afford.smcm.edu

Issued by Amazon

About this certificate

This digital certificate with serial number 03:06:db:58:a4:82:bf:34:49:2c:d9:64:fd:8d:53:94 was issued on by Amazon.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=afford.smcm.edu

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:06:db:58:a4:82:bf:34:49:2c:d9:64:fd:8d:53:94
Serial Number (int): 4023286639201062459319398128941880212
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 90:15:6d:de:32:27:c9:08:56:b6:bd:d0:ce:23:7b:16:df:ca:1f:fe
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 31:e9:be:98:58:0d:cd:4e:6b:58:25:b4:70:87:1f:9f:d4:37:e1:ca
Fingerprint (sha256): 27:da:ef:56:1c:74:2d:22:e0:2c:1c:31:c1:91:e7:4c:43:7c:a5:44:30:77:99:52:7d:5f:d4:7c:6e:43:11:e2

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate afford.smcm.edu

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for afford.smcm.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

afford.smcm.edu
discover.smcm.edu
ready.smcm.edu
*.ready.smcm.edu
scholarships.smcm.edu
*.scholarships.smcm.edu
*.discover.smcm.edu
*.afford.smcm.edu

Other certificates including the domain name smcm.edu

(limited to 100 certificates)
ithelpdesk.endologix.com
clearpass2.smcm.edu
libanswers.smcm.edu
helpdesk.enableinjections.com
*.smcm.edu
*.smcm.edu
helpdesk.dpsgroupglobal.com
inside.smcm.edu
libguides.smcm.edu
apply.smcm.edu
*.smcm.edu
*.smcm.edu
ithelpdesk.endologix.com
openhouse.smcm.edu
support.unpri.org
afford.smcm.edu
ithelpdesk.endologix.com
*.smcm.edu
afford.smcm.edu
*.smcm.edu
*.smcm.edu
afford.smcm.edu
ithelpdesk.endologix.com
ithelpdesk.endologix.com
*.smcm.edu
blackboard.smcm.edu
seahawks.smcm.edu
helpdesk.dpsgroupglobal.com
*.smcm.edu
*.smcm.edu
webmail.smcm.edu
*.smcm.edu
helpdesk.dpsgroupglobal.com
ithelpdesk.endologix.com
support.smcm.edu
*.smcm.edu
*.smcm.edu
support.unpri.org
ithelpdesk.endologix.com
*.smcm.edu
info.nysid.edu
blackboard.smcm.edu
clearpass2.smcm.edu
support.unpri.org
*.smcm.edu
*.smcm.edu
*.smcm.edu
ithelpdesk.endologix.com
ithelpdesk.endologix.com
netradius.smcm.edu
*.smcm.edu
*.smcm.edu
www.smcm.edu
apply.smcm.edu
helpdesk.dpsgroupglobal.com
blackboard.smcm.edu
*.smcm.edu
*.smcm.edu
clearpass1.smcm.edu
*.smcm.edu
ithelpdesk.endologix.com
support.unpri.org
*.smcm.edu
*.smcm.edu
*.smcm.edu
inside.smcm.edu
libguides.smcm.edu
*.smcm.edu
WWW.SMCM.EDU
webmail.smcm.edu
*.smcm.edu
helpdesk.dpsgroupglobal.com
ithelpdesk.endologix.com
libguides.smcm.edu
*.smcm.edu
helpdesk.dpsgroupglobal.com
blackboard.smcm.edu
*.smcm.edu
*.smcm.edu
community.smcm.edu
*.smcm.edu
servicedesk.acdlabs.com
*.smcm.edu
*.smcm.edu
netradius2.smcm.edu
*.smcm.edu
apply.smcm.edu
ithelpdesk.endologix.com
ithelpdesk.endologix.com
*.smcm.edu
openhouse.smcm.edu
ithelpdesk.endologix.com
admitted.smcm.edu
ithelpdesk.endologix.com
*.smcm.edu
*.smcm.edu
support.unpri.org
inside.smcm.edu
servicedesk.smcm.edu
helpdesk.icebreaker.com

Certificate

The complete raw certificate details for afford.smcm.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorYw6QIEqPrajZ6e7/qS
63gt3WXe62zjGvRa4PwRcyxWM1Aj/39koWIpwXRF0q/HlT0EyINFIGidmJZNHPu0
oI3TY9lXcAMmYVf95TV7t/ZlHYhedtj4s3OQ0FEa+m/oh2aqTjwqxEurobIGmFI+
WzRaNSMMl+Q1hrBMqbK/TeipMEI1BoolkXTi30PlzJ6ww9Ohb02JDw8+goqfuThI
MUWd3QUj0GJzs+0eMoWfbNFFWv8TbEoK5Pqjyg249p/ftP87cNlfa//M35kNvSoD
iSBLUNFCEjl9j18vvsQDwedmLZ18jJqyAUkfAXYAgB2Mt3vnBFqjnNBmt0dDNpB6
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4023286639201062459319398128941880212
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'afford.smcm.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20540447162376356121145431137007105971694896471404515695590775674429261189723381027306196692988026852916207252896814676144841603762214844668587762906433065394507137836075170304298617344614797135150457429853541546097080420334094329370448653091786519937014472259740527469402802563277646055231653162705814825089375884999770704985278902871741818517717558743160688406016268014172357607006538549799228596565293401669745147391549532834710931073424412918641518837355127135029491021557999140535636169783009668769033480239119895849525894531535198167327539751614144365930341615528799468502303528941120458739835935233365848914557
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							90156dde3227c90856b6bdd0ce237b16dfca1ffe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afford.smcm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discover.smcm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ready.smcm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ready.smcm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scholarships.smcm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scholarships.smcm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.discover.smcm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.afford.smcm.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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