connect.wm.edu
counseling.education.wm.edu
online.mason.wm.edu
catalog.wm.edu
edge-uc1.peopleadmin.com
*.aswp.wm.edu
printshop.wm.edu
vault.it.wm.edu
us-east-1-san1.blackboard.com
san-2-s6.tlsprovisioning.exacttarget.com
onlinemba.mason.wm.edu
scholarship.law.wm.edu
sql-wmpd1.campus.wm.edu
dilbert.physics.wm.edu
stvoicemail04.campus.wm.edu
give.wm.edu
eprint.wm.edu
vpn.aws.wm.edu
wm.edu
blackboard.com
*.wm.edu
counseling.education.wm.edu
onlinemba.mason.wm.edu
visas.wm.edu
getinfo.mason.wm.edu
calendar.wm.edu
tidewaterteam.wm.edu
*.wm.edu
sin.wm.edu
lensec2.campus.wm.edu
image.partnerapp1.myworld.com
*.libraries.wm.edu
itservices.wm.edu
us-east-1-san1.blackboard.com
image.partnerapp1.myworld.com
tribetrek.wm.edu
counselinginfo.education.wm.edu
reservations.wm.edu
us-east-1-san1.blackboard.com
scholarship.law.wm.edu
counselinginfo.education.wm.edu
geolab.wm.edu
online.mason.wm.edu
dilbert.physics.wm.edu
itstatus.wm.edu
tedx.wm.edu
wmvidsquadnas1.campus.wm.edu
visas-test.wm.edu
precollegeonline.wm.edu
helicity.physics.wm.edu
makerspace.physics.wm.edu
www.tidewaterteam.wm.edu
stli.wm.edu
sql-wmpd2.campus.wm.edu
lion2.swem.wm.edu
san-2-s6.tlsprovisioning.exacttarget.com
image.partnerapp1.myworld.com
campusrec.wm.edu
image.partnerapp1.myworld.com
it.wm.edu
devl.banner.wm.edu
connect.wm.edu
info.mason.wm.edu
online.mason.wm.edu
mylaw.wm.edu
scholarworks.wm.edu
image.partnerapp1.myworld.com
image.mktmarathonkids.org
masonfiles.wm.edu
msbaonline.mason.wm.edu
blackboard.wm.edu

Certificate

The complete raw certificate details for *.wm.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxfsyjhEqBYSD2YuJiTo
ZFdTatdk1uEDzVAPi3Zz62o5mbO+VDRQdhfTeDq9d9vHsIzhL/RAjc9pQfMP/rf8
w6zuNhSl7dAS6e7JPA6JFLHXvFtg009saSoYtko5gzKz6W3NrZacA+aGOUjrVYjc
Q9I+8pnGAgStB+wV0t+t8Ux6BKewIQjqHJ/aE4vpzZUaIwUGjduD6KkoVwaMFdJY
NPJ2N/dQkGdrb3mu0GlfrqGqGKkxDs2HIP/Al/Gymuvdcvx5vvT60Vq32xpl3Dsw
NwYVsC4oHV7tAj/S9HJLHvptDOZWSIwre3STp+fI9b/c7KiOE0l7OpwcUv8GIXrD
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10530703923351262740395941125029520397
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.wm.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24123314086314909553595710317769061675689378135026070252183083127366571862786039287218846904307986278969243600018126321961294646326306191698331218481203449277128190754245352573455150886176511294163999152358696986724246869746481254653391360125597827159260251626797448584317616233654064139153181982161799956571710776856632809655289959302228831170097166623276925519633205298877623236462360562599387527646457567146646408991742858980389196881367666017883604214721021376908363657619601048410827812395777530924393317390982813121839298923031471471296528012009866908183530527721936088023247783357577690842510418057807171077119
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							add3a7e9416d976563ba246f07751ad980944034
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.wm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blogs.wm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sites.wm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.weekend.wm.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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