acsconnects.org

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 02:a4:cd:e3:36:be:c2:cc:c3:f6:d9:22:a5:02:91:c7 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=acsconnects.org

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:a4:cd:e3:36:be:c2:cc:c3:f6:d9:22:a5:02:91:c7
Serial Number (int): 3514168572073989159761751866282774983
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 82:dc:b7:02:03:6f:4f:e2:ef:7c:9d:7c:34:49:6d:4f:80:53:5d:9c
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 8c:9e:cd:10:81:e8:04:1f:b4:1b:a0:2d:83:2b:88:57:24:5a:6c:f1
Fingerprint (sha256): 2e:64:87:f6:7b:b2:e2:72:2a:41:a5:a3:63:27:dc:19:1a:00:a0:94:7b:c7:3f:7e:db:fb:34:b7:b2:b6:8c:e8

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate acsconnects.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acsconnects.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acsconnects.org
www.acsconnects.org

Other certificates including the domain name acsconnects.org

(limited to 100 certificates)
alphaphinetwork.com
acsconnects.org
aceconnection.org
aatlconnected.com
aceconnection.org
aatlconnected.com
ahlafoundationconnect.com
ahlafoundationconnect.com
access.fortefoundation.org
aatlconnected.com
access.fortefoundation.org
aatlconnected.com
aatlconnected.com
alumnisabana.com
aatlconnected.com
aatlconnected.com
access.fortefoundation.org
alumnisabana.com
aatlconnected.com
alumnigsb.com
alphaphinetwork.com
aceconnection.org
acsconnects.org
access.fortefoundation.org
aceconnection.org
aatlconnected.com
aatlconnected.com
access.fortefoundation.org
aatlconnected.com
access.fortefoundation.org
www.ahlafoundationconnect.com
ahlafoundationconnect.com
aatlconnected.com
access.fortefoundation.org
alphaphinetwork.com
aatlconnected.com
access.fortefoundation.org
aatlconnected.com
alumni.harding.edu
alumnisabana.com
access.fortefoundation.org
alumni.pcci.edu
alumni.pcci.edu
alumni.harding.edu
aatlconnected.com
access.fortefoundation.org
access.fortefoundation.org
alumni.facamp.com.br
access.fortefoundation.org
alumnisabana.com
aatlconnected.com
alumnigsb.com
alumni.pcci.edu
alumni.nonprofitpractice.org
access.fortefoundation.org
access.fortefoundation.org
alumni.thrivescholars.org
alphaphinetwork.com
access.fortefoundation.org
acomconnect.com
access.fortefoundation.org
access.fortefoundation.org
aatlconnected.com
access.fortefoundation.org
alumni.facamp.com.br
aceconnection.org
aatlconnected.com
access.fortefoundation.org
access.fortefoundation.org
aceconnection.org
aatlconnected.com
acsconnects.org
alumni.pcci.edu
aatlconnected.com
alumni.pcci.edu
aatlconnected.com
aatlconnected.com
alumnisabana.com
alumnisabana.com
aatlconnected.com
alumni.facamp.com.br
aatlconnected.com
aceconnection.org
aatlconnected.com
alumni.harding.edu
www.ahlafoundationconnect.com
access.fortefoundation.org
aatlconnected.com
aatlconnected.com
acomconnect.com
alumnisabana.com
aceconnection.org
alumni.pcci.edu
access.fortefoundation.org
alphaphinetwork.com
aceconnection.org
alumnisabana.com
alumni.pcci.edu
aatlconnected.com
alumni.pcci.edu

Certificate

The complete raw certificate details for acsconnects.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF3jCCBMagAwIBAgIQAqTN4za+wszD9tkipQKRxzANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIzMTIxNTAwMDAwMFoXDTI1MDExMzIzNTk1OVowGjEY
MBYGA1UEAxMPYWNzY29ubmVjdHMub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAx7zt5WflsKc9/1nGODx9zJzT5IJBj5exKWZGHUEH1P9N8Pa32EEQ
Tai4hNPgyWPhp3RGNPYAUlS08EJCVD3wYG34hQKFX84N64UTMZGsrsAwkCnFiEVp
HPa79m8FDQTPeiovzPPO7iPmw5wGt8mHepy081y1Wdr/GGkEcEOkUCinJla2mptP
6tWeZz1sp/nTXRFp8vlGyBXQxkMUXm7xFc/By50ObumitOQkEADY+sGTa9YepVyZ
/RobV1UvmJPA74HGth5VKx48HB36S3SYBWE5YK9yoRaqBimtVSz9gB+AtJUBG5Ck
6VC4DEzZuRqR1mpEoMA83UIWSwQmW8xpGQIDAQABo4IC/DCCAvgwHwYDVR0jBBgw
FoAUwDFSzVpQw4J8dHHOy+mc+XrrguIwHQYDVR0OBBYEFILctwIDb0/i73ydfDRJ
bU+AU12cMC8GA1UdEQQoMCaCD2Fjc2Nvbm5lY3RzLm9yZ4ITd3d3LmFjc2Nvbm5l
Y3RzLm9yZzATBgNVHSAEDDAKMAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0
dHA6Ly9jcmwucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNybDB1BggrBgEF
BQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAyLmFtYXpvbnRy
dXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMi5hbWF6b250cnVz
dC5jb20vcjJtMDIuY2VyMAwGA1UdEwEB/wQCMAAwggF9BgorBgEEAdZ5AgQCBIIB
bQSCAWkBZwB2AE51oydcmhDDOFts1N8/Uusd8OCOG41pwLH6ZLFimjnfAAABjGs/
AtUAAAQDAEcwRQIhAKyh4QMCDRuiWJC08t8fNPpxb7A45dE3qTKoXp7nyYbRAiAJ
zuavvyuFNR858Jo+XJ7bwU6H2mijlF/IR1TwklUXjgB1AD8XS0/XIkdYlB1lHIS+
DRLtkDd/H4Vq68G/KIXs+GRuAAABjGs/Ax0AAAQDAEYwRAIgev3L21iq/s4csLxx
EbRxRs1ZIUGg5n+spMIV9cGTtCICIFwwWfLfdvytXiR75yCB/KFhKVnYkWIJHrNM
NwH2JPXgAHYAfVkeEuF4KnscYWd8Xv340IdcFKBOlZ65Ay/ZDowuebgAAAGMaz8D
CgAABAMARzBFAiAe0F8M6uqNSpyxEEUjjd4SNdDoZFnsBqQesid6lc18vgIhAMaS
SpeIXUaC8ZDCij4+LZJdLhqpFwemkzd7FQNdanZTMA0GCSqGSIb3DQEBCwUAA4IB
AQAPpdQbkdmh5tOxcEDn4I+JXu3CJG1iGCH+pxmlky4LCyZIn4N6D2cSTPSKA5mz
RbkXr8oS6r1Yw3zZLdosJ/SL9MYahpUtwMBM9qR8i41zGnle2BwwVQ33p7OCnJWk
wCqWyaqdBt9MgGQmo/hZeqQpIrVkoi9KKcAoqqbRjXlG6zp4ekKyEE82L/Eg4YRG
7dFqgMYOKGg20u1wyD2XZphxeUJbwzuljyogh39N8gES444DXFjqMEjO6juM5YxE
oNMrnzEc0ZiN9wspIBECPzpRmOnTr6/ax4tah92Qp9+6PSn7cwiFUKNAi54D4bPk
K87DHqG+Mf/tgQ1KYi+C9H22
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7zt5WflsKc9/1nGODx9
zJzT5IJBj5exKWZGHUEH1P9N8Pa32EEQTai4hNPgyWPhp3RGNPYAUlS08EJCVD3w
YG34hQKFX84N64UTMZGsrsAwkCnFiEVpHPa79m8FDQTPeiovzPPO7iPmw5wGt8mH
epy081y1Wdr/GGkEcEOkUCinJla2mptP6tWeZz1sp/nTXRFp8vlGyBXQxkMUXm7x
Fc/By50ObumitOQkEADY+sGTa9YepVyZ/RobV1UvmJPA74HGth5VKx48HB36S3SY
BWE5YK9yoRaqBimtVSz9gB+AtJUBG5Ck6VC4DEzZuRqR1mpEoMA83UIWSwQmW8xp
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3514168572073989159761751866282774983
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acsconnects.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25214587189343131949578021432976210017514158865110414911204293680952563039849425774920310255489581655637696619059732348348813618413387132757571231717894156461428303816463591305860833782271867470543851849566420050797072363643948545525886114485129967237591878660775943503105225395327343376524851437653942078273370723721392856532625640967060801776236241115311083097923484554248667548614726546632308531914013541188805893062932317224494517791284457631918615701340707123319350256366829907076738768453528701807082609295835224514478965177233687617082578511814873059076859414237889774591474842161359424929781098669836541389081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							82dcb702036f4fe2ef7c9d7c34496d4f80535d9c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acsconnects.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acsconnects.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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