learn.dcollege.net

Issued by Amazon

About this certificate

This digital certificate with serial number 07:10:2a:97:f0:e3:fb:ab:64:04:21:36:90:96:84:23 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=learn.dcollege.net

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:10:2a:97:f0:e3:fb:ab:64:04:21:36:90:96:84:23
Serial Number (int): 9388536619438878370218615796745536547
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 53:f4:92:37:27:19:73:2e:7f:28:ef:32:63:50:e7:10:74:4f:e6:a1
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): ad:50:e8:52:8d:4d:83:d2:b9:f1:13:3b:b5:93:d7:92:c9:44:5b:45
Fingerprint (sha256): 1b:93:c2:78:ff:74:b5:58:cd:5d:83:40:76:19:9d:58:62:05:fb:2f:6f:ec:3b:c4:b5:94:a6:21:49:e5:49:ec

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate learn.dcollege.net

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for learn.dcollege.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

learn.dcollege.net
learn.drexel.edu
*.blackboard.com
learning.drexel.edu

Other certificates including the domain name dcollege.net

(limited to 100 certificates)
rmcplogin.dcollege.net
learn.dcollege.net
us-east-1-san3.blackboard.com
partners.dcollege.net
vle.dcollege.net
neumann.dcollege.net
partners.dcollege.net
us-east-1-san4.blackboard.com
rmcp.dcollege.net
vpn.dcollege.net
tpgadmin.irttest.dcollege.net
us-east-1-san3.blackboard.com
learn.dcollege.net
us-east-1-san4.blackboard.com
partners.dcollege.net
rmcpapp.dcollege.net
us-east-1-san3.blackboard.com
rmcpapi.dcollege.net
pmt.dcollege.net
partners.dcollege.net
rmcpapp.irttest.dcollege.net
us-east-1-san4.blackboard.com
cabrini.dcollege.net
rmcp.irttest.dcollege.net
mkt.dcollege.net
us-east-1-san4.blackboard.com
neumann.dcollege.net
medaille.dcollege.net
reports.dcollege.net
us-east-1-san4.blackboard.com
us-east-1-san4.blackboard.com
learn.dcollege.net
learn.dcollege.net
us-east-1-san3.blackboard.com
learning.dcollege.net
rmcpapi.irttest.dcollege.net
pmt.irttest.dcollege.net
reporting.dcollege.net
us-east-1-san3.blackboard.com
rmcp.dcollege.net
us-east-1-san3.blackboard.com
us-east-1-san4.blackboard.com
us-east-1-san3.blackboard.com
rmcp.dcollege.net
us-east-1-san3.blackboard.com
us-east-1-san3.blackboard.com
vpn.dcollege.net
broadcast.dcollege.net
us-east-1-san4.blackboard.com
reports-dev.irttest.dcollege.net
partners.dcollege.net
neumann.dcollege.net
mkt-dev.irttest.dcollege.net
tpgadmin.dcollege.net
us-east-1-san4.blackboard.com
neumann.dcollege.net
us-east-1-san4.blackboard.com
rmcpapi.irttest.dcollege.net
mkt.dcollege.net
pmt.irttest.dcollege.net
its.learning.dcollege.net
learn.dcollege.net
reports.irttest.dcollege.net
mkt.irttest.dcollege.net
partners.dcollege.net
us-east-1-san4.blackboard.com
learn-1513041-1.dcollege.net
us-east-1-san3.blackboard.com
rmcpadmin.dcollege.net
cabrini.dcollege.net
us-east-1-san4.blackboard.com
medaille.dcollege.net
cabrini.dcollege.net
pmt.dcollege.net
us-east-1-san3.blackboard.com
us-east-1-san3.blackboard.com
pmt-dev.irttest.dcollege.net
tpgadmin.irttest.dcollege.net
us-east-1-san4.blackboard.com
pmt.dcollege.net
pmt.irttest.dcollege.net
tpgadmin.irttest.dcollege.net
us-east-1-san3.blackboard.com
rmcplogin.dcollege.net
us-east-1-san3.blackboard.com
us-east-1-san3.blackboard.com
rmcpapi.irttest.dcollege.net
pmt.irttest.dcollege.net
mkt.irttest.dcollege.net
us-east-1-san4.blackboard.com
us-east-1-san3.blackboard.com
partners.dcollege.net
pmt.irttest.dcollege.net
us-east-1-san3.blackboard.com
us-east-1-san4.blackboard.com
us-east-1-san3.blackboard.com
partners.dcollege.net
rmcpapp.dcollege.net
us-east-1-san3.blackboard.com
reporting.dcollege.net

Certificate

The complete raw certificate details for learn.dcollege.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6C283q72kxzeZt29cPyU
MqkbkeNcXj4wfnal7/4BcB7FyejAk1TD+qEQbUOZuZNJHasAi0xar3KYhBRTvdgR
ndKQVBoOLD9mWjVajNy+9wovkddxf2yLaC7G4qBj3dS5qpIEWhR23H2+d/W25whx
D5oJ/e//0J7WJeIAVqBB9U9ybAn9n5fKJIHexOon6uNqMAd655TJPhHUaFOAHs1y
wxA7lh89IK/vIrO3E7iLBEqtOsYlF3fmaMcH5VtB9tkMbA3Bnf8j/1F5Um1NHiXB
cRfaX6uNJE2sS+yMpd6j5KYMYfw4TaDCCocwlRY1N/u0thY7tS1+Z2qS4pcEhbyH
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9388536619438878370218615796745536547
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'learn.dcollege.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29309840888536800682282207429906278764898505817827812068414257522118704267817476244564570680805987176257156944633864408756727239424390876119689731455663282635870444691604571615498199728511470582501779149674817287100557720582583799227221060494719725456579829736515524123684351633979627821317073292151519074864704907331955190529120961650691012097919001735041008015793577688673078626662895809066047346626386338505261136253638955943580557901113419380368166471607007574933188614784729097659069444033057724218020181324494914365995339384576166651398524482521369883117747491905583775280216621829887068123860101857599148558323
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							53f492372719732e7f28ef326350e710744fe6a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.dcollege.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.drexel.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learning.drexel.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016e6582060b0000040300473045022040a9098c6a55f6f64f10f73277f16949b8bc2d7a4d48d9ae83ec6ca563f5b6b0022100f550cb1b92a37de4c978d1e13cfeeafc4623ee37acae9774f0613fdee33afe6b0077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016e658206e80000040300483046022100fab7dc315866722acb6250e977648fbd14a2c49095649e5590510a9b9f4c59ff022100bb83bf824c683d57c202bbe86a1cd124e93e01b83ba1aa26d8b2c9be148d8ab0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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