generic-lti.uva.prd.icts.education

Issued by Amazon

About this certificate

This digital certificate with serial number 06:68:bd:83:9d:9d:24:b5:a9:7d:95:5b:2d:00:f1:a5 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=generic-lti.uva.prd.icts.education

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:68:bd:83:9d:9d:24:b5:a9:7d:95:5b:2d:00:f1:a5
Serial Number (int): 8519210651080618097026179966875791781
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 4f:4d:00:0b:e3:54:2a:db:e4:ef:18:7a:c5:cc:38:c7:a9:c2:ef:4c
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 35:e1:f5:b9:e2:54:9f:4d:54:06:e4:62:63:68:bb:16:46:8c:f3:dd
Fingerprint (sha256): 11:18:75:dc:0e:a7:f1:ed:04:51:a6:54:1a:36:72:63:27:4e:2d:45:07:c5:04:99:da:69:4b:d6:54:c8:64:6a

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate generic-lti.uva.prd.icts.education

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for generic-lti.uva.prd.icts.education

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

generic-lti.uva.prd.icts.education

Other certificates including the domain name icts.education

(limited to 100 certificates)
redirect-auc-canvas.uva.acc.icts.education
mobiusportal.uva.dev.icts.education
pg-api.hva.tst.icts.education
redirect-auc-canvas.uva.acc.icts.education
praat-web-api.uva.prd.icts.education
fyv.uva.dev.icts.education
load-balancer.tst.adm.icts.education
fyv.uva.prd.icts.education
sonarqube.dev.icts.education
groupbatchenrollment.uva.tst.icts.education
appstore.uva.dev.icts.education
groupbatchenrollment.uva.tst.icts.education
pnid-api.uva.tst.icts.education
gartnerportal.uva.prd.icts.education
id.hva.prd.icts.education
admin.uva.dev.icts.education
redirect-auc-canvas.uva.acc.icts.education
groupbatchenrollment.uva.tst.icts.education
groupbatchenrollment.uva.dev.icts.education
canvasmonitoring.uva.prd.icts.education
pg-api.hva.tst.icts.education
tf-example-spa.hva.tst.icts.education
canvasmonitoring.uva.prd.icts.education
kassa.hva.dev.icts.education
tf-load-balancer.icts.education
gartnerportal3.uva.dev.icts.education
admin.uva.dev.icts.education
groupbatchenrollment.uva.tst.icts.education
groupbatchenrollment.uva.tst.icts.education
canvasmonitoring.uva.prd.icts.education
canvasmonitoring.uva.prd.icts.education
nexus.dev.icts.education
appstore.uva.tst.icts.education
example-ebs.tst.uva.icts.education
paper-extractor.uva.dev.icts.education
lunchlearn-api.uva.tst.icts.education
pnid-api.hva.tst.icts.education
kassa.uva.dev.icts.education
loadbalancer.dev.icts.education
cfne.uva.tst.icts.education
loadbalancer.dev.icts.education
pnid-api.hva.tst.icts.education
groupbatchenrollment.uva.tst.icts.education
admin.uva.dev.icts.education
sonar-network-loadbalancer.build.icts.education
loadbalancer.dev.icts.education
payment-form.uva.prd.icts.education
admin.dev.icts.education
nvd-mirror.uva.build.icts.education
groupbatchenrollment.uva.tst.icts.education
redirect-auc-canvas.uva.acc.icts.education
kassa.dev.icts.education
gartnerportal.uva.prd.icts.education
inqdomapper-demo.dev.icts.education
tf-example-ebs.acc.icts.education
admin.uva.dev.icts.education
admin.uva.dev.icts.education
groupbatchenrollment.uva.prd.canvas-ab.icts.education
tf-example-ebs.acc.icts.education
admin.dev.icts.education
kassa.dev.icts.education
groupbatchenrollment.uva.tst.icts.education
generic-lti.uva.prd.icts.education
mobiusportal.uva.dev.icts.education
load-balancer.tst.icts.education
discovery-canvas.uva.dev.icts.education
discovery-canvas.uva.prd.icts.education
gartnerportal.uva.dev.icts.education
admin.hva.dev.icts.education
redirect-auc-canvas.uva.acc.icts.education
discovery-canvas.uva.acc.icts.education
gartnerportal.uva.prd.icts.education
tf-load-balancer.icts.education
groupbatchenrollment.uva.acc.icts.education
mobiusportal.uva.dev.icts.education
blueocean.build.icts.education
groupbatchenrollment.uva.tst.icts.education
studiegids-lti.uva.acc.icts.education
groupbatchenrollment.uva.tst.icts.education
payment.hva.dev.icts.education
admin.uva.dev.icts.education
generic-lti.uva.acc.icts.education
oidc.adm.icts.education
loadbalancer.dev.icts.education
testvision-lti.uva.prd.icts.education
canvas-coursecopy.dev.icts.education
id.uva.acc.icts.education
groupbatchenrollment.uva.prd.canvas-ab.icts.education
admin.hva.dev.icts.education
redirect-auc-canvas.uva.prd.icts.education
groupbatchenrollment.uva.tst.icts.education
nvd-mirror.dev.icts.education
groupbatchenrollment.uva.tst.icts.education
fyv.uva.dev.icts.education
loadbalancer.dev.icts.education
redirect-auc-canvas.uva.tst.icts.education
admin.hva.dev.icts.education
payment-form.hva.prd.icts.education
kassa.hva.dev.icts.education
mobiusportal.uva.dev.icts.education

Certificate

The complete raw certificate details for generic-lti.uva.prd.icts.education in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYAOCFkMY49ZK2ODEtfN
Cw9CW7GkVCFFpcBDE4armNrCo5S2UPFV9lpK+QRn6ECo1T32MJ0Nem1rlj5OeyTW
JYEmc/RQicI6h2jEIXv1019wdHWaz7GnQC3xHqZMEORllE5JBi2NDxpsAtDZvMpP
yB+oa2HQExEKI+3fkX+sJXEwVOwOaANCH5khz36XismDxQBzWAyvPlkruBdZhc2o
3p+CQnXSrA1dH8krB4/sS04V26VonoRqDLkrFsRcNYO+oL4aGLROfIb0p82cLWPK
Mwcoabsaeo0nPx2xEvIPPD9Lw8BTyMJjcYBDj8JGw9iwIGj/t3Tvk9FjZVNRGaDJ
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8519210651080618097026179966875791781
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'generic-lti.uva.prd.icts.education'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24427139041156120574667014452850348096712348161819656599639220548106090261356332348103959643442902374348107861372262916616607094564458528835101792408641357638833015839762792886939111850794319936078683764873092282341716936937395920266645521298717200933315365111694353017486254614291891583102356067891625812688357134880097970801355934645692070283554336307301827742413722978763126665799428463853385827104418425662192997188082264714314487252540160266837543898991675021626141373193324878342977831560572524703072371201950499146783333401283851749607064559165960542193056182615997297459141723282246830327310999500555211032923
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4f4d000be3542adbe4ef187ac5cc38c7a9c2ef4c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'generic-lti.uva.prd.icts.education'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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