*.ow-prod-app.wna.cloud

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 05:0a:a5:2d:49:6d:b1:8d:bf:e8:6a:ee:db:d6:37:42 was issued on by Amazon.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.ow-prod-app.wna.cloud

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:0a:a5:2d:49:6d:b1:8d:bf:e8:6a:ee:db:d6:37:42
Serial Number (int): 6701413133086860413302470417799591746
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 07:31:6b:41:33:ac:d6:08:7d:0e:d9:69:4b:d5:53:e3:ab:8c:10:ab
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 90:a3:20:e1:e5:99:51:63:5f:07:02:22:77:2d:07:a2:eb:cc:df:74
Fingerprint (sha256): b4:ca:d9:80:cc:9e:1b:c9:15:4f:e2:7a:cd:eb:01:3d:fa:5c:e4:98:1c:28:59:59:27:37:52:1d:79:03:bf:ac

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate *.ow-prod-app.wna.cloud

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ow-prod-app.wna.cloud

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ow-prod-app.wna.cloud
bi.owteam.com
*.aoacademy.com
wiki.owschools.com
*.ignitiaschools.com
rostering.odysseyware.com
*.sooschools.net
*.ignitiaschools.net
login.calverthomeschool.com
my.learnbest.com
lms.calvertacademy.com
*.sooschools.com
*.owschools.net
go.learnbest.com
*.owschools.com

Other certificates including the domain name wna.cloud

(limited to 100 certificates)
*.k8s.doolittle-dev2.us-west-2.aws.wna.cloud
*.cosmos-prod.edgenuityapp.com
media.wne-cdn.com
*.imlp-prod-app.wna.cloud
media.wne-cdn.com
*.doolittledev.wna.cloud
*.lmsadmin-prod.edgenuityapp.com
*.doolittle-dev2.us-west-2.aws.wna.cloud
*.dev.doolittle.us-west-2.aws.wna.cloud
*.lmsadmin-prod.edgenuityapp.com
*.assessment-prod.il-apps.com
*.doolittleprod.wna.cloud
*.doolittle-dev2.wna.cloud
*.ow-prod-app.wna.cloud
*.k8s.doolittle-production.us-west-2.aws.wna.cloud
*.rad-prod.edgenuityapp.com
*.ow-prod-app.wna.cloud
media-prod.wne-cdn.com
*.k8s.doolittle-dev2.us-west-2.aws.wna.cloud
*.k8s.doolittle-dev2.us-west-2.aws.wna.cloud
*.assessment-dev.il-apps.com
*.doolittle-dev2.wna.cloud
*.doolittle-nonprod.wna.cloud
*.rad-prod-app.wna.cloud
*.doolittle-dev5.wna.cloud
*.assessment-prod.il-apps.com
*.ow-prod-app.wna.cloud
*.wna.cloud
*.lmsadmin-qa.edgenuityapp.com
*.ow-qa.edgenuityapp.com
*.lmsadmin-dev.edgenuityapp.com
*.doolittle-prod-app.wna.cloud
*.rad-prod.edgenuityapp.com
media-nonprod.wne-cdn.com
*.armstrong-prod-app.wna.cloud
*.k8s.doolittle-nonprod.us-west-2.aws.wna.cloud
*.ow-prod.edgenuityapp.com
*.k8s.doolittle-dev3.us-west-2.aws.wna.cloud
*.imlp-prod.edgenuityapp.com
*.imlp-prod.edgenuityapp.com
*.imlp-prod-app.wna.cloud
*.doolittle-dev2.us-west-2.aws.wna.cloud
*.imlp-prod-app.wna.cloud
*.doolittle-dev4.wna.cloud
*.wna.cloud
*.ow-prod-app.wna.cloud
*.lmsadmin-qa-app.wna.cloud
*.wna.cloud
*.imlp-dev.edgenuityapp.com
*.cosmos-prod.edgenuityapp.com
media.wne-cdn.com
*.rad-prod-app.wna.cloud
*.doolittledev.wna.cloud
*.doolittle-nonprod.wna.cloud
*.lmsadmin-dev.edgenuityapp.com
*.doolittle-pnayak.wna.cloud
*.lmsadmin-prod-app.wna.cloud
*.imlp-prod-app.wna.cloud
*.k8s.ops.us-west-2.aws.wna.cloud
*.ops.wna.cloud
*.doolittle-dev6.wna.cloud
*.armstrong-prod-app.wna.cloud
*.rad-prod-app.wna.cloud
*.doolittle-dev3.wna.cloud
*.ow-prod.edgenuityapp.com
*.doolittle-production.wna.cloud
*.lmsadmin-prod.edgenuityapp.com
*.ow-prod.edgenuityapp.com
*.rad-prod-app.wna.cloud
*.doolittle-dev5.wna.cloud
*.lectura-staging.il-apps.com
*.k8s.doolittle-production.us-west-2.aws.wna.cloud
*.doolittle-dev-app.wna.cloud
*.doolittle-dev2.wna.cloud
*.ow-prod.edgenuityapp.com
*.doolittle-production.wna.cloud
*.doolittle-prod.il-apps.com
*.k8s.ops.us-west-2.aws.wna.cloud
*.k8s.doolittle-pnayak.us-west-2.aws.wna.cloud
*.assessment-prod.il-apps.com
*.doolittle-production.wna.cloud
*.ops.wna.cloud
*.doolittle-nonprod.wna.cloud
*.imlp-qa.edgenuityapp.com
*.lmsadmin-dev.edgenuityapp.com
*.intergalactic-prod.il-apps.com
*.doolittle-nonprod.wna.cloud
*.doolittledev.wna.cloud
*.ow-prod-app.wna.cloud
*.imlp-prod-app.wna.cloud
*.doolittle-production.wna.cloud
*.doolittle-dev6.wna.cloud
*.doolittle-nonprod.wna.cloud
*.doolittle-iam.wna.cloud
*.doolittle-production.wna.cloud
*.prod.ops.us-west-2.aws.wna.cloud
*.prod.doolittle.us-west-2.aws.wna.cloud
*.k8s.doolittle-dev6.us-west-2.aws.wna.cloud
*.doolittleprod.wna.cloud
*.doolittle-production.wna.cloud

Certificate

The complete raw certificate details for *.ow-prod-app.wna.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstzCyOXdj5t5bW382LDq
/35LJvQI+34usNVnkIhLL0srCyV/Qmj+TV9tlVIy+YhD7h+NU4AdpgUuiv0UqMXY
KdY0nepUQy+dUeLSYUZOLgh3skMWv1x9miezX8sYqm+d0U6/ffPcvJ5qgrHGTSBL
eezze9XKDREoiXmmq7zJQPaBZhnpZG76RKoF+SN1hn8pj3wJr4h0E255Zd9Z417Z
ElPt2yvEXzF9GN0osTpagIecNEJVxm+Ot4e/NS+3fl0JlP2FsIMXniTr5fU40HGL
6AlOxyxeam2rKu7iTI5DKlvGZg3tw8n+4jRcuMibs8bTNK/BNgAnV1wsinLQdaeQ
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6701413133086860413302470417799591746
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ow-prod-app.wna.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22579279530194160203881715682474653349522371891344266285884718560306325618393201876806166263247671721696042173059905203370449669306080018030434260573733555439251341973700087453783502679696025226801378714454345476556957391894751211847650977015912775120308709951593226081681128370940662894138666510892946448717182459051299640126093869980454990488407567208805119129862359135380309731991617340438055120178015711897419985844450926562697620216894155301372377419983044483322681736112240913200983610111897259937355872747789358492417784324336869000777495825784257797769853020624390981937977816734065932171432229120432333623397
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							07316b4133acd6087d0ed9694bd553e3ab8c10ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (311 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ow-prod-app.wna.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi.owteam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aoacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki.owschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ignitiaschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rostering.odysseyware.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sooschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ignitiaschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.calverthomeschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.learnbest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lms.calvertacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sooschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.owschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.learnbest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.owschools.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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