learn.co

Issued by Amazon

About this certificate

This digital certificate with serial number 01:24:c0:1c:f0:76:cb:2c:9d:2b:1d:e8:ab:a6:2c:70 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=learn.co

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:24:c0:1c:f0:76:cb:2c:9d:2b:1d:e8:ab:a6:2c:70
Serial Number (int): 1520047198144636254869038510473882736
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: ee:2d:37:56:00:1b:6d:06:fc:ff:40:fe:b5:27:4a:08:84:5a:f4:b1
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): ba:74:49:94:09:83:c5:98:dc:d8:cf:70:1d:0c:78:d6:09:54:42:ed
Fingerprint (sha256): db:9d:7a:9b:d2:7e:27:1f:93:16:0a:54:ba:7d:11:7f:c3:f3:80:12:ad:0d:ad:45:32:19:0a:f3:b5:2b:4c:cc

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate learn.co

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for learn.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

learn.co

Other certificates including the domain name learn.co

(limited to 100 certificates)
*.ide.learn.co
docs.learn.co
help.learn.co
instruction.learn.co
splunk.learn.co
gh.learn.co
xid.learn.co
staginggh.learn.co
xid.learn.co
gh.learn.co
learn.co
*.ide.learn.co
docs.learn.co
splunk.learn.co
instruction.learn.co
gh.learn.co
go.learn.co
*.learn.co
*.forge.learn.co
chef.students.learn.co
gh.learn.co
*.learn.co
gh.learn.co
gh.learn.co
*.ide-proxy.ide.learn.co
go.learn.co
gh.learn.co
*.learn.co
xid.learn.co
instruction.learn.co
xid.learn.co
learn.co
chef.students.learn.co
learn.co
instruction.learn.co
*.forge.learn.co
*.learn.co
gh.learn.co
gh.learn.co
*.ide-proxy.ide.learn.co
go.learn.co
instruction.learn.co
staging.learn.co
gh.learn.co
gh.learn.co
slack.learn.co
staginggh.learn.co
instruction.learn.co
learn.co
go.learn.co
learn.co
help.learn.co
instruction.learn.co
staging.learn.co
learn.co
xid.learn.co
*.learn.co
instruction.learn.co
xid.learn.co
docs.learn.co
*.forge.learn.co
staginggh.learn.co
*.ide-proxy.ide.learn.co
xid.learn.co
xid.learn.co
xid.learn.co
gh.learn.co
*.courseconductor.learn.co
instruction.learn.co
*.qa.learn.co
learn.co
gh.learn.co
learn.co
students.learn.co
learn.co
staging.learn.co
gh.learn.co
*.forge.learn.co
abstruse.learn.co
docs.learn.co
qa.learn.co
chef.students.learn.co
xid.learn.co
ile.learn.co
chef.students.learn.co
instruction.learn.co
learn.co
instruction.learn.co
learn.co
go.learn.co
staging.learn.co
learn.co
go.learn.co
*.learn.co
go.learn.co
my.learn.co
staging.learn.co
staging.learn.co
docs.learn.co
go.learn.co

Certificate

The complete raw certificate details for learn.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFyDCCBLCgAwIBAgIQASTAHPB2yyydKx3oq6YscDANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMTA1MDIwMDAwMDBaFw0yMjA1MzEy
MzU5NTlaMBMxETAPBgNVBAMTCGxlYXJuLmNvMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAsVRmFBz9GT2L9WI20j6cUmUZhjW+uXmnKgzzK4Q235Ony+GU
BJcP0wm9K1JHjC7V0VJiGcjIMvSVnYj9h61+fcfzYH82ElIyBwuqkHB2yGrf5vMr
ickZ8Y8mRv/orqBnayxvKCnRls0oOEXStI6uAhQ6vRWewmstHaDLFYVO+3EuBG/+
lUdV/UEDrteITt552rijclNBLeh8x33vjZnK7gtKWOC1xHx2unTf5gq4OlaRQZtf
4k0k0Uz5ah/tjGrH1HgXAmyehMTJEdFondo9XXBJNXzDF4+NSOKHWZFoeAp1qmL6
4h3Wj/ctd4TpPzbbF356Dpv8iasYkd7sfWg7ZQIDAQABo4IC4zCCAt8wHwYDVR0j
BBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFO4tN1YAG20G/P9A
/rUnSgiEWvSxMBMGA1UdEQQMMAqCCGxlYXJuLmNvMA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYq
aHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3JsMBMGA1Ud
IAQMMAowCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0
cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRw
Oi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/
BAIwADCCAYAGCisGAQQB1nkCBAIEggFwBIIBbAFqAHYAKXm+8J45OSHwVnOfY6V3
5b5XfZxgCvj5TV0mXCVdx4QAAAF5K5OQBgAABAMARzBFAiEA12NsSMG2C3nJW+9U
SCiql16R9hlQ2HxwRfeekLkF6rQCIGD5EyfLizPYKhvsYtv4QA42gtywl/PScX9g
0YTZtLG7AHcAIkVFB1lVJFaWP6Ev8fdthuAjJmOtwEt/XcaDXG7iDwIAAAF5K5OM
/gAABAMASDBGAiEA63e1AFdcqdcceXB0jbNIlBN/3nvuOmhqMSQCx8CqDs8CIQDs
FlEBQoMtW2tCFisSeZnPOc3Ih31exV25ulBm8qCrpQB3AFGjsPX9AXmcVm24N3iP
DKR6zBsny/eeiEKaDf7UiwXlAAABeSuTkBMAAAQDAEgwRgIhAJ7azqk7RSKsFCEm
e260YU9D84D9rxKGWZUfqsj13cLZAiEAgDZYVSyAGO+vSK4iyx9t/jXumfoumpy0
uhwJNtWq3UIwDQYJKoZIhvcNAQELBQADggEBAGibuQTS9vbGktuGuH2+aHuUZ3gC
MhjC0ocxxf0OM7gW3xlT2W467/dima7QFTEKqF5QqMDAgHynzKHq/CC7QcBwaV9Y
tTJyTuZb/Bc0b86Iox0YbQyYnLs8BEqjctIguwIM7YOHkcpRKxxGLEV7bZJ+LkaD
iK9LQkK3yB1UfwPFxWp/h30c0WBqtAAARveFmbTuQGuIyF/SuJLDBog2+0fcQA0u
Y3Q4LN97VgZU28TUbT4CdcZndD+4CI0BjEjiFB1fqECetV4ZBfhxSgZfe3q8pEWU
aiKI1ljQNXkVruNEaWs7qyf5bLWiOULrWpYOMB0zS1TUHCns7J2/JdFlMnk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVRmFBz9GT2L9WI20j6c
UmUZhjW+uXmnKgzzK4Q235Ony+GUBJcP0wm9K1JHjC7V0VJiGcjIMvSVnYj9h61+
fcfzYH82ElIyBwuqkHB2yGrf5vMrickZ8Y8mRv/orqBnayxvKCnRls0oOEXStI6u
AhQ6vRWewmstHaDLFYVO+3EuBG/+lUdV/UEDrteITt552rijclNBLeh8x33vjZnK
7gtKWOC1xHx2unTf5gq4OlaRQZtf4k0k0Uz5ah/tjGrH1HgXAmyehMTJEdFondo9
XXBJNXzDF4+NSOKHWZFoeAp1qmL64h3Wj/ctd4TpPzbbF356Dpv8iasYkd7sfWg7
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1520047198144636254869038510473882736
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'learn.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22385798551003232359673256836780905204491779996891674251569723164451137088912041549012412655121701029152712535585279337056921652422754373657026901114292975375672416213663421420392339399602219043930853288583891232071225726089137802588064501401561854926756926851192898757961317703706094316867093272333440654735436463633008766768388804029946914609555359487773005567571440253956686197908483304441727932109435839932067113750215478931714602039709505843849968527041588888358771642418920289825582032256343425877546282129022961434681916642442674901900470515420772147775182870890152341715873847987855322742373933014833533827941
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ee2d3756001b6d06fcff40feb5274a08845af4b1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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