vanity.usd-test.us003-rapididentity.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0c:0f:d1:14:77:2e:25:cc:69:16:0b:37:7f:d9:da:af was issued on by Amazon.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=vanity.usd-test.us003-rapididentity.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:0f:d1:14:77:2e:25:cc:69:16:0b:37:7f:d9:da:af
Serial Number (int): 16032861047351931628389244505073244847
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 50:8e:65:20:10:eb:4e:e1:06:ae:35:58:99:25:74:0c:a6:f2:6a:4b
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): bf:4f:2a:83:47:95:28:e3:33:3c:9c:22:8b:ac:51:1e:68:f8:8a:80
Fingerprint (sha256): 65:bd:01:92:34:af:32:34:bd:9f:f0:c0:47:52:f6:a4:59:ee:8b:c2:f1:57:b1:a1:4e:f3:4f:5b:10:9b:0f:71

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate vanity.usd-test.us003-rapididentity.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vanity.usd-test.us003-rapididentity.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vanity.usd-test.us003-rapididentity.com
usd-test.us003-rapididentity.com
usd.edu
*.usd.edu
ia1111ddbf2a3544fca624bcb6201bb298.us003-rapididentity.com

Other certificates including the domain name us003-rapididentity.com

(limited to 100 certificates)
vanity.fountainvalley.us003-rapididentity.com
portal.shenandoah.k12.va.us
sso.floydboe.net
vanity.shenandoahk12.us003-rapididentity.com
vanity.merrick.us003-rapididentity.com
vanity.pharosbx.us003-rapididentity.com
rapidid.jefferson.kyschools.us
vanity.cherokee.us003-rapididentity.com
vanity.escondido.us003-rapididentity.com
vanity.usd-test.us003-rapididentity.com
vanity.disd.us003-rapididentity.com
vanity.usd.us003-rapididentity.com
vanity.cherokee.us003-rapididentity.com
vanity.greeleyschools.us003-rapididentity.com
password.pacollege.edu
vanity.jefferson-uat.us003-rapididentity.com
vanity.jefferson.us003-rapididentity.com
password.pacollege.edu
vanity.willmar.us003-rapididentity.com
vanity.lasalle.us003-rapididentity.com
accounts-tst.mica.edu
portal.bccs286.org
portal.shenandoah.k12.va.us
rapidid.jefferson.kyschools.us
vanity.dallascollege.us003-rapididentity.com
portal.dallasisd.org
vanity.challenge.us003-rapididentity.com
vanity.hamilton.us003-rapididentity.com
vanity.disd.us003-rapididentity.com

Certificate

The complete raw certificate details for vanity.usd-test.us003-rapididentity.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1dQoeUCZABOl433vqVn
LfNU7yROa5PnjHo22nXrw44T4IRJxNHbyRQnnUGijuMaW63JB9HUnw+fjyGty9E5
O1OzZCKZ21YdUMYlA6WlmaHv5P7UvCgs3GBpoTHqgtxTSHAivjBKeX64Cf9w/H7p
c00qLuEKDOT7aHI+wrmQpHqTMoQgAjC05CIcJaW3cehbAofxIW+goq26hiBDm7U/
i2uNeLysI5QYESlYXSbm4zF8P02c4t299XiRRJEm3vOo9gtf7EX1q6+ldli5HT4H
ftD5JXlAKCLGQiwk0ufrgxwHPLrWRQ07sDjXScVcJqLAvb2uwGuALtdR0wOwQ3oG
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16032861047351931628389244505073244847
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vanity.usd-test.us003-rapididentity.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24659526084985864213986109861400065376628719795665817992411583476790101358677696949647749436291445609515870570553284057980507912951333508784900240783693076921333399428329628852056336501406919114495644513079962383539478348581967640165118160204799762557816224536760323724969956059330813952782235813310220559775112429744114423082852151044615932275553098856861625281838000026806366211501850744064967123963287527221629697486313656407352849949020378956027070225876521984516923655016976885177352749999202171997706846911816622538615801719440011230035692667006246312557229061805751665496643343491528408401715400086735663269463
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							508e652010eb4ee106ae35589925740ca6f26a4b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (158 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanity.usd-test.us003-rapididentity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usd-test.us003-rapididentity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ia1111ddbf2a3544fca624bcb6201bb298.us003-rapididentity.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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