blackboard.richmond.ac.uk

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 06:5b:12:58:71:c2:d7:a7:10:5b:b6:c6:fe:45:bb:e6 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=blackboard.richmond.ac.uk

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:5b:12:58:71:c2:d7:a7:10:5b:b6:c6:fe:45:bb:e6
Serial Number (int): 8448239079494687646344501612314475494
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 9a:56:09:d8:e9:e5:13:9a:17:95:d0:ef:65:d5:5f:19:65:ff:b3:1a
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 19:58:29:85:ba:ff:f7:d2:f6:3b:0d:63:a2:b5:3f:23:8b:19:bd:27
Fingerprint (sha256): 00:31:cf:d8:15:81:31:31:7c:82:7e:3d:c3:53:f0:c2:35:d9:8d:96:ec:89:ea:6a:9f:cc:ae:88:a7:ba:a8:c6

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate blackboard.richmond.ac.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blackboard.richmond.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blackboard.richmond.ac.uk
*.blackboard.com

Other certificates including the domain name richmond.ac.uk

(limited to 100 certificates)
blackboard.richmond.ac.uk
viewss.richmond.ac.uk
alumni.richmond.ac.uk
epayments.richmond.ac.uk
selfservice.richmond.ac.uk
*.richmond.ac.uk
selfservice.richmond.ac.uk
webmail.richmond.ac.uk
webmail.richmond.ac.uk
webmail.richmond.ac.uk
library.richmond.ac.uk
careers.richmond.ac.uk
eu-central-1-san1.blackboard.com
my.richmond.ac.uk
alumni.richmond.ac.uk
mis-pc03.richmond.ac.uk
eu-central-1-san1.blackboard.com
argos.richmond.ac.uk
careers.richmond.ac.uk
selfservice.richmond.ac.uk
my.richmond.ac.uk
RUGUEST.richmond.ac.uk
richmond.ac.uk
eu-central-1-san1.blackboard.com
sslvpn.richmond.ac.uk
www.richmond.ac.uk
RUGUEST.richmond.ac.uk
students.richmond.ac.uk
richmond.ac.uk
*.richmond.ac.uk
*.richmond.ac.uk
sschp.richmond.ac.uk
*.richmond.ac.uk
eu-central-1-san1.blackboard.com
eu-central-1-san1.blackboard.com
*.richmond.ac.uk
store.richmond.ac.uk
careers.richmond.ac.uk
mct.richmond.ac.uk
*.richmond.ac.uk
eu-central-1-san1.blackboard.com
careers.richmond.ac.uk
store.richmond.ac.uk
richmond.ac.uk
www.richmond.ac.uk
sslvpn.richmond.ac.uk
selfservice.richmond.ac.uk
blackboard.richmond.ac.uk
webmail.richmond.ac.uk
www.richmond.ac.uk
store.richmond.ac.uk
selfservice.richmond.ac.uk
careers.richmond.ac.uk
*.richmond.ac.uk
careers.richmond.ac.uk
www.richmond.ac.uk
*.richmond.ac.uk
*.richmond.ac.uk
eu-central-1-san1.blackboard.com
eu-central-1-san1.blackboard.com
RUGUEST.richmond.ac.uk
selfservice.richmond.ac.uk
eu-central-1-san1.blackboard.com
www.richmond.ac.uk
*.richmond.ac.uk
selfservice.richmond.ac.uk
webmail.richmond.ac.uk
mct.richmond.ac.uk
viewss.richmond.ac.uk
www.richmond.ac.uk
www.richmond.ac.uk
eu-central-1-san1.blackboard.com
www.richmond.ac.uk
*.richmond.ac.uk
eu-central-1-san1.blackboard.com
my.richmond.ac.uk
selfservice.richmond.ac.uk
SelfService.richmond.ac.uk
*.richmond.ac.uk
www.richmond.ac.uk
my.richmond.ac.uk
www.richmond.ac.uk
www.richmond.ac.uk
blackboard.richmond.ac.uk
store.richmond.ac.uk
blackboard.richmond.ac.uk
my.richmond.ac.uk

Certificate

The complete raw certificate details for blackboard.richmond.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3S32VpGmUrBUl7mvJVW0
fOI47Pq5fL30KTVvDMvO/ycBbJuMjsaGHBlB1nK3UnkzTuRFSbSqY3A++YusvIsc
5F5JpfzPsRR6G7IhWpYi60dqp6xPjQGIcyNITxB4MpanEuGvBJwWT3yBb4POYrc4
1uWyfrjDrq0kN7Ph1P7tvair/Ku4AwkZQ0wVXd0Jpbbdd1pWF8YHSMIISplnoJTc
de/hKAeMQRsW/cyOYEAfrFa1/JmyMGe5+lrGbQe9jrb7HIUfmzo4xf7TW68KvJXm
OJ9L85f4z6JrUOsbum3qSZoALO5ksw4lBMEO3K/C5p+Uy79Xdo/BBq3ZeCpprMcm
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8448239079494687646344501612314475494
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blackboard.richmond.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27921330231864312440281910947734392807589037948994492670761166080141127282242116840490974504881801827208388381666788058891197117316208430150823411269568880779586200717409329962466298103001027237515587415067820395926429816394692977371821520305908929682074015276652799130831305332030677408755856643512682288883836279614875316970953511093328884885030859079223959207197481174828410418779818074756582482036628358001593747648112527509517703901286867025736415697005755625355374625687439712519738239389454126663227948418120588172539421982260189910907188199902821898252735675014987581900587057408020420839021316612422241822377
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9a5609d8e9e5139a1795d0ef65d55f1965ffb31a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackboard.richmond.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackboard.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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