www.auburnschools.org

Issued by Amazon

About this certificate

This digital certificate with serial number 0b:00:83:57:84:8a:f8:7b:ad:2e:13:c9:2d:89:7f:5c was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.auburnschools.org

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:00:83:57:84:8a:f8:7b:ad:2e:13:c9:2d:89:7f:5c
Serial Number (int): 14624171883162318199605359399657897820
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 2e:2e:6e:ed:06:0b:90:4b:ae:23:22:71:25:ec:b7:b1:0b:d7:a1:ea
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): ef:1c:80:f8:d8:06:2a:58:3c:b4:97:a8:20:39:8c:74:f2:76:6c:9b
Fingerprint (sha256): 11:bc:f0:37:b4:c0:86:d2:94:7f:6b:2d:38:82:d1:6a:f5:b6:6d:86:51:d3:f2:45:9f:eb:7e:db:e9:c2:b7:ab

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate www.auburnschools.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.auburnschools.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.auburnschools.org
al01901372.schoolwires.net

Other certificates including the domain name auburnschools.org

(limited to 100 certificates)
help.vitalcareinc.com
itservicedesk.locknet.com
servicedesk.raibal.ae
helpdesk.lpga.com
itservicedesk.locknet.com
mesa4.aylsoluciones.pw
www.auburnschools.org
stringitdesk.stringinfo.com
mesa4.aylsoluciones.pw
help.powertexgroup.com
itsupport.pando.ai
itsupport.premierforest.co.uk
itservicedesk.locknet.com
support.claytonearlylearning.org
servicedesk.hunterdouglas.cz
itservicedesk.locknet.com
helpdesk.rebuildmanufacturing.com
helpdesk.clicktechretail.com
help.vitalcareinc.com
www.auburnschools.org
ithelp.nmcc.edu
help-desk.jpwindustries.com
servicedesk.teijinautomotive.com
itservicedesk.locknet.com
servicedeskplus.ict.kadokawa.jp
servicedesk.oneontacsd.org
support.caseshield.com
itservicedesk.locknet.com
help-desk.jpwindustries.com
portal.dakotalandfcu.com
itservicedesk.locknet.com
helpdesk.lpga.com
inow.auburnschools.org
itsupport.waycool.in
*.auburnschools.org
helpdesk.admix.com
itservicedesk.locknet.com
mesa4.aylsoluciones.pw
servicedesk.raibal.ae
mesa4.aylsoluciones.pw
www.auburnschools.org
itservicedesk.locknet.com
*.auburnschools.org
servicedesk.metro-inet.us
helpdesk.coopelev.com
servicedesk.kitoamericas.com
mesa4.aylsoluciones.pw
servicedesk.stevinrock.ae
lecitsupport.maf.ae
helpdesk.pharmacare.com.au
portal.dakotalandfcu.com
supporthibiscus.datakraf.com
solicitudes.hospitalcima.net
servicedeskplus.ict.kadokawa.jp
servicedesk.raibal.ae
helpdesk.atlanticitservices.com
supporthibiscus.datakraf.com
helpdesk.newtonsh.org
stringitdesk.stringinfo.com
support.essenmed.com
mesa4.aylsoluciones.pw
support.essenmed.com
*.auburnschools.org
itservicedesk.locknet.com
destek.coreway.com.tr
help-desk.jpwindustries.com
itservicedesk.locknet.com
servicedesk.zenantech.com
it.flysolomons.com
helpdesk.unisyncgroup.com
servicedeskplus.ict.kadokawa.jp
stringitdesk.stringinfo.com
ithelp.nmcc.edu
www.auburnschools.org
servicedesk.stevinrock.ae
help.powertexgroup.com
itservicedesk.locknet.com
portal.dakotalandfcu.com
itsupport.pando.ai
helpdesk.northernilfoodbank.org
support.claytonearlylearning.org
servicedeskplus.ict.kadokawa.jp
itservicedesk.locknet.com
mesa4.aylsoluciones.pw
mesa4.aylsoluciones.pw
it.flysolomons.com
techsupport.dmgevents.com
help-desk.jpwindustries.com
itservicedesk.locknet.com
support.alsaqergroup.com
servicedeskplus.ict.kadokawa.jp
servicedesk.teijinautomotive.com
servicedesk.juilliard.edu
support.caseshield.com
itservicedesk.locknet.com
helpdesk.jhs.com
*.auburnschools.org
voc.utc-egy.net
servicedesk.zenantech.com
help-desk.jpwindustries.com

Certificate

The complete raw certificate details for www.auburnschools.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAraiPqFbx5E79hMKluIiA
+uWeECg36veDuejyAl92hUM7dgSZYzqCWBaE1uQPS3gwR0Nu8jsq74YdLZIiP8Qh
nNftwRbcQC596mbKpbQdQBxUbSmRkbBqp1APJZbUdpMMaL96MfdgUFr5NamETslu
srx9IPFBbEGRccT0u0K2tAzip+k6clH6Vcg0YP9ssEuood0qt8SBaj8jMM4vywAF
r2lBWcb/9bkzKQ3xAKXCMr5VPG5xraDJhcDsOwuZ0dcJU/y2gBfsqrxmrd4CB2CK
2WmE8AwtfYufAUcVUmo37fqGYV6WyosNur40UzGYCC2TQGeQSXhEBilH0g6wVDRi
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14624171883162318199605359399657897820
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-07 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.auburnschools.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21922347366259414132604867174532386286911311802057369159014109805144838243870122182914212081073386438909383039250558563280942061987349958500834991619956386791288157002910311339450728344727558879132715719444252744430185474357974219703218575980007721486581367690770704564935588715606245966990750313255082101652364936600952505265104769900735944910151574870162483841197336030769864178792054144102747473092820479677989746101940339852348438400948530700323213184673261729953800051702119157026409445080878088528876014147323139849821749077232873279769539292193888777069886957816612257133382569013982919170195062715335086203589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e2e6eed060b904bae23227125ecb7b10bd7a1ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auburnschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'al01901372.schoolwires.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000168c5ba5b8100000403004630440220420154db13ada6d369c9cc55f85e4d548ec5a88e9dcf681eaf587d7dcf4461a802205dd9225c9436ec8c5dda958e88c9312b8007a3b9069894cc6190e3ec1c6251180076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000168c5ba5c5e00000403004730450220729429a7e867d4747f53ccaa9034fa49884da682ef1ecca3135df9e561be5e78022100e8ddcca3da0975f03bb7e8e465f1cada60c51fd77e0b4164a4d5c463039c53fe
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0065e3c2d5d4972d8be345329752c170006ca8ceeadb6663d0363cc4c90f5abd410a2511b72d61c200bea4777a514ee2cb957914dfda745d50ee27c01490754abd0b8a21c745de157258ab11dc55ab0b62e21dd2a5bfc154032d680f3dd66669ab03cfe4fd2ae4837ff2c50292ec79102f39891dbb9f5d4f46266e9cdca09013ad4b40956f9d3b75907117ed9785e7719c182c9249066099e1f296974eeee30a4ff2b5c513864f73f8b47606392a37a7311aaa377aeefff69f24bd203070d6334f7c58f49fa844c335736107524672d46d1e3ce9cddf5b54690d4340650d1af603d1b9fb834e1a3026be622d3b2a484c5e1eb4331a20eba994ad2639046958b441