freegrounds-jun.hants.sch.uk

Issued by Amazon

About this certificate

This digital certificate with serial number 01:16:86:17:31:dc:f0:25:e0:d3:eb:dc:83:b8:77:6d was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=freegrounds-jun.hants.sch.uk

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:16:86:17:31:dc:f0:25:e0:d3:eb:dc:83:b8:77:6d
Serial Number (int): 1446178207239172460895149407677740909
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 2e:67:1c:ed:33:f5:f4:b9:11:23:d3:db:67:4e:16:2d:ec:e6:ca:08
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): d9:2d:3a:95:07:5e:3e:7f:43:e0:2b:6e:8a:0f:cb:80:bf:e7:39:1b
Fingerprint (sha256): 35:3b:f6:54:90:80:45:e6:0e:2b:e6:90:d9:cc:0b:8b:1b:86:8b:1d:88:c2:8d:f8:c9:ff:8a:95:2b:5b:9d:00

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate freegrounds-jun.hants.sch.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for freegrounds-jun.hants.sch.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

freegrounds-jun.hants.sch.uk
*.freegrounds-jun.hants.sch.uk

Other certificates including the domain name freegrounds-jun.hants.sch.uk

(limited to 100 certificates)

Certificate

The complete raw certificate details for freegrounds-jun.hants.sch.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPQoi1Am1FAkeVjNp8Rl
yVoP5Spxlh65Yj2unCFSfbU51e7h2/fJKBgFgqPmuLWPv3drgrPV+FZfGt5R/pH2
HD1WAPrFhsGpnSAKRa+Lh21A3eY82kHlCUrLDtKOFiI7FGLjbk703YHHoyu8Hb3r
1idXjEaOwI0vlVsAElri8ODMoYZK1EO+4t4H6pVuTcp82BzkH8qKHTVg5j16DFO9
QaKcYsXkJtI4S7sNaeOxrr1J6PEhEb1kSmLO+MSzbmxzp5alpEPfYgdxlb8cHI7O
A4p7dXKFhJhwhzJW9qYqTenPPSr7xGcf4Nqk6o16VjOio1Dj9qFEMbfxz/iYizWp
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1446178207239172460895149407677740909
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'freegrounds-jun.hants.sch.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19813574557118548976511746637337246956558485931212703199093791127272751293245294129712120509294941324547612535830154067381813155503299398926473929444070359262398655402662535848538184043535617073215255662145704308113435633445077311490457940881051865169656180002083717734281550010864920149131602514043585961200750344261787890411536530772871486593656706143321910499460906295506582460613511938635520746546158179967158304256132630447488391375947331703559213340935141411255852156410805273869084996977277890330758876713780480571199253321910213466974294850036095010543519546581049709181838567811174857840210912950834120993271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2e671ced33f5f4b91123d3db674e162dece6ca08
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freegrounds-jun.hants.sch.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freegrounds-jun.hants.sch.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000184d61f537a00000403004730450221009361356ca6872ef4f7bbbad72bb72bfbc56996b9be976852e00da0e18b6d98df02204b695afe588d61a7d0901324ca12fdf2efa862fc694918843079e30e81589ab700750073d99e891b4c9678a0207d479de6b2c61cd0515e71192a8c6b80107ac17772b500000184d61f5393000004030046304402202ed11723fe6baf3ccd9d917963d855b2351b47674507eb5e211e5c3388b97b2202207e68e6247d3dcf71230ed8c5684dbce67a7d7e8ef76e007fce5de48c5bcf14ae00770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000184d61f536800000403004830460221009e14a288f35f11a4e8b46cb71c8486d2d4b63f6af1bfb6804d231353fbc68430022100ab7aa374c5f07437d593cf5c6cda875e34c3095777ded44235fe01d6309b52d1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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