jss.cumberlandacademy.com

Issued by Amazon

About this certificate

This digital certificate with serial number 06:b9:c5:f1:77:df:b8:14:81:d1:d8:20:bf:dd:49:e8 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=jss.cumberlandacademy.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:b9:c5:f1:77:df:b8:14:81:d1:d8:20:bf:dd:49:e8
Serial Number (int): 8939957659316699585716212344496671208
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: be:92:5e:17:2d:13:24:ea:b8:cb:9a:b2:37:cc:cd:f8:7a:56:f7:70
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): b1:00:09:fa:4d:75:98:17:f4:5e:aa:e4:13:3a:ef:0d:73:78:8a:5e
Fingerprint (sha256): e6:d3:3e:cf:82:98:8a:3b:35:1c:d0:1a:d0:df:ac:3a:06:6a:64:12:13:ce:b3:97:b3:2d:e7:c9:6c:8b:a4:2f

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate jss.cumberlandacademy.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jss.cumberlandacademy.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jss.cumberlandacademy.com

Other certificates including the domain name cumberlandacademy.com

(limited to 100 certificates)
admin.adultlearning.sunrisesd.ca
admin.lms.davidson.k12.nc.us
second.exteraschools.org
admin.adulteducation.pleasantonusd.net
admin.aristoiclassical.org
admin.lorena.exteraschools.org
admin.aristoiclassical.org
admin.adulteducation.pleasantonusd.net
sgmission.org
www.saintpaulcatholic.org
jss.cumberlandacademy.com
abchandler.henderson.kyschools.us
lifeschools.net
hs.cumberlandacademy.com
admin.fges.davidson.k12.nc.us
breed.exteraschools.org
abchandler.henderson.kyschools.us
admin.second.exteraschools.org
admin.adulteducation.pleasantonusd.net
adams.k12k.com
admin.exteraschools.org
northwesthigh.slp.k12.la.us
abchandler.henderson.kyschools.us
mas.mpusd.net
www.trinitystelementary.com
gageparkhs.org
abchandler.henderson.kyschools.us
exteraschools.org
abchandler.henderson.kyschools.us
www.lusd.k12.ca.us
admin.assumptionschool-sl.org
admin.adultlearning.sunrisesd.ca
admin.aristoiclassical.org
admin.hsmp.org
abchandler.henderson.kyschools.us
hy.hpisd.org
www.exteraschools.org
admin.trinitystelementary.com
sgmission.org
admin.assumptionschool-sl.org
second.exteraschools.org
hartorah.org
admin.breed.exteraschools.org
admin.res.rfisd.net
admin.oghs.davidson.k12.nc.us
es.glendaleacademy.org
admin.nes.davidson.k12.nc.us
hnes.hipponation.org
admin.assumptionschool-sl.org
lorena.exteraschools.org
trinitystelementary.com
admin.nes.davidson.k12.nc.us
admin.ves.monroe.k12.tn.us
hs.cumberlandacademy.com
admin.lhs.davidson.k12.nc.us
admin.wal.davidson.k12.nc.us
grandcoteauelem.slp.k12.la.us
admin.adulteducation.pleasantonusd.net
admin.assumptionschool-sl.org
admin.bces.davidson.k12.nc.us
admin.swe.davidson.k12.nc.us
breed.exteraschools.org
jss.cumberlandacademy.com
admin.hs.hpisd.org
admin.aristoiclassical.org
abchandler.henderson.kyschools.us
admin.wgnunn.gocats.org
es.glendaleacademy.org
eastman.exteraschools.org
admin.colonies.sunrisesd.ca
adams.k12k.com
hs.cumberlandacademy.com

Certificate

The complete raw certificate details for jss.cumberlandacademy.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HSzQQFFrlKv+rLjFw2w
TD3EjMjgJm2Po7iuODb8dTZD2STbrpZPuSzYDJ2oEdcUbFF5UHf43UDevzks9O3I
jvDPmlhSaUm57NGSm3+gnm58pfsTxBWtz94ria1Md23E0+7LMxF7CeEnHSHQijX6
z8zvUjDtEhe2ZXEAUWXu1n+wm/kNKW0qCyZVKaq92VSVqTXJBGGdN9rRcZ6BK2rQ
o1SCiIumaUfvah8Hup4SfgXHhltCyczYy8U8iN+iNtPTJfL9k0G36QHzfbHopcVE
YOo0WEv0H0IOIeAgD18W8H7Os3eFIPGaAxeU8BxYA7EYHkCuQZPMr2cRKRBn3xuq
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8939957659316699585716212344496671208
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-27 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jss.cumberlandacademy.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26820067671481279908911633141212046568947586291631577953941095719166712983588547286233495003673636899639139732892196473770166207937806179917903707662186453009534020666064248153696891364323947204841848686533091969601770930347647245737121930980668002716520070458724189798227958375522775216375778423546346302946100447760481707610356211318124738370470132188203784772588203678544093849695679483976606236008192692442221889842042855636757383825274797260099840789109205465943782023686710786508388260840774790018560747286500112024219992170434516365498513032651135149528612799236121714530426248862187849929513365759915896580763
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							be925e172d1324eab8cb9ab237cccdf87a56f770
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jss.cumberlandacademy.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b073fc475559bdfec1da413e1ca68bd8be880b7be1027c3ab8dd295c2d52361fbd291ba108df7c5b3b892d20028a426cafa2c0f63393a443570a8352bfdda4d76b1a8427ea3392066ae93ebe2a23d9fb056db4141080cae39f65e3e90057ecf63d7356ea8904fa6ce91ae79c12cb47617f71de27602f2ff6fd9ce096510ce4ad1216c7be85c6d53f7b6aa947942173c98c48cf7d730f53621b1209bb51ebb9d54f72a981946546b6c5c26d5b5ab0f786aef534349d686799a1db3175dc9b02900579e4c94a199b787c565199fe5ba9ace525ce2e69a961db65dc1e9a21d2c71b01be902ebad827078787f5569471750026e987fc55bb22a5cf478527b8ffc65d