*.app-edu.assemblrworld.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 06:7f:bc:f0:7f:bf:46:97:ac:9f:bd:e5:95:15:b4:da was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.app-edu.assemblrworld.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:7f:bc:f0:7f:bf:46:97:ac:9f:bd:e5:95:15:b4:da
Serial Number (int): 8638621823043742726135183324573185242
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 6b:72:44:00:59:0e:9a:18:c3:56:61:2f:b6:07:82:0d:9d:e0:e7:40
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 4b:e6:8c:c1:39:4a:17:e7:58:5b:2f:6d:4f:04:94:bf:64:63:b1:a1
Fingerprint (sha256): 0e:e1:13:8e:e0:07:b0:8e:db:90:65:ad:7e:60:54:6f:5c:83:a6:15:33:43:99:6e:4e:ca:a7:d3:f0:fc:21:e2

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate *.app-edu.assemblrworld.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.app-edu.assemblrworld.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.app-edu.assemblrworld.com
app-edu.assemblrworld.com

Other certificates including the domain name assemblrworld.com

(limited to 100 certificates)
sni196412.cloudflaressl.com
live.theodyssey.app
sni196412.cloudflaressl.com
www.thrusion.co.uk
jsdesigns.ca
sni196412.cloudflaressl.com
sni196412.cloudflaressl.com
sni196412.cloudflaressl.com
www.weconvert.app
sni196412.cloudflaressl.com
zippyblocks.com
sni196412.cloudflaressl.com
blog.assemblrworld.com
assemblrworld.com
assemblrworld.com
kibo.trestlelabs.com
sni196412.cloudflaressl.com
sni196412.cloudflaressl.com
yes4mkt.yesmkt.com
www.globallearn.app
sni196412.cloudflaressl.com
*.app-edu.assemblrworld.com
app.assemblrworld.com
sni196412.cloudflaressl.com
www.kivlov.co
sni196412.cloudflaressl.com
assemblrworld.com
sni196412.cloudflaressl.com
sni196412.cloudflaressl.com
sni196412.cloudflaressl.com
sni196412.cloudflaressl.com
staging.canya.com
www.blanktech.co.za
sni196412.cloudflaressl.com
www.davecollison.dev
sni196412.cloudflaressl.com
mfpvolunteer.com
api.assemblrworld.com
www.tiagofalcao.com
www.assemblrworld.com
www.markhavas.me
grandy.com
sni196412.cloudflaressl.com
tumur.me
sni.cloudflaressl.com
sni196412.cloudflaressl.com
wibce.net
sni196412.cloudflaressl.com
www.assemblrworld.com
sni196412.cloudflaressl.com
www.wawag.app
sni196412.cloudflaressl.com
sni196412.cloudflaressl.com
links.baff.io
*.preview-master-webplayer.assemblrworld.com
www.okz.cl
sni196412.cloudflaressl.com
sni196412.cloudflaressl.com
sni196412.cloudflaressl.com
sni196412.cloudflaressl.com
api.ditt.io
sni196412.cloudflaressl.com
www.m.werktijd.be
www.davecollison.dev
sni196412.cloudflaressl.com
assemblrworld.com
am.artmuseo.app
www.gobitcoin.world
gitlab.assemblrworld.com
lktickets.app
sni196412.cloudflaressl.com
sni196412.cloudflaressl.com
sni196412.cloudflaressl.com
sni196412.cloudflaressl.com
cheatsforhiguesswho.apptget.com
sni196412.cloudflaressl.com
www.arnventures.co.ke
sni196412.cloudflaressl.com
sni196412.cloudflaressl.com
albumfinder.jonbuildswebsites.com
enishi-tech.com
datamachina.com.br
sni196412.cloudflaressl.com
writ.solutions
web.simplelogic.org
talchoseon.com
*.studio.assemblrworld.com
sni196412.cloudflaressl.com
sni196412.cloudflaressl.com
rxgrad.com
preprod-admin.placeshaker.fr
sni196412.cloudflaressl.com
bazzite.com
edu.assemblrworld.com
sni196412.cloudflaressl.com
dev.api.kohepets.com.sg
www.ltdbroadband.com
sni196412.cloudflaressl.com
sni196412.cloudflaressl.com
www.diftg.co

Certificate

The complete raw certificate details for *.app-edu.assemblrworld.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvl03x/nXZZDXFvNY336B
cDam7U1wW49yCglwWHqxBIw7uLGgvIt63svi+Cwp2dFU75CCetfe/32Nid2zGHGJ
ugrMIuRHrykIhdoWS3eOZ0OTGunXr77jUZTi1Ut7MGh0fwJBuUYvVaF7MkGC0fuJ
XiWxxDVCq1iFMQlY7Nm+Iw+ZGvBZzbc2e6qsABhwujN9vZpvUTQ56RG3Z6IdAzna
jSVIA/ojoR0M+PoDEA2SBjQV10O0/0vag+NQm+4CyOWlPbiSis2tvTls3XeeHrfM
V71hK5CsktVPghetCpRGuOR2DU6cQvlwY1jYnp1AQxD06GLebUcNf5nxsSKanWit
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8638621823043742726135183324573185242
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.app-edu.assemblrworld.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24031245400875629120097658128234781564403060853459001496122615912766154172641297660858286889054696892354687997439288329442355195657751484612566153466356848050908904184369118579055206217045707511121447546020338754289516401991923720474216373169236128611458141978680030104634193612565958942832933918629693393478298904598171145590502351690838694296940961922401499567102416026099457863261792233926414431068994000658630168463450268052723765140070521838661435190607801025511313980532199390174529459565698579606011037155387278848524410412681802736280126504007287721515122736785663233015034048504491078967769843853866274696527
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6b724400590e9a18c356612fb607820d9de0e740
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app-edu.assemblrworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app-edu.assemblrworld.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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