www.open.edu
Issued by Amazon
About this certificate
This digital certificate with serial number 0c:5d:ca:a2:b0:cc:83:23:cc:dc:c2:43:d9:c2:4d:b2 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.open.edu
Amazon
Organization:
Amazon
Organization unit: Server CA 1B
Organization unit: Server CA 1B
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:5d:ca:a2:b0:cc:83:23:cc:dc:c2:43:d9:c2:4d:b2Serial Number (int): 16437729493681596278712650606705790386
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: b7:9f:eb:e9:bb:02:43:74:ff:a7:8a:13:69:01:d3:51:5f:d7:16:bd
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0
Fingerprint (sha1): c6:55:1f:3f:b4:0b:21:ea:82:e7:e0:4e:be:37:63:41:5a:6c:54:87
Fingerprint (sha256): e8:f2:fe:63:d7:05:f6:44:01:4b:2c:21:2e:00:48:1e:50:2c:51:f6:7e:bb:67:f4:00:49:e1:77:41:8e:1c:c6
Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt
Revocation information
OCSP Server: http://ocsp.sca1b.amazontrust.comCRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl
Check the revocation status for certificate www.open.edu
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.open.edu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.open.edu
Other certificates including the domain name open.edu
(limited to 100 certificates)
player.open.edu
www-dev.open.edu
msds-acct.open.edu
www-internal.open.edu
www-internal.open.edu
openlearncreatelive.open.edu
www.open.edu
olclive-internal.open.edu
msds.open.edu
open.ac.uk
www-syst-external.open.edu
www.open.edu
stadium.open.ac.uk
olcsyst.open.edu
www-dev.open.edu
msds.open.edu
player.open.edu
msds.open.edu
www-nft-internal.open.edu
www-test.open.edu
www.open.edu
www.open.edu
www.open.edu
stadium.open.ac.uk
www-acct.open.edu
stadium.open.ac.uk
msds.open.edu
www.open.edu
msds.open.edu
stadium.open.ac.uk
stadium.open.ac.uk
msds-acct.open.edu
stadium.open.ac.uk
www-internal.open.edu
msds-test.open.edu
olcsyst-internal.open.edu
msds.open.edu
msds.open.edu
www.open.edu
player.open.edu
stadium.open.ac.uk
cdn-nft.open.edu
www-nft.open.edu
openlearnacct-internal.open.edu
msds-acct.open.edu
stadium.open.ac.uk
openlearncreateacct-internal.open.edu
player.open.edu
msds-acct.open.edu
open.ac.uk
www-syst.open.edu
www-syst.open.edu
www.open.edu
stadium.open.ac.uk
www-syst-internal.open.edu
stadium.open.ac.uk
msds.open.edu
stadium.open.ac.uk
msds-acct.open.edu
www-acct.open.edu
www.open.edu
openlearnacct-internal.open.edu
www-test.open.edu
player.open.edu
player.open.edu
msds.open.edu
msds.open.edu
www.open.edu
www-dev.open.edu
msds-acct.open.edu
www-internal.open.edu
www-internal.open.edu
openlearncreatelive.open.edu
www.open.edu
olclive-internal.open.edu
msds.open.edu
open.ac.uk
www-syst-external.open.edu
www.open.edu
stadium.open.ac.uk
olcsyst.open.edu
www-dev.open.edu
msds.open.edu
player.open.edu
msds.open.edu
www-nft-internal.open.edu
www-test.open.edu
www.open.edu
www.open.edu
www.open.edu
stadium.open.ac.uk
www-acct.open.edu
stadium.open.ac.uk
msds.open.edu
www.open.edu
msds.open.edu
stadium.open.ac.uk
stadium.open.ac.uk
msds-acct.open.edu
stadium.open.ac.uk
www-internal.open.edu
msds-test.open.edu
olcsyst-internal.open.edu
msds.open.edu
msds.open.edu
www.open.edu
player.open.edu
stadium.open.ac.uk
cdn-nft.open.edu
www-nft.open.edu
openlearnacct-internal.open.edu
msds-acct.open.edu
stadium.open.ac.uk
openlearncreateacct-internal.open.edu
player.open.edu
msds-acct.open.edu
open.ac.uk
www-syst.open.edu
www-syst.open.edu
www.open.edu
stadium.open.ac.uk
www-syst-internal.open.edu
stadium.open.ac.uk
msds.open.edu
stadium.open.ac.uk
msds-acct.open.edu
www-acct.open.edu
www.open.edu
openlearnacct-internal.open.edu
www-test.open.edu
player.open.edu
player.open.edu
msds.open.edu
msds.open.edu
www.open.edu
Certificate
The complete raw certificate details for www.open.edu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF0DCCBLigAwIBAgIQDF3KorDMgyPM3MJD2cJNsjANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjAxMjEwMDAwMDBaFw0yMzAyMTky MzU5NTlaMBcxFTATBgNVBAMTDHd3dy5vcGVuLmVkdTCCASIwDQYJKoZIhvcNAQEB BQADggEPADCCAQoCggEBAJ3egUr1MwOrIknT69SpmXZtIDJmGFXUVPmPXVyYZYNm jWjb+liIswvYVR7i2ecMb1sQHbaKIfaMduueMdSx2AXsXnuCkQAZPo/9J5YUFc/9 lO0Eu/CxOa9rI7K1HtVw9lBPIoq6TJ4k0hSeY3deAk9I4TfTiVDHqBHs5ifosu2E MAUGOjuKRYYCKQjxmiIEVCWbcMhNHcvDOW9TvvHNdGe3Krg8ndqvoKudGyQkBbgE 7dQjYL+zRTRK4ZbELmbY7oJwndfodCDsXVDMOO7NI87pbnGAa9QboHe7M259tQV8 fFXJvjIz6/bZXxqVxT/r+HUrWZdtr+2ee/nUT9wric0CAwEAAaOCAucwggLjMB8G A1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBS3n+vpuwJD dP+nihNpAdNRX9cWvTAXBgNVHREEEDAOggx3d3cub3Blbi5lZHUwDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA9BgNVHR8ENjA0 MDKgMKAuhixodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi0x LmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYB BQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2BggrBgEF BQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3J0 MAwGA1UdEwEB/wQCMAAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB1AOg+0No+ 9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABfnuCETkAAAQDAEYwRAIgcCP/ yBJYAZi3UWf57wAi0r8R9BXjvPmWXN2JWYDlN+ICIEdz2yfL1oVWNeC9w5IHFT2F a9DWSNA6Mth/cOND3VRqAHYANc8ZG7+xbFe/D61MbULLu7YnICZR6j/hKu+oA8M7 1kwAAAF+e4IRSwAABAMARzBFAiA5AGaMruPfyS2z1znCF82nm1Mx+dW6U0R6zm8R TfMY0QIhANPemIq8deAhi/mtrv+OOKFcg8qcM+q5QsS8R7GJa8PeAHcAs3N3B+GE UPhjhtYFqdwRCUp5LbFnDAuH3PADDnk2pZoAAAF+e4IRaAAABAMASDBGAiEAn3Vf /e72UM0YL7+XAuvhfKyvfTaD1VxFpwg5RbcFOtECIQDO6XMtt0UEAshTXRH39wfD EbCPrPs/YIiapcV+5l1aCjANBgkqhkiG9w0BAQsFAAOCAQEABP9AvdhAmm7bdgdM s8mQlflZbnZFbquyVxz/OQgVwz4U+i6jIkKKZ9Brg7raGD6+DWnRx9zSCF6NsyzV nTqIahYLq86LNg2GSyNc4/BvCSUwaIhvI/saXnNbBnDUQz1ge5LsTcSBzKGCkA3i HcSjXubLhihVLk3U67y7STzbRqUQ9vORzxJT7dC5iDyLeO8GfJZF4/a9HdJIJjXK ro/PnX9unVf4NFPICuiaetfZ173mCoQGQQzlGhv0mzmt3bjng8CQdLcSXtf372ck m+bIatUH12PPiIy9TMdl0Z00Mg11+6OamJVFWTTH3gIHBS/CTpEJhIhpTFTW2U+E +yi8oQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd6BSvUzA6siSdPr1KmZ dm0gMmYYVdRU+Y9dXJhlg2aNaNv6WIizC9hVHuLZ5wxvWxAdtooh9ox2654x1LHY Bexee4KRABk+j/0nlhQVz/2U7QS78LE5r2sjsrUe1XD2UE8iirpMniTSFJ5jd14C T0jhN9OJUMeoEezmJ+iy7YQwBQY6O4pFhgIpCPGaIgRUJZtwyE0dy8M5b1O+8c10 Z7cquDyd2q+gq50bJCQFuATt1CNgv7NFNErhlsQuZtjugnCd1+h0IOxdUMw47s0j zulucYBr1Bugd7szbn21BXx8Vcm+MjPr9tlfGpXFP+v4dStZl22v7Z57+dRP3CuJ zQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16437729493681596278712650606705790386 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-21 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-19 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.open.edu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19929135209203754424756193796095031443465090190537407102880774671214641103779508946012076916505029159433955049276796463653491401773497894511288203102288550861091499435160624291407138345084757361646749729943314587640799182725327923862808494408221302867959016637946951951532866393854792681536320029419784878846279961498671303033188329069065483861238285940535958434322706847352373637191514367055490951099592145449827237759812881807422105266134345789079093084315314460219500348000339587271563663515628134377563323645608208212048756640065340730045486692858045638905026676308064184618793024596084556592625258374437446322637 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b79febe9bb024374ffa78a136901d3515fd716bd . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.open.edu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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