rms.tianjinjuilliard.edu.cn

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 03:fd:35:aa:53:22:09:30:99:f8:bb:f2:ae:d3:8c:e8 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=rms.tianjinjuilliard.edu.cn

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:fd:35:aa:53:22:09:30:99:f8:bb:f2:ae:d3:8c:e8
Serial Number (int): 5302423554789082663074920652902468840
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: ed:bf:d2:ae:53:c7:92:c4:cd:ab:e8:44:f4:b0:df:ac:2f:6b:b1:38
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): de:23:2a:a2:43:3e:6a:6d:87:a2:9e:66:db:ce:61:e3:66:79:e8:30
Fingerprint (sha256): 3f:cc:5c:e2:f4:14:4e:83:07:72:86:7e:81:f4:ca:6b:c1:53:4c:e8:01:91:74:22:f1:2a:e1:d4:dc:56:ad:21

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate rms.tianjinjuilliard.edu.cn

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rms.tianjinjuilliard.edu.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rms.tianjinjuilliard.edu.cn
*.rms.tianjinjuilliard.edu.cn

Other certificates including the domain name tianjinjuilliard.edu.cn

(limited to 100 certificates)
tjs-dev.juilliard.edu
tjs-dev.juilliard.edu
apply.tianjinjuilliard.edu.cn
servicedesk.gerkencompanies.com
tianjin.juilliard.edu
c3helpdesk.c3insurance.com
apply.tianjinjuilliard.edu.cn
imagination.tianjinjuilliard.edu.cn
5701330244993024-fe3.pantheonsite.io
sdp.tianjinjuilliard.edu.cn
apply.tianjinjuilliard.edu.cn
5712829080403968-fe2.pantheonsite.io
5712829080403968-fe2.pantheonsite.io
tjs-dev.juilliard.edu
apply.tianjinjuilliard.edu.cn
5701330244993024-fe3.pantheonsite.io
helpdesk.rdek.bc.ca
tjs-stage.juilliard.edu
imagination.tianjinjuilliard.edu.cn
5712829080403968-fe2.pantheonsite.io
*.tianjinjuilliard.edu.cn
5701330244993024-fe3.pantheonsite.io
tjs-stage.juilliard.edu
5712829080403968-fe2.pantheonsite.io
5712829080403968-fe2.pantheonsite.io
tjs-stage.juilliard.edu
tjs-dev.juilliard.edu
informatique.aubainerie.com
dmsbit.northeastern.edu
tianjin.juilliard.edu
c3helpdesk.c3insurance.com
tjs-dev.juilliard.edu
5712829080403968-fe2.pantheonsite.io
5712829080403968-fe2.pantheonsite.io
imagination.tianjinjuilliard.edu.cn
5712829080403968-fe2.pantheonsite.io
helpdesk.valledelsol.com
5712829080403968-fe2.pantheonsite.io
tianjin.juilliard.edu
5712829080403968-fe2.pantheonsite.io
5701330244993024-fe3.pantheonsite.io
apply.tianjinjuilliard.edu.cn
5712829080403968-fe2.pantheonsite.io
*.tianjinjuilliard.edu.cn
5712829080403968-fe2.pantheonsite.io
sdp.tianjinjuilliard.edu.cn
5712829080403968-fe2.pantheonsite.io
tjs-stage.juilliard.edu
tianjin.juilliard.edu
tianjin.juilliard.edu
5712829080403968-fe2.pantheonsite.io
5701330244993024-fe3.pantheonsite.io
5701330244993024-fe3.pantheonsite.io
5712829080403968-fe2.pantheonsite.io
5701330244993024-fe3.pantheonsite.io
apply.tianjinjuilliard.edu.cn
tjs-stage.juilliard.edu
tjs-dev.juilliard.edu
5712829080403968-fe2.pantheonsite.io
5712829080403968-fe2.pantheonsite.io
5712829080403968-fe2.pantheonsite.io
5701330244993024-fe3.pantheonsite.io
imagination.tianjinjuilliard.edu.cn
5712829080403968-fe2.pantheonsite.io
5712829080403968-fe2.pantheonsite.io
apply.tianjinjuilliard.edu.cn
tjs-stage.juilliard.edu
tianjin.juilliard.edu
imagination.tianjinjuilliard.edu.cn
tianjin.juilliard.edu
tjs-stage.juilliard.edu
imagination.tianjinjuilliard.edu.cn
5712829080403968-fe2.pantheonsite.io
tjs-stage.juilliard.edu
tianjin.juilliard.edu
tjs-dev.juilliard.edu
devopshelpdesk.hcss.com
5712829080403968-fe2.pantheonsite.io
5701330244993024-fe3.pantheonsite.io
tjs-stage.juilliard.edu
imagination.tianjinjuilliard.edu.cn
tjs-stage.juilliard.edu
5701330244993024-fe3.pantheonsite.io
sdp.tianjinjuilliard.edu.cn
helpdesk.valledelsol.com
tianjin.juilliard.edu
rms.tianjinjuilliard.edu.cn
5712829080403968-fe2.pantheonsite.io
tjs-stage.juilliard.edu
desk.burgiss.com
tianjin.juilliard.edu
5712829080403968-fe2.pantheonsite.io
5701330244993024-fe3.pantheonsite.io
imagination.tianjinjuilliard.edu.cn
5701330244993024-fe3.pantheonsite.io
5712829080403968-fe2.pantheonsite.io
5701330244993024-fe3.pantheonsite.io
rms.tianjinjuilliard.edu.cn
tjs-stage.juilliard.edu
5712829080403968-fe2.pantheonsite.io

Certificate

The complete raw certificate details for rms.tianjinjuilliard.edu.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwn7jJIux0xGc4SDuDCuH
po1Qq9IntBmi31L4jsYV2mMaxCBXCYskE3F2Fxr/OYxQY/cbLclIDaMxsViO0KsV
vo/5+bTtoZIozgNdH+L4SQh7gacdDO1AOOwCTRBVijvbffaNblI8BaWa8AhAi6QW
FFa/Xb2rcPTNchJRvUt7jnNqTRNz+Vjl9iODIXeDUhfMrTXpvsKOaUfNr1Dn8ei3
rhquYNo9m4nJJURtOEXoG5Ezov20x6PCPy7aCVwghVDFhLVVKjUPoXO3BghLFAk4
nG3pqeG1dlvYSK76NMTSFoQIXZFbJ9Uypxi+xcRTjuvilxatFSGWZkqRvSx75llM
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5302423554789082663074920652902468840
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rms.tianjinjuilliard.edu.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24552801611437223435394229987311847837479139728620163750259338638201708580000438704002193504706231263095307789933766314383126965694322886953674341539144262075328159343672613259091945518745950426910053975401722785976260623080571653306924905693243462057575621943846831412043754469888553718066585307302817937701334697645068093879811491338387962368954585943432798508814056320852507813002881393003940135057473569090168260673819682042640937567365042192554602819730401463669886360006041027837332829918257525307298335663609514847096704560313850323433507841319906759446383199155363555129214467335981004984092909678302684859473
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							edbfd2ae53c792c4cdabe844f4b0dfac2f6bb138
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rms.tianjinjuilliard.edu.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rms.tianjinjuilliard.edu.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0066ba3230d9e854e9cfb1722e2c28249f778020ebf1079a63e7de886caadfa7fa9a89261bb8e675c3671ba4373a27ddae55d523224171724b12fed7d71fe1870468b37125f6287e143467361926f71818aa13659e96f4ca09ee2e1f255c02dcbd4e9bbb55d8b3ff1219d6d5f88a32632440c2794db950fee61d14ad766034bd685047adbc935f2eb1e7f7437f090657bd7681af4b7d50fab423443c70ba2b2344f793958dea5515256c9cebf83fcdbd1776cd46febd8d891a9946726329f56d9fa1bfa327ce55c859b0130589bf8832e32c975a223c7a2cd721e9b17b31b28f62c6a18185a4e276397526bc05307ec42f0cd1b7d91d8001f9466d4ee9e774b46e