*.cru.org

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0f:a1:7d:fb:b4:93:42:20:8d:61:6a:56:23:97:ea:22 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.cru.org

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:a1:7d:fb:b4:93:42:20:8d:61:6a:56:23:97:ea:22
Serial Number (int): 20776934974352419020898928563869706786
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: de:f4:54:54:6c:d5:85:b2:fa:67:89:d9:77:84:f3:ef:61:77:21:d2
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 89:85:2b:e4:b7:04:44:91:45:d4:7d:7f:5f:90:29:53:11:ff:0e:53
Fingerprint (sha256): 90:69:8c:c5:98:cd:ac:e3:02:79:b8:36:08:0c:a4:1c:77:d3:20:72:56:8a:29:fe:08:82:64:39:84:0a:ec:eb

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.cru.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.cru.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cru.org
cru.org

Other certificates including the domain name cru.org

(limited to 100 certificates)
*.cru.org
smetrics.cru.org
ml.cru.org
*.cru.org
sites-stage.cru.org
sites.cru.org
sites-stage.cru.org
san-33-s12.tlsprovisioning.exacttarget.com
status.cru.org
*.lh.cru.org
sites-stage.cru.org
techhelp.cru.org
*.cru.org
*.cru.org
e.cru.org
sites-stage.cru.org
e.cru.org
sites.cru.org
techhelp.cru.org
ml.cru.org
ml.cru.org
*.cru.org
*.campuscontacts.cru.org
*.cru.org
ns1.lh.cru.org
smapp.cru.org
sites.cru.org
*.cru.org
*.cru.org
vip-wordpress.cru.org
san-33-s12.tlsprovisioning.exacttarget.com
*.cru.org
*.cru.org
*.cru.org
smapp.cru.org
*.cru.org
sites.cru.org
hybridcall-e.cru.org
give-static-stage.cru.org
*.cru.org
*.cru.org
ns1.lh.cru.org
campuskgp.cru.org
*.lh.cru.org
sites-stage.cru.org
smetrics.cru.org
*.cru.org
jfprintshop.cru.org
*.cru.org
globalstaffweb.org
campuskgp.cru.org
sites.cru.org
*.cru.org
*.cru.org
www.give.cru.org
e.cru.org
*.cru.org
sites.cru.org
atlanta.cru.org
sites-stage.cru.org
*.cru.org
*.cru.org
*.cru.org
sites.cru.org
smetrics.cru.org
sites.cru.org
sites.cru.org
hybridcall-e.cru.org
san-33-s12.tlsprovisioning.exacttarget.com
san-33-s12.tlsprovisioning.exacttarget.com
*.aws.cru.org
*.cru.org
author.cru.org
vip-wordpress.cru.org
*.cru.org
mhub.cc
seattle.cru.org
ml.cru.org
smetrics.cru.org
give-static-stage.cru.org
san-33-s12.tlsprovisioning.exacttarget.com
*.cru.org
*.cru.org
vip-wordpress.cru.org
help.cru.org
sites.cru.org
*.cru.org
help.cru.org
vip-wordpress.cru.org
ibs.cru.org
*.cru.org
vip-wordpress.cru.org
*.cru.org
*.cru.org
*.cru.org
*.cru.org
ml.cru.org
*.lh.cru.org
sites-stage.cru.org
smapp.cru.org

Certificate

The complete raw certificate details for *.cru.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIQD6F9+7STQiCNYWpWI5fqIjANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIzMDIxMDAwMDAwMFoXDTIzMTIwNDIzNTk1OVowFDES
MBAGA1UEAwwJKi5jcnUub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt6nnAJv7aNk1tBas+RWdmZXjcrt/ZfzMpDlUqo9w2CkYSM/KXfQaUIBrqpPw
SYdhC08At9sSHhqegNFAdHvfly+mN4W2v7LsqSRGMFZUJhqzKg7bNFHhuZIlzkpQ
si4F6Qpd3ABso/gdc+JuLAR4dH5wjBGWiYJ47ALvghRpsoYSBNMmuefaO6Au5ye5
eRfi5sIvw9J7h1eqg0fVEZySIE93xRvkMeXFXBN7IdclX7A+tkb9kHojanub2Ns3
1qtFv8MQkYCYQpHixz11EYWG8mzInRN1UbncmcRWx8/9eEDgTLJ2MUbFiI5ht4nn
1sVPsOAfgorE2QapaIOzws9D4wIDAQABo4IC7DCCAugwHwYDVR0jBBgwFoAUwDFS
zVpQw4J8dHHOy+mc+XrrguIwHQYDVR0OBBYEFN70VFRs1YWy+meJ2XeE8+9hdyHS
MB0GA1UdEQQWMBSCCSouY3J1Lm9yZ4IHY3J1Lm9yZzAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyG
Kmh0dHA6Ly9jcmwucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNybDATBgNV
HSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0
dHA6Ly9vY3NwLnIybTAyLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0
cDovL2NydC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIuY2VyMAwGA1UdEwEB
/wQCMAAwggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB2AOg+0No+9QY1MudXKLyJ
a8kD08vREWvs62nhd31tBr1uAAABhjifwaMAAAQDAEcwRQIgKqq5ZRF4Bpt49laW
S3Q1QdveEbqBryJWqeQhwSjZGHECIQCpiZM0rEix2yefWJik03A+H/iBgLw2qRM4
ACoUyuwU+wB3ALNzdwfhhFD4Y4bWBancEQlKeS2xZwwLh9zwAw55NqWaAAABhjif
wdwAAAQDAEgwRgIhAOrCokZEG8MwGC0756qiS9r4vnTXmsvFb714gteJ77E8AiEA
v4jbX6U3XE04rnHsd/0Gg1Q/ar0xDse7FR0ZBpeEwiQAdgC3Pvsk35xNunXyOcW6
WPRsXfxCz3qfNcSeHQmBJe20mQAAAYY4n8GoAAAEAwBHMEUCIQCUm/6WQ7GXlWWg
s9suN7aKqPx3eGXyIs8vjbpgdnqetQIgbp96IMFKyVdmm73P7o4OU4SB9Nbl1Dp3
wfkrl+bun5IwDQYJKoZIhvcNAQELBQADggEBAHXV5UjqMb+YReF5swPUa9vWjpe4
DngpLA6pM5VhHH6ELTVOlkj292dtEsz/ryjRDrb8rvmWr8rX9+g32sk5boVakC8a
GORCUNThcccFKSN1I/ImM+t21kKf/A8Zj4ZYAwMaUw3/RWhQmvA/tqYAJijnzjxc
RqZp8yiLSBuMWonK22SwyKpTeGO9W8RPVeD9d7AlGJvVCKAaY73CDtfmZ6V3FLUt
/N+z8DqPk2KTSsf1WYvfTYJBsD4jkAWTXLaMCDyyHTE+P8ns/weaVH+UpN3UREnF
KCpaTp474PiYBfe3GxXHvgABLVBgLvwj+bsfXXlkRQsGzDKsSnGJ68j3rh0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6nnAJv7aNk1tBas+RWd
mZXjcrt/ZfzMpDlUqo9w2CkYSM/KXfQaUIBrqpPwSYdhC08At9sSHhqegNFAdHvf
ly+mN4W2v7LsqSRGMFZUJhqzKg7bNFHhuZIlzkpQsi4F6Qpd3ABso/gdc+JuLAR4
dH5wjBGWiYJ47ALvghRpsoYSBNMmuefaO6Au5ye5eRfi5sIvw9J7h1eqg0fVEZyS
IE93xRvkMeXFXBN7IdclX7A+tkb9kHojanub2Ns31qtFv8MQkYCYQpHixz11EYWG
8mzInRN1UbncmcRWx8/9eEDgTLJ2MUbFiI5ht4nn1sVPsOAfgorE2QapaIOzws9D
4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20776934974352419020898928563869706786
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cru.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23185391781673221765742801084496705469716130678626388811849036985365031886429035411871499002681225389671864884617555589898219937819294169774601860691144357388621087495035925957163176220713348533571452032905162610884405464025616217223333132006069644872844414494018102293630671848148623123214089883217958168754152008823655997673318387053644336540904392685430032284265747138050495097754431813881925736916083365829624898915176837463979760552090940791297959821364428300707615626698675596521529244218238347218980751948681411582726455505133158233117211789310565905930032463316589693539764276273125892650495498588233487303651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							def454546cd585b2fa6789d97784f3ef617721d2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cru.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cru.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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