ted.peopleadmin.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0e:87:ae:86:e6:b0:bc:c9:44:8e:a4:39:6f:10:d4:f0 was issued on by Amazon.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ted.peopleadmin.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:87:ae:86:e6:b0:bc:c9:44:8e:a4:39:6f:10:d4:f0
Serial Number (int): 19313691844131050973375865463206106352
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f3:e1:20:81:16:3c:04:98:7e:11:09:28:97:a1:1a:0e:5e:61:fe:98
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 39:a7:a0:5e:fa:42:43:a1:15:b3:80:8e:7b:4a:e0:c1:7c:e5:31:49
Fingerprint (sha256): 14:d4:92:f7:a3:7f:75:b6:4a:d1:37:7b:4f:02:3b:c1:4f:ae:9c:af:83:bd:6c:97:60:af:fc:73:2e:74:b9:fa

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate ted.peopleadmin.com

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ted.peopleadmin.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ted.peopleadmin.com
*.mybl.me
tedk12.com
*.talentedk12.com
mybl.me
*.britelocker.com
*.ted.peopleadmin.com
schoolrecruiter.net
*.cloud.talentedk12.com
britelocker.com
*.schoolrecruiter.net
britelocker.net
*.britelocker.net
talentedk12.com
*.tedk12.com

Other certificates including the domain name peopleadmin.com

(limited to 100 certificates)
community.peopleadmin.com
edge-uc2.peopleadmin.com
edge-uc2.peopleadmin.com
ted.peopleadmin.com
edge_uc3.peopleadmin.com
edge-uc3.peopleadmin.com
*.peopleadmin.com
imperva.com
peopleadmin.com
imperva.com
edge_uc2.peopleadmin.com
peopleadmin.com
edge-uc1.peopleadmin.com
edge-uc3.peopleadmin.com
edge-uc4.peopleadmin.com
imperva.com
imperva.com
edge-uc4.peopleadmin.com
*.demofaculty.peopleadmin.com
edge_uc4.peopleadmin.com
lb03.pacloud.com
*.services.peopleadmin.com
imperva.com
ha.peopleadmin.com
imperva.com
edge_uc4.peopleadmin.com
edge_uc3.peopleadmin.com
ha.peopleadmin.com
edge-uc3.peopleadmin.com
edge-uc3.peopleadmin.com
incapsula.com
edge_uc3.peopleadmin.com
*.ca.services.peopleadmin.com
ha.peopleadmin.com
edge_uc3.peopleadmin.com
edge_uc4.peopleadmin.com
edge_uc2.peopleadmin.com
ha.peopleadmin.com
peopleadmin.com
ted.peopleadmin.com
edge_uc4.peopleadmin.com
peopleadmin.com
edge-uc4.peopleadmin.com
edge_uc3.peopleadmin.com
edge_uc3.peopleadmin.com
edge_uc4.peopleadmin.com
edge-uc1.peopleadmin.com
imperva.com
edge-uc2.peopleadmin.com
ted.peopleadmin.com
peopleadmin.com
edge_uc3.peopleadmin.com
imperva.com
edge-uc1.peopleadmin.com
edge-uc4.peopleadmin.com
edge-uc2.peopleadmin.com
edge_uc3.peopleadmin.com
imperva.com
edge_uc2.peopleadmin.com
edge-uc3.peopleadmin.com
patest.peopleadmin.com
edge-uc3.peopleadmin.com
edge-uc3.peopleadmin.com
sfqa.peopleadmin.com
imperva.com
ha.peopleadmin.com
*.sandboxfaculty.peopleadmin.com
lb03.pacloud.com
imperva.com
ha.peopleadmin.com
highered-ci.peopleadmin.com
ha.peopleadmin.com
edge-uc3.peopleadmin.com
*.peopleadmin.com
edge_uc3.peopleadmin.com
edge_uc1.peopleadmin.com
*.services.peopleadmin.com
edge_uc3.peopleadmin.com
edge-uc1.peopleadmin.ca
edge_uc1.peopleadmin.com
edge_uc2.peopleadmin.com
edge_uc1.peopleadmin.com
edge-uc1.peopleadmin.com
uc1.pacloud.net
ha.peopleadmin.com
edge_uc2.peopleadmin.com
edge_uc3.peopleadmin.com
edge-uc3.peopleadmin.com
peopleadmin.com
peopleadmin.com
imperva.com
peopleadmin.com
edge-uc3.peopleadmin.com
edge_uc3.peopleadmin.com
edge_uc1.peopleadmin.ca
edge-uc4.peopleadmin.com
edge-uc2.peopleadmin.com
edge-uc4.peopleadmin.com
edge_uc3.peopleadmin.com
ha.peopleadmin.com

Certificate

The complete raw certificate details for ted.peopleadmin.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3u/yPuhr5+zUjvWq0o2F
z1U1BEsUfKJXbyF/hkOlqbDXirC5f28EPOldc0pFJMCFZnmXXl2PL0SJlVXYZWSj
kWnHWU1nFl7WnGcBe2nLYaOpck1qqWhwNp3XusXEMyFLBHVks0QT9rdNYNt9SmJm
s9rGbqkDjnJ65HM9P7OFHAxvdCTeZvLJqeYrcGl1Z8+bKKTE7X06XWFuIS7YqXAO
rxB765l5LfGLU8wQyIqy3EJc3efIisJ34wu9H+KuuVH1GafPkBXZN6syKUOksT71
SsfjMCyRAeTIwcLi6YWDfkXKb6ta1O/Mp8IbMkOMcSKf2yVE5z/8F+a/4gscSijN
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19313691844131050973375865463206106352
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ted.peopleadmin.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28143225619302859878711949360391702288102562184944354032992261044009135478892439660994637768792931129808498818278761202420353795317776109567565891447876577723019994456613031727508007361745046444208172940438898452193791675889836521101930497436083594146263258771592375893906675366712564587857503869379325984743206382119677351153771532800617559604141127181653252991548006115371426430276431137111063448145982083446996675818464457831619167953187995544948218484224517613162441498133799055050832690225550188653905858623891582504406979461544653531552575139290061296439343960026428081016012448406063911193389235723832169909513
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f3e12081163c04987e11092897a11a0e5e61fe98
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (271 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ted.peopleadmin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mybl.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tedk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.talentedk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybl.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.britelocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ted.peopleadmin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolrecruiter.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cloud.talentedk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'britelocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schoolrecruiter.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'britelocker.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.britelocker.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talentedk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tedk12.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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