bucknellconnect.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0c:a6:bd:db:9b:39:cb:7e:19:78:3e:ba:1b:8e:72:d6 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bucknellconnect.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:a6:bd:db:9b:39:cb:7e:19:78:3e:ba:1b:8e:72:d6
Serial Number (int): 16816508002358498911329387288514687702
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e3:df:16:6a:ff:9f:81:0a:7e:14:44:22:71:ae:86:17:15:cc:27:f1
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 90:ce:77:0f:40:cb:ee:a6:73:42:02:87:0c:ef:0b:6a:c4:58:87:50
Fingerprint (sha256): ad:61:d5:f4:7d:3d:8d:88:db:1e:d2:05:bd:62:e2:ab:05:0d:e4:8d:91:eb:4f:48:0f:cf:c6:f6:e8:8c:a9:6d

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate bucknellconnect.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bucknellconnect.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bucknellconnect.com
www.bucknellconnect.com

Other certificates including the domain name bucknellconnect.com

(limited to 100 certificates)
baalumninetwork.com
bobcatconnect.org
beachwoodconnect.com
beachwoodconnect.com
baalumninetwork.com
bestbuddiesconnect.org
boscoalumni.org
beachwoodconnect.com
bergencatholicconnect.com
beachwoodconnect.com
bobcatconnect.org
bobcatconnect.org
bucknellcareerconnect.com
bobcatconnect.org
bergencatholicconnect.com
bucknellconnect.com
bobcatconnect.org
badgersinfinance.net
baalumninetwork.com
bobcatconnect.org
backlot.afi.com
bobcatconnect.org
boyslatinconnect.com
bobcatconnect.org
bucknellcareerconnect.com
bucknellconnect.com
bucknellconnect.com
baalumninetwork.com
boscoalumni.org
bucknellcareerconnect.com
bucknellconnect.com
bucknellconnect.com
beachwoodconnect.com

Certificate

The complete raw certificate details for bucknellconnect.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF7TCCBNWgAwIBAgIQDKa925s5y34ZeD66G45y1jANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTI0MDQyMDAwMDAwMFoXDTI1MDUxOTIzNTk1OVowHjEc
MBoGA1UEAxMTYnVja25lbGxjb25uZWN0LmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAM3rNMNhZ3KmoXDuWXLCzdO53/V5cigPHFtMgUMs4xpVrC0r
z/K0uhjaZHzW2Wy1l4XVEwn15YunE/kqSV7eC3uoz5sHZ5kK74rTLYbzjqfD4DPj
lOCBZryOvF5b/J1NGNnXhC8oTI6AdwJx/Kb5TUe+uCSfSYkhmpDrALBsZS65iAVU
dAKjFjEJyYu+LXftlJ28/eMWmR4YGYtZGMjP/an45wMo29HcweTK0KADV3EhglzF
gZK2QymVn7On/hw3+oFbB9vBTv5mtovpnZUij9PjFd2QP33PiGzi7THtHQGr+FJ3
jkwNJbQ0dFAe6/0VLDy6AhU4TikcGj+qFzTOUMsCAwEAAaOCAwcwggMDMB8GA1Ud
IwQYMBaAFMAxUs1aUMOCfHRxzsvpnPl664LiMB0GA1UdDgQWBBTj3xZq/5+BCn4U
RCJxroYXFcwn8TA3BgNVHREEMDAughNidWNrbmVsbGNvbm5lY3QuY29tghd3d3cu
YnVja25lbGxjb25uZWN0LmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATAOBgNVHQ8B
Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0
MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAy
LmNybDB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIy
bTAyLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0w
Mi5hbWF6b250cnVzdC5jb20vcjJtMDIuY2VyMAwGA1UdEwEB/wQCMAAwggGABgor
BgEEAdZ5AgQCBIIBcASCAWwBagB3AE51oydcmhDDOFts1N8/Uusd8OCOG41pwLH6
ZLFimjnfAAABjvn4eO0AAAQDAEgwRgIhAMA60E1GdbQnLyB8gb3iT39OzJIHI6om
kH+1z2uaKQCDAiEAumvIYj48PmHpLz4VYL/5TObYc4rMWaVYJyS+yq8QAiIAdwBV
gdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAY75+HmYAAAEAwBIMEYC
IQCmiDHWgct8ZspdXEeVUajjUrEpSBwrSW02UDbJRZodQQIhALfVBHYoIvqNzv9e
pwkHkFvc8HLqMPopYa77vqeRcSorAHYA5tIxY0B3jMEQQQbXcbnOwdJA9paEhvu6
hzId/R43jlAAAAGO+fh5JgAABAMARzBFAiAX11tOWfWH7attLlD0LI5wI2H976M/
lQ0YiMdRgV8S6wIhAO+wpocXpnhZ3jZFwL9Pd7LTgKJg3SqihtYf2YlDcGSUMA0G
CSqGSIb3DQEBCwUAA4IBAQCF7Qo9/uWd299FaZhwhQOK9Ue0Kq+cx4iRFjcqdjhc
15xzofv/H1LSKD1tbhFPoEH+whUzbZVtyd+NP4VBR7NnFMr+M/CSJEcNal1Mkhk/
Z4IgaAP/J7AC+xMW9TmbKBQtfvW4D+Rgj0jtwnuF0w5LrtFZbIuzizogEbuSwHuu
O7N+6jHmFzTd5qBxMetIPqZE2UtmqaR+TUmtGWeERhDm20H0IVBGFwJ10dmW5ikx
dOMGAEUUD1t97puG/oxgKLfu8URCUhT7BBQyeQOekcReRyXaZ+I2eP3JFtx5xnuT
lvX+/JLZFIa/xYCljEpb93V56GZ4odVzeNIsWJp0rMHM
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzes0w2FncqahcO5ZcsLN
07nf9XlyKA8cW0yBQyzjGlWsLSvP8rS6GNpkfNbZbLWXhdUTCfXli6cT+SpJXt4L
e6jPmwdnmQrvitMthvOOp8PgM+OU4IFmvI68Xlv8nU0Y2deELyhMjoB3AnH8pvlN
R764JJ9JiSGakOsAsGxlLrmIBVR0AqMWMQnJi74td+2Unbz94xaZHhgZi1kYyM/9
qfjnAyjb0dzB5MrQoANXcSGCXMWBkrZDKZWfs6f+HDf6gVsH28FO/ma2i+mdlSKP
0+MV3ZA/fc+IbOLtMe0dAav4UneOTA0ltDR0UB7r/RUsPLoCFThOKRwaP6oXNM5Q
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16816508002358498911329387288514687702
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-19 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bucknellconnect.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25994836971843351187349581121667687088759776777421209001757784032821700480517732080407234247959875428935425953611454442181280846994428725769759976893148037430737743991332460905852163686216534639324451436369643506772546889089240960558267673551120037109188251321577994445132511062055398356772299502955433179013500623743338641934679485922213601437156426673403754706868300069904161241642126797946404493875709342610494616274444706021363688795607742821972640029310523304807022135948935266876411672118163385461476310188764315161940433280263581078779221230148127551359801353300707735055115196397564989832353936910859637772491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e3df166aff9f810a7e14442271ae861715cc27f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bucknellconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bucknellconnect.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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