partners.dcollege.net

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:02:95:d7:05:ea:c2:80:60:53:5b:0e:91:3b:8c:35 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=partners.dcollege.net

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:02:95:d7:05:ea:c2:80:60:53:5b:0e:91:3b:8c:35
Serial Number (int): 15964159658053176993946954753745062965
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c5:cb:42:38:04:f4:48:3a:ab:a9:96:10:ea:35:e8:bc:46:e7:54:c2
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 60:56:32:77:a9:44:a2:2d:19:ea:21:b5:66:ce:d2:5c:2e:0b:7f:05
Fingerprint (sha256): a9:c6:94:27:a0:b3:08:5a:99:bf:a5:52:d7:63:f8:bd:48:f1:a7:06:13:1c:02:8d:f0:50:98:44:bb:2d:c6:30

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate partners.dcollege.net

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for partners.dcollege.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

partners.dcollege.net
learn9-stage.irttest.drexel.edu
*.blackboard.com
partners-learn.irttest.drexel.edu

Other certificates including the domain name dcollege.net

(limited to 100 certificates)
rmcplogin.dcollege.net
learn.dcollege.net
us-east-1-san3.blackboard.com
partners.dcollege.net
vle.dcollege.net
neumann.dcollege.net
partners.dcollege.net
us-east-1-san4.blackboard.com
rmcp.dcollege.net
vpn.dcollege.net
tpgadmin.irttest.dcollege.net
us-east-1-san3.blackboard.com
learn.dcollege.net
us-east-1-san4.blackboard.com
partners.dcollege.net
rmcpapp.dcollege.net
us-east-1-san3.blackboard.com
rmcpapi.dcollege.net
pmt.dcollege.net
partners.dcollege.net
rmcpapp.irttest.dcollege.net
us-east-1-san4.blackboard.com
cabrini.dcollege.net
rmcp.irttest.dcollege.net
mkt.dcollege.net
us-east-1-san4.blackboard.com
neumann.dcollege.net
medaille.dcollege.net
reports.dcollege.net
us-east-1-san4.blackboard.com
us-east-1-san4.blackboard.com
learn.dcollege.net
learn.dcollege.net
us-east-1-san3.blackboard.com
learning.dcollege.net
rmcpapi.irttest.dcollege.net
pmt.irttest.dcollege.net
reporting.dcollege.net
us-east-1-san3.blackboard.com
rmcp.dcollege.net
us-east-1-san3.blackboard.com
us-east-1-san4.blackboard.com
us-east-1-san3.blackboard.com
rmcp.dcollege.net
us-east-1-san3.blackboard.com
us-east-1-san3.blackboard.com
vpn.dcollege.net
broadcast.dcollege.net
us-east-1-san4.blackboard.com
reports-dev.irttest.dcollege.net
partners.dcollege.net
neumann.dcollege.net
mkt-dev.irttest.dcollege.net
tpgadmin.dcollege.net
us-east-1-san4.blackboard.com
neumann.dcollege.net
us-east-1-san4.blackboard.com
rmcpapi.irttest.dcollege.net
mkt.dcollege.net
pmt.irttest.dcollege.net
its.learning.dcollege.net
learn.dcollege.net
reports.irttest.dcollege.net
mkt.irttest.dcollege.net
partners.dcollege.net
us-east-1-san4.blackboard.com
learn-1513041-1.dcollege.net
us-east-1-san3.blackboard.com
rmcpadmin.dcollege.net
cabrini.dcollege.net
us-east-1-san4.blackboard.com
medaille.dcollege.net
cabrini.dcollege.net
pmt.dcollege.net
us-east-1-san3.blackboard.com
us-east-1-san3.blackboard.com
pmt-dev.irttest.dcollege.net
tpgadmin.irttest.dcollege.net
us-east-1-san4.blackboard.com
pmt.dcollege.net
pmt.irttest.dcollege.net
tpgadmin.irttest.dcollege.net
us-east-1-san3.blackboard.com
rmcplogin.dcollege.net
us-east-1-san3.blackboard.com
us-east-1-san3.blackboard.com
rmcpapi.irttest.dcollege.net
pmt.irttest.dcollege.net
mkt.irttest.dcollege.net
us-east-1-san4.blackboard.com
us-east-1-san3.blackboard.com
partners.dcollege.net
pmt.irttest.dcollege.net
us-east-1-san3.blackboard.com
us-east-1-san4.blackboard.com
us-east-1-san3.blackboard.com
partners.dcollege.net
rmcpapp.dcollege.net
us-east-1-san3.blackboard.com
reporting.dcollege.net

Certificate

The complete raw certificate details for partners.dcollege.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLBNUdYP3vqIsepsxUPz
69KlzpoeAI56aRBTuMtiQWtWxagcj4eItonLOILHJs89pXH5Y6npRwbaMSRVNbpm
Z6/r4KpJWamQfNzTqYmmjBBBvSng3qo6/QtOUsCsuxuGDt3Jc7XidKNQt39AAcAD
j7pjqVmTzpiTwsyvQKzzdclJDDZ/cK444X8grjuisPl5suI58aJsG/59KEzePGzc
VOumSQtCtID08ZWTGfAu1wCOr8YwrcdIeL4okSLXul1+dX7vNgcdp6NehqOSetFA
esnk8+hbMB+PJOiRVnvq2PxIWUaLfT6vpjeU7KTKtRcEsehFrssfOoGTTYw47lmy
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15964159658053176993946954753745062965
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'partners.dcollege.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20285066565763187071533641997838883205859968693872532796371122138143177621760320074982887373725878534907529775150352287372164975909125062538750577528498583268852230212458697754114010426199584269702912961382122068481662026703449156708228999090073286211392396411524889940147443948674580342308808140611771790912379603907310212763419172770178748995930773457401213981660625775200369585747869152563147386934486447099962925509650101930565848749378776548382162638047320761456148330930551812073731627811052820732740507430081610358577649970556199525668241355043813851584859654108626404571944356177412729347479938033823388381913
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c5cb423804f4483aaba99610ea35e8bc46e754c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.dcollege.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn9-stage.irttest.drexel.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners-learn.irttest.drexel.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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