*.studentaffairs.apu.edu.my

Issued by Amazon

About this certificate

This digital certificate with serial number 03:74:f9:34:d8:c1:4f:f7:b4:b2:08:de:86:6e:d9:0a was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

Certificate Subject

CN=*.studentaffairs.apu.edu.my

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:74:f9:34:d8:c1:4f:f7:b4:b2:08:de:86:6e:d9:0a
Serial Number (int): 4595044929883010072216646892901030154
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: ea:a7:33:e3:8c:12:6a:f8:13:90:13:f4:45:be:88:fb:5d:67:5d:c1
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 22:2e:40:bb:c3:55:7e:a7:39:62:a4:00:73:1d:0a:90:82:cf:b3:20
Fingerprint (sha256): 35:b7:13:08:bd:a5:d6:5e:c8:6b:bc:87:8a:36:0e:86:c5:b8:df:a9:78:5f:77:60:22:32:82:92:e6:34:5d:f2

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.studentaffairs.apu.edu.my

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.studentaffairs.apu.edu.my

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.studentaffairs.apu.edu.my

Other certificates including the domain name apu.edu.my

(limited to 100 certificates)
www.apu.edu.my
alumniconnect.apu.edu.my
transix-admin.apu.edu.my
*.studentaffairs.apu.edu.my
eopendaytest.apu.edu.my
studentaffairs.apu.edu.my
*.apu.edu.my
*.apiit.edu.my
dingdong.apu.edu.my
bbb.apu.edu.my
apu.edu.my
www.studentaffairs.apu.edu.my
apu.edu.my
apu.edu.my
eopendaytest.apu.edu.my
www.studentaffairs.apu.edu.my
*.studentaffairs.apu.edu.my
*.apu.edu.my
*.apu.edu.my
dingdong.apu.edu.my
transix-admin.apu.edu.my
eopendaytest.apu.edu.my
apu.edu.my
www.studentaffairs.apu.edu.my
eopendaytest.apu.edu.my
*.apiit.edu.my
eopendaytest.apu.edu.my
*.apiit.edu.my
*.studentaffairs.apu.edu.my
apu.edu.my
apu.edu.my
apu.edu.my
eopendaytest.apu.edu.my
apu.edu.my
dingdong.apu.edu.my
www.studentaffairs.apu.edu.my
eopendaytest.apu.edu.my
alumniconnect.apu.edu.my
*.apu.edu.my
studentaffairs.apu.edu.my
apu.edu.my
*.studentaffairs.apu.edu.my
*.apu.edu.my
www.apu.edu.my
www.apu.edu.my
eopendaytest.apu.edu.my
*.studentaffairs.apu.edu.my
www.apu.edu.my
apu.edu.my
*.apiit.edu.my
alumniconnect.apu.edu.my
dingdong.apu.edu.my
quix.apu.edu.my
www.apu.edu.my
*.apu.edu.my
eopendaytest.apu.edu.my
transix-admin.apu.edu.my
eopendaytest.apu.edu.my
admissions.apu.edu.my
eopendaytest.apu.edu.my
*.apiit.edu.my
*.ezproxy.apu.edu.my
*.apiit.edu.my
apu.edu.my
www.apu.edu.my
quix.apu.edu.my
eopendaytest.apu.edu.my
apu.edu.my
apu.edu.my
www.apu.edu.my
quix.apu.edu.my
apu.edu.my
www.apu.edu.my
eopendaytest.apu.edu.my
*.apu.edu.my
dingdong.apu.edu.my
www.studentaffairs.apu.edu.my
apu.edu.my
apu.edu.my
alumniconnect.apu.edu.my
transix-admin.apu.edu.my
eopendaytest.apu.edu.my
www.studentaffairs.apu.edu.my
www.studentaffairs.apu.edu.my
alumniconnect.apu.edu.my
*.studentaffairs.apu.edu.my
www.apu.edu.my
quix.apu.edu.my
studentaffairs.apu.edu.my
*.studentaffairs.apu.edu.my
*.apu.edu.my
eopendaytest.apu.edu.my
transix-admin.apu.edu.my
apu.edu.my
www.apu.edu.my
www.apu.edu.my
*.ezproxy.apu.edu.my
alumniconnect.apu.edu.my
*.studentaffairs.apu.edu.my
*.exproxy.apu.edu.my

Certificate

The complete raw certificate details for *.studentaffairs.apu.edu.my in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlspcbu/LJqj+VyUtn0gM
CC8V8jGxbhjxrX/3qfxW73sIqvxhFtb2g1KArz1rwLVJebI3l06778JOIhenCG9+
39ggOeUXOeNz5HgMbDEpwBzOEmkCRticXdRo9hBRerDOkWp6r/Ydh1TbM49sCAe/
VcYpKjF9cvRZVVPLRJBTDZm9E+P0uhE1IrO3bvNdJNYojvk0w6Rmf+WjhiC04ZoX
F1GqXRzMghUKj3U4BJGUeQrJQwMp4BTGlUucECN1WIPAngv3OapY3pR/3YB4Wnec
LX+Et9xLhlJpCXR3ga+7YIvKOikNBxVNmrL0Hi6UcL75TAbXB9zBNhA7mPTU2nvJ
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4595044929883010072216646892901030154
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-22 00:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.studentaffairs.apu.edu.my'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19035533706569318696427530642839438140958527133078596690206547510329115173825848605062969511762666908897134869570935298275742747387381741077240585247656264116930139055032117042649060656292420975888873249886644597604200456597815575871523316356261347124272216346033402307045749579544405236356302475946382663665456600543590267505970530704477322735876178726794294184120391118022453143716146586131328906649956445114897496210630776881576769827339214298923754517683104274544836803933319129304323429918344872000588322100878169952437538138426437181607525712255630121239153119522854075758753947271016274859954690317622963849583
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eaa733e38c126af8139013f445be88fb5d675dc1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.studentaffairs.apu.edu.my'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000174a8d831950000040300483046022100ceb690578ec68017596848f9c2c5d6f00b871d810616f24ac65c1efad49c57ef022100d4e3059be0c846370cc8edcb55ed56b8c5b4632ad869997d51e0fd1db4c54ff70076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000174a8d831e00000040300473045022041bda35684538c519aefabb2aa236cfb4911767c5728cdc669107339c709fd2b022100aed272c5e4e708048a1951316bb5572216a95df24f99c80745ce955bf5f475d8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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