*.campusgroups.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 05:1f:96:f2:03:11:cf:7b:1f:d2:1f:02:43:97:ed:a6 was issued on by Amazon.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.campusgroups.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:1f:96:f2:03:11:cf:7b:1f:d2:1f:02:43:97:ed:a6
Serial Number (int): 6810162717145021793038658652784291238
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 65:aa:bb:46:ed:a0:06:ba:54:17:1b:ab:c4:4c:02:a2:f4:5c:2b:3e
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 75:10:14:5a:46:d7:4c:56:0a:68:c6:5d:65:21:18:31:53:74:f2:f4
Fingerprint (sha256): 27:46:84:af:4c:68:7d:e4:ff:83:e3:89:9c:66:05:2b:19:28:2b:40:ac:f6:99:8d:6e:6f:f1:72:56:8a:21:c8

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate *.campusgroups.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.campusgroups.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.campusgroups.com
groupment.com
campusgroups.com
*.groupment.com
*.tennisgroups.us
tennisgroups.us

Other certificates including the domain name campusgroups.com

(limited to 100 certificates)
us.prod.campusgroups.com
us.prod.campusgroups.com
blog.campusgroups.com
ssl378409.cloudflaressl.com
ssl378409.cloudflaressl.com
eu.prod.campusgroups.com
eu.prod.campusgroups.com
us.prod.campusgroups.com
ssl275802.cloudflaressl.com
au.prod.campusgroups.com
eu.prod.campusgroups.com
us.prod.campusgroups.com
blog.campusgroups.com
us.prod.campusgroups.com
ssl378409.cloudflaressl.com
blog.campusgroups.com
ssl378408.cloudflaressl.com
ssl378410.cloudflaressl.com
eu.prod.campusgroups.com
us.prod.campusgroups.com
ssl378410.cloudflaressl.com
ssl378410.cloudflaressl.com
eu.prod.campusgroups.com
blog.campusgroups.com
ssl378408.cloudflaressl.com
ssl275802.cloudflaressl.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
ssl378409.cloudflaressl.com
us.prod.campusgroups.com
*.campusgroups.com
ssl378408.cloudflaressl.com
us.prod.campusgroups.com
ssl378408.cloudflaressl.com
eu.prod.campusgroups.com
ssl275802.cloudflaressl.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
us.prod.campusgroups.com
us.prod.campusgroups.com
ssl378410.cloudflaressl.com
ssl378409.cloudflaressl.com
ssl378410.cloudflaressl.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
ssl93421.cloudflare.com
ssl378410.cloudflaressl.com
ssl275802.cloudflaressl.com
ssl378408.cloudflaressl.com
ssl378409.cloudflaressl.com
us.prod.campusgroups.com
us.prod.campusgroups.com
ssl378410.cloudflaressl.com
*.campusgroups.com
us.prod.campusgroups.com
us.prod.campusgroups.com
us.prod.campusgroups.com
us.prod.campusgroups.com
*.campusgroups.com
ssl378410.cloudflaressl.com
ssl378408.cloudflaressl.com
blog.campusgroups.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
blog.campusgroups.com
*.campusgroups.com
ssl378410.cloudflaressl.com
blog.campusgroups.com
ssl378410.cloudflaressl.com
us.prod.campusgroups.com
ssl378410.cloudflaressl.com
ssl378409.cloudflaressl.com
us.prod.campusgroups.com
blog.campusgroups.com
ssl378408.cloudflaressl.com
us.prod.campusgroups.com
ssl275802.cloudflaressl.com
ssl378408.cloudflaressl.com
*.campusgroups.com
eu.prod.campusgroups.com
ssl378410.cloudflaressl.com
ssl378410.cloudflaressl.com
ssl378408.cloudflaressl.com
sni.cloudflaressl.com
eu.prod.campusgroups.com
ssl378408.cloudflaressl.com
eu.prod.campusgroups.com
ssl378410.cloudflaressl.com
*.campusgroups.com
eu.prod.campusgroups.com
ssl378408.cloudflaressl.com
ssl378409.cloudflaressl.com
ssl378410.cloudflaressl.com
ssl378409.cloudflaressl.com
*.campusgroups.com
ssl378409.cloudflaressl.com
*.campusgroups.com
ssl378409.cloudflaressl.com
ssl378408.cloudflaressl.com
ssl378410.cloudflaressl.com

Certificate

The complete raw certificate details for *.campusgroups.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1E4fFnHKHkrSsmqHKWUy
uWE1C4UEIbmtQnHQxJ2fRvDYi+iMNNdLUdqtGyxb6utTIHZk8qQGAFnEerCFx7vW
DO82mODJfuXN1CUAjPcLLBtz0FVjOtOwD4dKNoP89AWbUclinXPKwYN1DdLX9M1L
p1Cms38wswA/4DoT5bJV7luntXyss4AfrW3x2DAf0YvKIMyVV3t10QqFkEowoti9
VcSu6dPDE43LXJNaMMiuPi2cgfXagMCY8qD6W68OpsEuQ9MvVM0Al+m90XXDHEby
a6kyMMYzsvFpwTrr7RFaGLkwuRFQYSZJZjJmCnyXrYnybSVr6Jfq8qAKQst3VA0/
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6810162717145021793038658652784291238
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.campusgroups.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26801043768783536972213221675958057924473742697379659674804881608674533808471257936858048926619376336583261689904859159096371246543862465844850858520057382611317870216322115445624831281136394190957667799884019603146372861102398730002722590633105458836459006809600113469485193305894687741850426017000588418916251148250424271415527140746122001376203715664637634383605754672646545549028246011822082594973168396032985293824624187422224450255559980259998116767578636493099515224128899220406231730756899617521578167893727384557668290215416304074882059894655330053870093219931203406545732510584371073600622390624181971402687
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							65aabb46eda006ba54171babc44c02a2f45c2b3e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.campusgroups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusgroups.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.groupment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tennisgroups.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tennisgroups.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							016600750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b4a7e69e500000403004630440220622674a70c69836b0267864ec7f1e836266718e608f3c4f081eef5836b82bff5022002a87aa81af6774b36a00d13fb0e8db79b3ea1570e18d8f0db8b41b1c132db8300750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b4a7e69a2000004030046304402200e66794e5debf2b53bc59076cbee2ecf8de44b00bd1ea08351264c89f410d7b9022004f065aeda75e279364a9a77069fae79f4d261922da4b14c5928e5bdfed0ab62007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b4a7e699800000403004730450220427343b4536f546181187d637bf8c94533d19b1400c2a2e0a884aa80fc99098e0221009eac2bf51fcb6f87bc9341c81bf5c9ea6d80ab283b2d9371b772fea739fa247a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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