infra.coursedog.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 05:85:29:31:cf:f7:8b:45:d6:66:6b:89:25:b3:f3:ae was issued on by Amazon.

With 44 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=infra.coursedog.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:85:29:31:cf:f7:8b:45:d6:66:6b:89:25:b3:f3:ae
Serial Number (int): 7337550986446083764232371641498465198
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 03:6d:7f:24:e6:fe:03:47:79:d4:0d:1b:4f:20:a3:3a:d7:7b:90:ef
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 05:7d:16:07:f9:1e:d7:25:3f:10:6f:b6:e1:65:14:20:79:0c:77:a5
Fingerprint (sha256): f4:7e:d3:20:f7:f6:73:dc:da:09:95:c3:1c:ff:01:83:74:27:5b:32:6f:a9:bd:5d:9c:83:f7:85:ee:1d:5e:2c

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate infra.coursedog.com

44

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for infra.coursedog.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

infra.coursedog.com
bulletin.stanford.edu
catalog.nmt.edu
catalog.brookdalecc.edu
catalog.chaminade.edu
catalog.morrisville.edu
*.events.prod.coursedog.com
catalog.ccga.edu
eventscheduling.stjohns.edu
*.infra.coursedog.com
catalog.nobts.edu
*.events.dev.coursedog.com
*.catalog.midlandu.edu
*.bulletins.duke.edu
catalog.norwich.edu
*.catalog.lasell.edu
catalog.ashland.edu
events.nycpm.edu
catalog.luther.edu
studenthandbook.hpu.edu
*.catalog.dev.coursedog.com
catalog.umt.edu
*.catalog.staging.coursedog.com
events.isothermal.edu
calendar.abac.edu
catalog.mccd.edu
classroomreservations.ucsc.edu
campusevents.cca.edu
*.catalog.cuny.edu
*.coursedog.com
catalog.curry.edu
catalog.abac.edu
catalog.parker.edu
*.event.cuny.edu
catalog.centralaz.edu
catalog.hpu.edu
events.skc.edu
catalog.icc.edu
*.catalog.prod.coursedog.com
catalog.byu.edu
*.events.staging.coursedog.com
catalog.bates.edu
catalog.stcloudstate.edu
catalog.dbu.edu

Other certificates including the domain name coursedog.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for infra.coursedog.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCTLbm/35Ol5OoIuFNGJ
kaFmQViCGm/GGfwrp7i+FOed6L2IgPpk716sSheSb2y6gV4ZGuYBao+SyaJzAxcz
sDzA+kkJdTEA5ltxpzhXeIQx4cjOucoXRBORbNStwSAKoYSlsbTWldTtzh/Wa1HF
lxjPEVGcXX07RNtqn8lVPVAwUNQjBai3nLNX4fz+uoZljYCJT4jln8H/VHFOWD+j
qpS3p1KTQqrwH9ksluJRS7U3zXw3/0LY+tI3CLhnaoF5IuVYqX4Q1wIffDnfG8q1
yqzFqbmNK/p6gWiA+vWULtp+jVPh9mPyQ9sF6SofPdHVpVpbg/sOrD9/m+d+ktlC
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7337550986446083764232371641498465198
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'infra.coursedog.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25265805113285810004999958899616351993549019731331446146668113468752954360250448277111649952244383799160095358646653118616752292718521211594763493784361448675392550736618711187209809167645601214249195066418688368963471228665118883649524640438172326110948226628245305462739870355872526515284649260530426762052310661106867874337199402367285014254075574631721015867673227758377485977590994958054331937132490862567670270249470356164577175615289678797828542138444949007566849544442839608243821774374712046943507309651727990028384691590640415053079759156558729818124434336538819166161188324123451871252840791715416139973289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							036d7f24e6fe034779d40d1b4f20a33ad77b90ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (976 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infra.coursedog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bulletin.stanford.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.nmt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.brookdalecc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.chaminade.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.morrisville.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.events.prod.coursedog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.ccga.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eventscheduling.stjohns.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infra.coursedog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.nobts.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.events.dev.coursedog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catalog.midlandu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bulletins.duke.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.norwich.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catalog.lasell.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.ashland.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.nycpm.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.luther.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studenthandbook.hpu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catalog.dev.coursedog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.umt.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catalog.staging.coursedog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.isothermal.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'calendar.abac.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.mccd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classroomreservations.ucsc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campusevents.cca.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catalog.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.coursedog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.curry.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.abac.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.parker.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.event.cuny.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.centralaz.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.hpu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.skc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.icc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.catalog.prod.coursedog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.byu.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.events.staging.coursedog.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.bates.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.stcloudstate.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'catalog.dbu.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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