*.global.uwi.edu

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 06:9c:e8:b6:2a:3a:ca:41:84:bc:41:90:4e:e7:56:00 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.global.uwi.edu

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:9c:e8:b6:2a:3a:ca:41:84:bc:41:90:4e:e7:56:00
Serial Number (int): 8790086236263996367788035211048474112
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 05:17:59:81:2f:f6:43:b8:f2:55:42:eb:33:3a:50:32:db:e8:87:e7
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 14:a8:47:ef:b6:1d:88:ff:44:8d:78:8e:b0:eb:f5:02:bb:45:a1:a8
Fingerprint (sha256): 12:92:e7:1f:96:ad:6d:f0:91:f4:5b:5e:24:7c:c4:d2:6c:a1:96:55:08:9c:eb:82:89:4f:79:ab:ad:db:6e:8f

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.global.uwi.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.global.uwi.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.global.uwi.edu
global.uwi.edu

Other certificates including the domain name uwi.edu

(limited to 100 certificates)
moodlerooms.com
uwischolar.sta.uwi.edu
blackboardopenlms.com
*.cavehill.uwi.edu
*.uwi.edu
mysta.uwi.edu
clinicallabs.mona.uwi.edu
uwischolar.sta.uwi.edu
libguides.uwi.edu
moodlerooms.com
uwischolar.sta.uwi.edu
MAIL.STA.UWI.EDU
my.uwi.edu
clinicallabs.mona.uwi.edu
dataverse.sta.uwi.edu
libguides.uwi.edu
idcard.sta.uwi.edu
uwischolar.sta.uwi.edu
*.library.open.uwi.edu
ssrpm.cavehill.uwi.edu
geomatics.sta.uwi.edu
moodlerooms.com
moodlerooms.com
peoplesoftportal1.sta.uwi.edu
ssb2.sta.uwi.edu
uwischolar.sta.uwi.edu
journals.sta.uwi.edu
moodlerooms.com
moodlerooms.com
redcap.mona.uwi.edu
uwischolar.sta.uwi.edu
moodlerooms.com
sta.uwi.edu
uwispace.sta.uwi.edu
uwischolar.sta.uwi.edu
innovation.cavehill.uwi.edu
clinicallabs.mona.uwi.edu
moodlerooms.com
eservices.mona.uwi.edu
requirements.open.uwi.edu
ourvle.mona.uwi.edu
servicedesk.sta.uwi.edu
my.uwi.edu
apps.sta.uwi.edu
libraries.sta.uwi.edu
journals.sta.uwi.edu
journals.sta.uwi.edu
mycas.sta.uwi.edu
careers.sta.uwi.edu
support.mona.uwi.edu
www.mona.uwi.edu
uwischolar.sta.uwi.edu
idcard-login.sta.uwi.edu
test-research-clinic.cavehill.uwi.edu
libraries.sta.uwi.edu
ourvle.mona.uwi.edu
fsweb.sta.uwi.edu
mycas.sta.uwi.edu
my.uwi.edu
*.global.uwi.edu
enroltest.myelearning.sta.uwi.edu
moodlerooms.com
my.uwi.edu
www.uwi.edu
journals.sta.uwi.edu
ban.mona.uwi.edu
uwischolar.sta.uwi.edu
libraries.sta.uwi.edu
uwischolar.sta.uwi.edu
archivespace.sta.uwi.edu
blackboardopenlms.com
staevisionsstvm.sta.uwi.edu
uwischolar.sta.uwi.edu
uwischolar.sta.uwi.edu
libraries.sta.uwi.edu
mycavehill.uwi.edu
apps.mona.uwi.edu
uwischolar.sta.uwi.edu
apps.mona.uwi.edu
libguides.uwi.edu
journals.sta.uwi.edu
downloads.open.uwi.edu
*.cavehill.uwi.edu
staevisionsstvm.sta.uwi.edu
my.uwi.edu
moodlerooms.com
espro.mona.uwi.edu
journals.sta.uwi.edu
sta.uwi.edu
mycas.open.uwi.edu
journals.sta.uwi.edu
moodlerooms.com
servicedesk.sta.uwi.edu
geomatics.sta.uwi.edu
journals.sta.uwi.edu
moodlerooms.com
mail.sta.uwi.edu
*.tle.courses.open.uwi.edu
MAIL.STA.UWI.EDU
uwispace.sta.uwi.edu

Certificate

The complete raw certificate details for *.global.uwi.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuhZJLDDt4EoB0IMDsNy
c3UHNq93mPRD/xocFw5dkQVjHLiCbMDH8uI0y5eqNOq+pnbIaKtZl856yxPV6BMU
d1H+aZZ62E4zOsGuBrJRa3AbeYP+AuaZhvLNmCP7Rlzzx7/yyPkVH108prhFLHNF
GLzKtCiSSoWTrsQTBraDuLRjK6wVs/Deg+9rOI0a8kqS8PkQpYdPZsZUS4bB7NLv
pz8ZJlYBZ0BJWBfs4a9/MyQa1vOia+oTA4dZXQNvBOoEoqXTfEt+DKeJ9BLUd+0d
++y23mA2L1oTqAyQrM/gl4+Ry7X7WW+oIvJxEcQRPcxgCuYPwRvzdByN13lU+zC+
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8790086236263996367788035211048474112
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.global.uwi.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21070133800001096648117419164242125870971948791983916694765634238260793544646448119282939557193502203856907487896489208756394478446314836023810047165223809282875198647110515692997556121045344625316092009487824664057115196393507102594651459920207217215379744495923686230773344303586864972457475350617073348728455367407816128343825562755449075900937335624915539118836879190923884943830749862530414068526861738662555617994875043834930228847190376445668007234938160570486591138020357775012795914921230199091773446380236854868232223510715390635634075063649753634546261992848742664602611030951269436250689064914403388866209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							051759812ff643b8f25542eb333a5032dbe887e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.global.uwi.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'global.uwi.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00545860d86078e39bd51e3e822e6cfca7cf3e6057b7a180b41a5f0990d300623738cac75658cc9f52ee8a0d23888cdc270916e8d2f288edf7a05d6f6ce599133f48d4b606402ad010ff368ec6606455dbe66ae0446632e72a679ddb73d1527207854ebfdd08ba68254993bc81463e03686e48747b0fc856b3cf76074d7ca8704ce1d8ebf46da91f9c91076670f673e31a3ea5d4cc567efa4a524335941802d9d6c139ae41dfea1e8431cb52e663c543c46e2c41a803ebda23e10541c27caad7dc89c35fc571abe14e1e74d7fc4ae33b01a66a00fabef1f88621e863e26110a7ee803b2076fb0b375a3ffc9ffc9c6c768c608b1342c19328db237fd3df49aa969f