freegrounds-jun.hants.sch.uk
Issued by Amazon
About this certificate
This digital certificate with serial number 01:16:86:17:31:dc:f0:25:e0:d3:eb:dc:83:b8:77:6d was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=freegrounds-jun.hants.sch.uk
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 01:16:86:17:31:dc:f0:25:e0:d3:eb:dc:83:b8:77:6dSerial Number (int): 1446178207239172460895149407677740909
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: 2e:67:1c:ed:33:f5:f4:b9:11:23:d3:db:67:4e:16:2d:ec:e6:ca:08
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): d9:2d:3a:95:07:5e:3e:7f:43:e0:2b:6e:8a:0f:cb:80:bf:e7:39:1b
Fingerprint (sha256): 35:3b:f6:54:90:80:45:e6:0e:2b:e6:90:d9:cc:0b:8b:1b:86:8b:1d:88:c2:8d:f8:c9:ff:8a:95:2b:5b:9d:00
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl
Check the revocation status for certificate freegrounds-jun.hants.sch.uk
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for freegrounds-jun.hants.sch.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
freegrounds-jun.hants.sch.uk
*.freegrounds-jun.hants.sch.uk
*.freegrounds-jun.hants.sch.uk
Other certificates including the domain name freegrounds-jun.hants.sch.uk
(limited to 100 certificates)
Certificate
The complete raw certificate details for freegrounds-jun.hants.sch.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGEDCCBPigAwIBAgIQARaGFzHc8CXg0+vcg7h3bTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjEyMDMwMDAwMDBaFw0yNDAxMDIy MzU5NTlaMCcxJTAjBgNVBAMTHGZyZWVncm91bmRzLWp1bi5oYW50cy5zY2gudWsw ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc9CiLUCbUUCR5WM2nxGXJ Wg/lKnGWHrliPa6cIVJ9tTnV7uHb98koGAWCo+a4tY+/d2uCs9X4Vl8a3lH+kfYc PVYA+sWGwamdIApFr4uHbUDd5jzaQeUJSssO0o4WIjsUYuNuTvTdgcejK7wdvevW J1eMRo7AjS+VWwASWuLw4MyhhkrUQ77i3gfqlW5NynzYHOQfyoodNWDmPXoMU71B opxixeQm0jhLuw1p47GuvUno8SERvWRKYs74xLNubHOnlqWkQ99iB3GVvxwcjs4D int1coWEmHCHMlb2pipN6c89KvvEZx/g2qTqjXpWM6KjUOP2oUQxt/HP+JiLNan3 AgMBAAGjggMXMIIDEzAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAd BgNVHQ4EFgQULmcc7TP19LkRI9PbZ04WLezmyggwRwYDVR0RBEAwPoIcZnJlZWdy b3VuZHMtanVuLmhhbnRzLnNjaC51a4IeKi5mcmVlZ3JvdW5kcy1qdW4uaGFudHMu c2NoLnVrMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwPQYDVR0fBDYwNDAyoDCgLoYsaHR0cDovL2NybC5zY2ExYi5hbWF6b250 cnVzdC5jb20vc2NhMWItMS5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYB BQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6b250 cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9udHJ1 c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMIIBfgYKKwYBBAHWeQIEAgSC AW4EggFqAWgAdgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYTW H1N6AAAEAwBHMEUCIQCTYTVspocu9Pe7utcrtyv7xWmWub6XaFLgDaDhi22Y3wIg S2la/liNYafQkBMkyhL98u+oYvxpSRiEMHnjDoFYmrcAdQBz2Z6JG0yWeKAgfUed 5rLGHNBRXnEZKoxrgBB6wXdytQAAAYTWH1OTAAAEAwBGMEQCIC7RFyP+a688zZ2R eWPYVbI1G0dnRQfrXiEeXDOIuXsiAiB+aOYkfT3PcSMO2MVoTbzmen1+jvduAH/O XeSMW88UrgB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABhNYf U2gAAAQDAEgwRgIhAJ4UoojzXxGk6LRstxyEhtLUtj9q8b+2gE0jE1P7xoQwAiEA q3qjdMXwdDfVk89cbNqHXjTDCVd33tRCNf4B1jCbUtEwDQYJKoZIhvcNAQELBQAD ggEBADg5rBkIwJyX0rQEu816ZIKrgSX1pdwZG3XWPIDt5OP/EyND7GhEkZzWCmxU HCd7hSpUJzJl4P3aCMCfCPhweRpUgw5Pcw+upvM8lLlGTMJVpdfVThSupZEWPA08 UaK05RKx44cig9HO7YyrEVyS0dTlohAx19aY2+6U0C0WOKQy+o5057/uFlCw8nCm Eiwkxle5OSwMtnwvn7GkHsJsOFlcDP5w2XmY20Z37y9GoSWGifazav2YNh8HSyAJ vkYunfFKfsYA24W9Cjlx7RlrXOrzNwbYQz8/c3RuP5izBAq12bBihJsH2iYScr1q bDXripAABbyEqjxm4euBSBjCSZs= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPQoi1Am1FAkeVjNp8Rl yVoP5Spxlh65Yj2unCFSfbU51e7h2/fJKBgFgqPmuLWPv3drgrPV+FZfGt5R/pH2 HD1WAPrFhsGpnSAKRa+Lh21A3eY82kHlCUrLDtKOFiI7FGLjbk703YHHoyu8Hb3r 1idXjEaOwI0vlVsAElri8ODMoYZK1EO+4t4H6pVuTcp82BzkH8qKHTVg5j16DFO9 QaKcYsXkJtI4S7sNaeOxrr1J6PEhEb1kSmLO+MSzbmxzp5alpEPfYgdxlb8cHI7O A4p7dXKFhJhwhzJW9qYqTenPPSr7xGcf4Nqk6o16VjOio1Dj9qFEMbfxz/iYizWp 9wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1446178207239172460895149407677740909 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-03 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'freegrounds-jun.hants.sch.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19813574557118548976511746637337246956558485931212703199093791127272751293245294129712120509294941324547612535830154067381813155503299398926473929444070359262398655402662535848538184043535617073215255662145704308113435633445077311490457940881051865169656180002083717734281550010864920149131602514043585961200750344261787890411536530772871486593656706143321910499460906295506582460613511938635520746546158179967158304256132630447488391375947331703559213340935141411255852156410805273869084996977277890330758876713780480571199253321910213466974294850036095010543519546581049709181838567811174857840210912950834120993271 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2e671ced33f5f4b91123d3db674e162dece6ca08 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freegrounds-jun.hants.sch.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freegrounds-jun.hants.sch.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 0168007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000184d61f537a00000403004730450221009361356ca6872ef4f7bbbad72bb72bfbc56996b9be976852e00da0e18b6d98df02204b695afe588d61a7d0901324ca12fdf2efa862fc694918843079e30e81589ab700750073d99e891b4c9678a0207d479de6b2c61cd0515e71192a8c6b80107ac17772b500000184d61f5393000004030046304402202ed11723fe6baf3ccd9d917963d855b2351b47674507eb5e211e5c3388b97b2202207e68e6247d3dcf71230ed8c5684dbce67a7d7e8ef76e007fce5de48c5bcf14ae00770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000184d61f536800000403004830460221009e14a288f35f11a4e8b46cb71c8486d2d4b63f6af1bfb6804d231353fbc68430022100ab7aa374c5f07437d593cf5c6cda875e34c3095777ded44235fe01d6309b52d1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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