*.cwng-integrations-prod.edgenuityapp.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0d:f9:dc:aa:55:c8:dc:4f:42:dd:b4:a7:61:a5:ba:c1 was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.cwng-integrations-prod.edgenuityapp.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:f9:dc:aa:55:c8:dc:4f:42:dd:b4:a7:61:a5:ba:c1
Serial Number (int): 18577321488428560601158720296271067841
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c8:4f:37:25:9d:38:5c:15:f3:d4:f5:77:ca:18:42:80:54:f3:cb:bb
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 94:bb:f5:b4:fe:a2:80:11:63:b9:56:b1:20:35:96:ef:0a:5b:a2:98
Fingerprint (sha256): f0:67:04:3e:6f:43:eb:9b:61:fa:1c:c9:96:2e:b1:b0:74:4c:f4:ce:aa:b5:9c:c6:83:4c:bb:73:61:4a:76:d5

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate *.cwng-integrations-prod.edgenuityapp.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.cwng-integrations-prod.edgenuityapp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cwng-integrations-prod.edgenuityapp.com
educator.cwngi.edgenuity.com
educator.ex.edgenuity.com

Other certificates including the domain name edgenuityapp.com

(limited to 100 certificates)
*.cosmos-prod.edgenuityapp.com
*.mptools-prod.edgenuityapp.com
*.cwng-staging.edgenuityapp.com
*.cwng-prod.edgenuityapp.com
*.cwng-prod.edgenuityapp.com
*.cwng-integrations-qa.edgenuityapp.com
*.lmsadmin-qa.edgenuityapp.com
*.licenseservice-dev.edgenuityapp.com
subscriptions-qa.edgenuityapp.com
*.armstrong-dev.edgenuityapp.com
*.assessment-service-mf-ui-dev.edgenuityapp.com
*.cwng-dev.edgenuityapp.com
*.lmsadmin-prod.edgenuityapp.com
*.edgelms-prod.edgenuityapp.com
subscriptions-staging.edgenuityapp.com
*.lmsadmin-prod.edgenuityapp.com
*.assessment-prod.il-apps.com
*.zoomservice-prod.edgenuityapp.com
*.rad-prod.edgenuityapp.com
*.strategicapps-staging.edgenuityapp.com
*.assessment-service-mf-ui-dev.edgenuityapp.com
*.assessment-dev.il-apps.com
*.armstrong-prod.edgenuityapp.com
*.assessment-prod.il-apps.com
*.lmsadmin-qa.edgenuityapp.com
*.cwng-integrations-prod.edgenuityapp.com
*.armstrong-staging.edgenuityapp.com
*.ow-qa.edgenuityapp.com
*.lmsadmin-dev.edgenuityapp.com
*.rad-prod.edgenuityapp.com
*.cwng-dev.edgenuityapp.com
*.lmsadmin-dev.edgenuityapp.com
*.cwng-prod.edgenuityapp.com
*.armstrong-qa.edgenuityapp.com
*.ow-prod.edgenuityapp.com
*.imlp-prod.edgenuityapp.com
*.imlp-prod.edgenuityapp.com
*.lmsadmin-qa-app.wna.cloud
*.strategicapps-staging.edgenuityapp.com
*.armstrong-prod.edgenuityapp.com
*.imlp-dev.edgenuityapp.com
*.cosmos-prod.edgenuityapp.com
*.edgelms-qa.edgenuityapp.com
*.cwng-integrations-prod.edgenuityapp.com
*.cwng-integrations-staging.edgenuityapp.com
*.lmsadmin-dev.edgenuityapp.com
*.licenseservice-prod.edgenuityapp.com
*.ops.wna.cloud
*.sequencer-prod.edgenuityapp.com
*.ow-prod.edgenuityapp.com
*.cwng-qa.edgenuityapp.com
*.mptools-prod.edgenuityapp.com
*.doolittle-production.wna.cloud
*.lmsadmin-prod.edgenuityapp.com
*.ow-prod.edgenuityapp.com
*.cwng-qa.edgenuityapp.com
*.cwng-integrations-prod.edgenuityapp.com
*.ow-prod.edgenuityapp.com
*.doolittle-production.wna.cloud
*.assessment-prod.il-apps.com
*.armstrong-dev.edgenuityapp.com
*.imlp-qa.edgenuityapp.com
*.lmsadmin-dev.edgenuityapp.com
*.strategicapps-qa.edgenuityapp.com
*.sequencer-prod.edgenuityapp.com
*.armstrong-qa.edgenuityapp.com
*.edgelms-prod.edgenuityapp.com
*.armstrong-prod.edgenuityapp.com
*.lmsadmin-prod.edgenuityapp.com
*.cwng-integrations-dev.edgenuityapp.com
*.sequencer-dev.edgenuityapp.com
*.cwng-dev.edgenuityapp.com
*.armstrong-prod.edgenuityapp.com
*.imlp-qa.edgenuityapp.com
*.cwng-dev.edgenuityapp.com
*.armstrong-qa.edgenuityapp.com
*.doolittle-production.wna.cloud
*.lmsadmin-dev.edgenuityapp.com
*.armstrong-prod.edgenuityapp.com
*.cwng-integrations-qa.edgenuityapp.com
*.ow-qa.edgenuityapp.com
*.doolittle-nonprod.wna.cloud
*.assessment-prod-app.wna.cloud
*.cwng-prod.edgenuityapp.com
*.lmsadmin-dev-app.wna.cloud
*.cwng-integrations-prod.edgenuityapp.com
*.cwng-integrations-prod.edgenuityapp.com
*.cwng-integrations-qa.edgenuityapp.com
*.strategicapps-qa.edgenuityapp.com
*.strategicapps-prod.edgenuityapp.com
*.imlp-prod.edgenuityapp.com
*.imlp-dev.edgenuityapp.com

Certificate

The complete raw certificate details for *.cwng-integrations-prod.edgenuityapp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eHNvwp4NgpZfDjA9raP
rVX7m/N4mhq+3qEkaSdT6uTtURq609eW43edVo16dTLivxyttbHVXVRPHqEXfQZi
O71NX5ed880+xh0pU9tLRywAuPnTHluWv68cDjiUFImpguOkicCsWp2OnWfPsUOk
lHRNMny32SMKI6c6mSWxPYCb4R37qj0s4+oC/9KjhWZYecOI9XURd2KGr8G2TnPn
GH3KhJFVidaXQ6CgcRRnffMISQCzvg8yjAPFIZxy+1WkGcLS156IdyGVI7spLsMH
+85RNGNAeJ3xq85n9ApFqkdsc2zKYUEUwOTYBuE4HypqjrdjL1Vm7znVxUDdbw0z
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18577321488428560601158720296271067841
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cwng-integrations-prod.edgenuityapp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26495153690548163616972413052844163154081558486504372068861893637163906843302985283793375511507574481770041454115417357537083694938609695046418933562912064908655260658479423320235485656730162855624673703889539134833122015777655950002961917560877669831861913482569277003214423565569714319685223271496396964176196059749158080586601674231320520392927946772069809809567183179186255848588703349261139983232469087000877455179811726769880488126393640860305325355643177995818938326424307946740021991274921753425335275974254064877164809962667118221358127102078880387783021650472201480213863180152555152103349501303244570047417
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c84f37259d385c15f3d4f577ca18428054f3cbbb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cwng-integrations-prod.edgenuityapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educator.cwngi.edgenuity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educator.ex.edgenuity.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00616c584c3b51acf87803abe8fc62c276938e8b5849fcd311edf0e0be45de11bbe36f6a757308af1d44820216a52df9130e971e7da41cef2748dc77e7da787889af7268288cca4db630c9c0e41f9389d8168ef5d19ed0f2f255255806e6b6fbaf8321802dfd828606457dedb49cc82585b878343a243e0a90df8e7d927f8e33a22e7b781b45857fd2217798d4e467a155a72e8bc3e75b62886c4807082d1a55dbc1dc5e8283e0c72e93674cc837c9fffdb6919b107f01c96d02e451944434b19d79e97f2a2226529c506242d1d6dd5f5c9386794a0bf5459827671ee4933fa167da48154f391aa7b575abe3c9792924ff598386291d3bff9d3d206f98227673d7