*.assessment-prod.il-apps.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0c:d8:33:7a:5c:0f:3b:37:66:e6:65:a2:45:aa:28:4a was issued on by Amazon.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.assessment-prod.il-apps.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:d8:33:7a:5c:0f:3b:37:66:e6:65:a2:45:aa:28:4a
Serial Number (int): 17073316168079160650515184360186587210
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 22:91:87:23:59:d0:eb:01:b4:9f:b4:dc:5b:ef:c0:ba:06:b7:3b:62
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): bd:48:da:e7:75:a9:57:20:95:05:47:fc:b9:18:dc:ec:40:62:97:66
Fingerprint (sha256): a1:0e:ea:5c:ec:70:f8:f0:4d:ea:a7:00:58:13:9b:c8:50:9c:59:73:37:45:ec:ec:dc:b4:2a:1e:7a:19:bc:0d

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.assessment-prod.il-apps.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.assessment-prod.il-apps.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.assessment-prod.il-apps.com
scheduler.assessment.edgenuityapp.com
service-ui.assessment.edgenuityapp.com
scheduler.assessment.edgenuity.com
*.assessment-prod-app.wna.cloud
service-ui.assessment.edgenuity.com

Other certificates including the domain name il-apps.com

(limited to 100 certificates)
*.rosterverse-qa.il-apps.com
*.rosterverse-staging.il-apps.com
*.at-prod.il-apps.com
*.assessment-prod.il-apps.com
*.assessment-dev.il-apps.com
*.itemengine-prod.il-apps.com
*.assessment-prod.il-apps.com
*.rosterverse-prod.il-apps.com
*.twig-content-dev.il-apps.com
*.rosterverse-prod.il-apps.com
*.rosterverse-staging.il-apps.com
*.rosterverse-prod.il-apps.com
*.readiness-admin-ui-dev.il-apps.com
*.rosterverse-qa.il-apps.com
*.sso-prod.il-apps.com
*.ops.wna.cloud
*.doolittle-production.wna.cloud
*.rosterverse-prod.il-apps.com
*.lectura-staging.il-apps.com
*.doolittle-production.wna.cloud
*.doolittle-prod.il-apps.com
*.cat-prod.il-apps.com
*.sso-dev.il-apps.com
*.assessment-prod.il-apps.com
*.sso-prod.il-apps.com
*.intergalactic-prod.il-apps.com
*.sso-prod.il-apps.com
*.twig-content-dev.il-apps.com
*.data-science-qa.il-apps.com
*.lectura-prod.il-apps.com
*.doolittle-production.wna.cloud
*.sandbox-prod.il-apps.com
*.literacy-prod.il-apps.com
*.doolittle-nonprod.wna.cloud
*.readiness-admin-ui-dev.il-apps.com
*.lectura-prod.il-apps.com
*.data-science-qa.il-apps.com

Certificate

The complete raw certificate details for *.assessment-prod.il-apps.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNk/QfMvM6AVG6ElKmuH
BmKt6uiK2aap+jAnGvUz6x/Z5Qpuu9x7WI+fzRpdWTVEYVEQ0UhnvGePY3wSg2qG
nxSjX7BFySQfER4CIVv6kPvOo0I1Rro8bU0++UoIeWP1WSjruDzHiUuN3HocVdfY
J2ImVBjqc3D7hNy8J/F3XIR8ktN89dzZNDUsC+E7nif/+ZdqlIVZB3vSnPahXtc8
HEH27zmVHfmY84QlZkTFu5aXJgo+P+wMBN/Y3dYXoYZgUkQcnl4WqnFw9CngFW2L
9gICR/ryLGIPRr5enoiMzEEE/EARD6Ndc9orcxfQ86aI7HWXv3K5Nidyhfa5cl6N
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17073316168079160650515184360186587210
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.assessment-prod.il-apps.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24344883091261184329060841637293932303913503544489173316984962281829151809965159236227936327391577648847839289553206304191090485223302585094480455261221772763363895458523306400351737847386150640774891724256146763824368656160721704043511728471068415113917764415454148081007538595769776590980585165283486770487451472544301295012675839049749223884200450473675622531173509606033964412763153938264758169534683411596277447960614913353456217983105084872534781379146070591386264040930528495458157713578628990364523547037559059458302307228367243825909511081961688426956652373593640451187763547346772404619523219942367404395979
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2291872359d0eb01b49fb4dc5befc0ba06b73b62
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (219 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assessment-prod.il-apps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scheduler.assessment.edgenuityapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service-ui.assessment.edgenuityapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scheduler.assessment.edgenuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assessment-prod-app.wna.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service-ui.assessment.edgenuity.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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