dayofgiving.duq.edu

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0f:52:68:9a:57:c8:d0:61:ff:a9:7a:8d:28:ff:43:de was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dayofgiving.duq.edu

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:52:68:9a:57:c8:d0:61:ff:a9:7a:8d:28:ff:43:de
Serial Number (int): 20366309878077366007893635870563976158
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 92:92:9b:f0:67:87:a4:c4:a5:4e:a2:a3:64:4b:f6:93:5b:9c:a8:c9
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 1d:fc:cb:f8:c6:9b:3a:e6:fb:3a:ac:70:44:a1:56:1d:a9:4e:9b:ca
Fingerprint (sha256): 14:41:11:31:6a:15:50:eb:5c:90:10:98:a5:09:cd:d5:ec:7a:43:4d:cf:3c:a2:dc:9d:4b:36:e4:e3:ba:3a:0f

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate dayofgiving.duq.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dayofgiving.duq.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dayofgiving.duq.edu

Other certificates including the domain name duq.edu

(limited to 100 certificates)
wpm.ccmp.eu
sfunder5cert.net
ddc.duq.edu
law.duq.edu
scalefunder.net
ask.library.duq.edu
sfunder5cert.net
dsc.duq.edu
sfunder29cert.net
sso.duq.edu
www.dupress.duq.edu
mosaic.duq.edu
sfunder5cert.net
archives-staff.library.duq.edu
*.msl.duq.edu
scalefunder.net
scalefunder.net
www.dupress.duq.edu
www.dupress.duq.edu
5714315743068160-fe4.pantheonsite.io
www.mathcs.duq.edu
www.sbdc.duq.edu
digital.library.duq.edu
onlinenursing.duq.edu
calendar.library.duq.edu
5714315743068160-fe4.pantheonsite.io
5714315743068160-fe4.pantheonsite.io
duqcrim.com
5714315743068160-fe4.pantheonsite.io
calendar.library.duq.edu
sites.law.duq.edu
sfunder5cert.net
wpm.ccmp.eu
dsc.duq.edu
ddc.duq.edu
scalefunder.net
scalefunder.net
dupress.duq.edu
scalefunder.net
*.duq.edu
ask.library.duq.edu
wpm.ccmp.eu
5714315743068160-fe4.pantheonsite.io
wpm.ccmp.eu
jurismagazine.duqlawblogs.org
quarantine.duq.edu
applications.duq.edu
www.jma.duq.edu
*.authenticate.library.duq.edu
sfunder1cert.net
*.cr.duq.edu
edtech.msltest.duq.edu
dupress.duq.edu
*.duq.edu
5714315743068160-fe4.pantheonsite.io
ddc.duq.edu
winapps.duq.edu
sfunder15cert.net
wpm.ccmp.eu
scalefunder.net
ask.library.duq.edu
calendar.library.duq.edu
calendar.library.duq.edu
5714315743068160-fe4.pantheonsite.io
jma.msl.duq.edu
dayofgiving.duq.edu
archives-staff.library.duq.edu
archives-staff.library.duq.edu
apply.duq.edu
www.dupress.duq.edu
wpm.ccmp.eu
edtech.msl.duq.edu
scalefunder.net
www.dupress.duq.edu
5714315743068160-fe4.pantheonsite.io
www.dupress.duq.edu
dsc.duq.edu
scalefunder.net
dsc.duq.edu
guides.library.duq.edu
5714315743068160-fe4.pantheonsite.io
scalefunder.net
applications.duq.edu
sedfmweb.cr.duq.edu
sfunder5cert.net
sfunder1cert.net
*.duq.edu
wpm.ccmp.eu
5714315743068160-fe4.pantheonsite.io
view.mail.online.duq.edu
wpm.ccmp.eu
*.duq.edu
5714315743068160-fe4.pantheonsite.io
discover.duq.edu
guides.library.duq.edu
cpass-pub.cr.duq.edu
dupress.duq.edu
mosaic.duq.edu
5714315743068160-fe4.pantheonsite.io
gtm.duq.edu

Certificate

The complete raw certificate details for dayofgiving.duq.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3rvjxY8zIvwtgOK0Qbd
cqE1DRzbydxYxbQPEShTbCy3UTdz0f5apWhtmnNNd1JP+m0nFEl7FlSOD4/JOb5A
gfONfKJjg69Hm5R9F0EtKf10N6R+bj7cNFURMLGY3JUrC9CXAaGTuEgsxxJdgIaK
joESfNGX5Mnmba5LeHKMXSpafI1/0yStv3BgW5zGHZ6FYbZftfAFGHihmsi7/YuH
SZYYXHneuxnC3EIO7FEuGAwuDJLXF6IoPluZYJkPIXrqWMbaY1IUmorp20XaGYyB
d/nSX8SCatydPpFdU+bm+jiwHYyCXIJNSNyI9rxUE/mty7hr5Ra3bLjHGaQg2lP0
PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20366309878077366007893635870563976158
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dayofgiving.duq.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25686997799198001999501332482956072098011881296100098934914316693209436575811259610063450676035785639741874606053178326104187622071063839114026430106021552953620975985619341940039893329942148909952874417836203143005109653995586682302381685222504241837451947245134819723501354603762064464506477163663907892508137122814044152136553212079073693053195119107935375593596958169576828880869579307717748837643563005932076559156871108473467634496536515085403159875791375183684146327151322765443801142858070981247147284989877592835983074362628187977917034496452769187543636961455569748710575904024048109106977515198995752023103
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							92929bf06787a4c4a54ea2a3644bf6935b9ca8c9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dayofgiving.duq.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004cc3219927ae66e5279c46cb855ea74ab83676d1030d7776a05fff5223e042cd87b345e68b9a4bf32b59b259fd69e04efb7ae2d1450fda32ee419ac9d7365463b32268ef8345fa2784787354cff3242537068d6a393187a76c3072a0658781065f5af0e986b2e1a28cd118cf5c1fa8add8fe8b6b04c378ba518fff5032473713cd56d5b13e9ffa42a7d0e82d450f3c058ff492d3b5ab8699bc29f7d3ffe4b5c48eeb02ccb3a390d0e4e4fa5447c9c48a133aa4748ce7a64cb0f1321d963b736efab753b530515f08917b1af8318eb7f2d810f13006dc265a05542bb07094d8195be7f253214156ee880f49a1b84e82b68e45d701141da4e2d249ab3f3ebcb13f