dingdong.apu.edu.my

Issued by Amazon

About this certificate

This digital certificate with serial number 04:a0:68:5f:1b:5b:57:81:47:7f:08:c4:8f:cc:00:40 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dingdong.apu.edu.my

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:a0:68:5f:1b:5b:57:81:47:7f:08:c4:8f:cc:00:40
Serial Number (int): 6149796386245975286443358971792982080
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 7a:02:db:54:e8:95:de:f1:94:da:b0:e2:ee:ef:0f:8d:09:fd:0d:d0
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): af:24:f0:23:aa:b0:75:3a:10:86:2e:eb:77:1c:21:7c:f0:f0:3f:60
Fingerprint (sha256): 2b:ac:7c:57:f5:cd:da:24:4a:28:b6:b8:ce:a2:f9:6b:c1:9c:43:1b:2f:07:b3:b2:ff:6d:93:28:77:d8:e8:72

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate dingdong.apu.edu.my

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dingdong.apu.edu.my

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dingdong.apu.edu.my
*.dingdong.apu.edu.my

Other certificates including the domain name apu.edu.my

(limited to 100 certificates)
www.apu.edu.my
alumniconnect.apu.edu.my
transix-admin.apu.edu.my
*.studentaffairs.apu.edu.my
eopendaytest.apu.edu.my
studentaffairs.apu.edu.my
*.apu.edu.my
*.apiit.edu.my
dingdong.apu.edu.my
bbb.apu.edu.my
apu.edu.my
www.studentaffairs.apu.edu.my
apu.edu.my
apu.edu.my
eopendaytest.apu.edu.my
www.studentaffairs.apu.edu.my
*.studentaffairs.apu.edu.my
*.apu.edu.my
*.apu.edu.my
dingdong.apu.edu.my
transix-admin.apu.edu.my
eopendaytest.apu.edu.my
apu.edu.my
www.studentaffairs.apu.edu.my
eopendaytest.apu.edu.my
*.apiit.edu.my
eopendaytest.apu.edu.my
*.apiit.edu.my
*.studentaffairs.apu.edu.my
apu.edu.my
apu.edu.my
apu.edu.my
eopendaytest.apu.edu.my
apu.edu.my
dingdong.apu.edu.my
www.studentaffairs.apu.edu.my
eopendaytest.apu.edu.my
alumniconnect.apu.edu.my
*.apu.edu.my
studentaffairs.apu.edu.my
apu.edu.my
*.studentaffairs.apu.edu.my
*.apu.edu.my
www.apu.edu.my
www.apu.edu.my
eopendaytest.apu.edu.my
*.studentaffairs.apu.edu.my
www.apu.edu.my
apu.edu.my
*.apiit.edu.my
alumniconnect.apu.edu.my
dingdong.apu.edu.my
quix.apu.edu.my
www.apu.edu.my
*.apu.edu.my
eopendaytest.apu.edu.my
transix-admin.apu.edu.my
eopendaytest.apu.edu.my
admissions.apu.edu.my
eopendaytest.apu.edu.my
*.apiit.edu.my
*.ezproxy.apu.edu.my
*.apiit.edu.my
apu.edu.my
www.apu.edu.my
quix.apu.edu.my
eopendaytest.apu.edu.my
apu.edu.my
apu.edu.my
www.apu.edu.my
quix.apu.edu.my
apu.edu.my
www.apu.edu.my
eopendaytest.apu.edu.my
*.apu.edu.my
dingdong.apu.edu.my
www.studentaffairs.apu.edu.my
apu.edu.my
apu.edu.my
alumniconnect.apu.edu.my
transix-admin.apu.edu.my
eopendaytest.apu.edu.my
www.studentaffairs.apu.edu.my
www.studentaffairs.apu.edu.my
alumniconnect.apu.edu.my
*.studentaffairs.apu.edu.my
www.apu.edu.my
quix.apu.edu.my
studentaffairs.apu.edu.my
*.studentaffairs.apu.edu.my
*.apu.edu.my
eopendaytest.apu.edu.my
transix-admin.apu.edu.my
apu.edu.my
www.apu.edu.my
www.apu.edu.my
*.ezproxy.apu.edu.my
alumniconnect.apu.edu.my
*.studentaffairs.apu.edu.my
*.exproxy.apu.edu.my

Certificate

The complete raw certificate details for dingdong.apu.edu.my in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzBvzmCFOeG+UGUQAr9CY
moI50Z8sYIqW9I8GzHmx4jiRV3GdM7iPGqzSnDuoFLbzhn647gu1z61wiK81MLLs
yQ0b7KPdGdoRIAgqChpkWjesw87EJl/y5YpAL1swQnre3f4m76jtxunEiqnr/STJ
QfsczauHI4wFRd8T64TLHFFQGmwqP0skkJXJvPTSRfgjVYaxKwihaU1LAjQ3hk/m
2Qt9jNxzBiX0QweQ1Cq//XC9N37kFtYaDdJuyWcayQ1nPOyG2lqjlxk+ebcBED3y
tcpmmfvZocxEKeLnEElv+k7FVtgfbONTdnbmzDBcyQSqhh00rBL2FE/GpLjEXLg+
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6149796386245975286443358971792982080
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dingdong.apu.edu.my'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25766397631200077080710543581797384479674236997956486398002322118541677600116255347897139755369301925452466238734815951568342162984697253245526477433145049250503191842054032195993110338460547095917685872914561108148792829771347709177098179563454983304897517938593047886116674794113314199110707721195484878249074177426043041645284232003704212849853240890853993714272220909595785802256091656612667130481925821175892449212670110640301661133972601479958025233944155479628263644597391709579782788700466908412362182497295425323930067127923054645928892603870212266995042978532307226495158584548315115735284437894845339025067
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7a02db54e895def194dab0e2eeef0f8d09fd0dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dingdong.apu.edu.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dingdong.apu.edu.my'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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