*.northumbria.ac.uk

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 03:85:58:dd:e6:cd:90:40:c6:d7:32:07:3b:56:58:93 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.northumbria.ac.uk

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:85:58:dd:e6:cd:90:40:c6:d7:32:07:3b:56:58:93
Serial Number (int): 4680061902438979960345387203934181523
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: aa:8f:7f:d0:0c:a1:a8:cb:56:32:c6:00:ad:ca:36:66:ad:2c:cf:05
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 85:db:50:40:2f:25:c6:37:6a:2d:2c:4e:d3:d8:b7:f9:f4:1f:d1:5c
Fingerprint (sha256): 04:fc:84:d4:9d:a9:32:15:4d:e0:78:eb:aa:2c:1a:7d:b5:24:42:57:2b:6d:cb:9f:8f:ba:bf:fa:f4:b6:8c:2e

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate *.northumbria.ac.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.northumbria.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.northumbria.ac.uk
*.blackboard.com

Other certificates including the domain name northumbria.ac.uk

(limited to 100 certificates)
sts.northumbria.ac.uk
nrl.northumbria.ac.uk
dev.learning.northumbria.ac.uk
payments.northumbria.ac.uk
nurds.northumbria.ac.uk
*.northumbria.ac.uk
eu-central-1-san1.blackboard.com
rbscalendar.northumbria.ac.uk
eu-central-1-san1.blackboard.com
www.northumbriajournals.co.uk
pebblepad.northumbria.ac.uk
corp-uat.northumbria.ac.uk
*.northumbria.ac.uk
elp.northumbria.ac.uk
eu-central-1-san1.blackboard.com
www.london.northumbria.ac.uk
sts.northumbria.ac.uk
mail.northumbria.ac.uk
dta.northumbria.ac.uk
eu-central-1-san1.blackboard.com
library.northumbria.ac.uk
eu-central-1-san1.blackboard.com
rbscalendar.northumbria.ac.uk
login.northumbria.ac.uk
my.northumbria.ac.uk
puretest.northumbria.ac.uk
myportal.northumbria.ac.uk
eu-central-1-san1.blackboard.com
alumni.northumbria.ac.uk
rbscalendar.northumbria.ac.uk
eu-central-1-san1.blackboard.com
eu-central-1-san1.blackboard.com
libraryanswers.northumbria.ac.uk
www.northumbria.ac.uk
researchportal.northumbria.ac.uk
eu-central-1-san1.blackboard.com
np-k2-wfe01.northumbria.ac.uk
sts.northumbria.ac.uk
newsroom.northumbria.ac.uk
mailtest.northumbria.ac.uk
simplyweb.northumbria.ac.uk
journals.northumbria.ac.uk
*.northumbria.ac.uk
uraip.northumbria.ac.uk
eu-central-1-san1.blackboard.com
payments.northumbria.ac.uk
london.northumbria.ac.uk
sts.northumbria.ac.uk
elp.northumbria.ac.uk
sip.unn.ac.uk
libraryanswers.northumbria.ac.uk
eu-central-1-san1.blackboard.com
figshare.northumbria.ac.uk
figshare.northumbria.ac.uk
*.apps.sp.northumbria.ac.uk
eu-central-1-san1.blackboard.com
researchportaltest.northumbria.ac.uk
qa.northumbria.ac.uk
corp.northumbria.ac.uk
newsroom.northumbria.ac.uk
idptest.northumbria.ac.uk
mail.northumbria.ac.uk
journals.northumbria.ac.uk
www.northumbria.ac.uk
*.northumbria.ac.uk
uraip.northumbria.ac.uk
www.northumbria.ac.uk
dev.learning.northumbria.ac.uk
eu-central-1-san1.blackboard.com
eu-central-1-san1.blackboard.com
eu-central-1-san1.blackboard.com
northumbriaworld.northumbria.ac.uk
library.northumbria.ac.uk
figshare.northumbria.ac.uk
login.northumbria.ac.uk
mentoring.northumbria.ac.uk
www.northumbria.ac.uk
work4.northumbria.ac.uk
store.northumbria.ac.uk
eu-central-1-san1.blackboard.com
mail.northumbria.ac.uk
*.northumbria.ac.uk
eu-central-1-san1.blackboard.com
rbscalendar.northumbria.ac.uk
www.northumbria.ac.uk
login.northumbria.ac.uk
rbscalendar.northumbria.ac.uk
simplyweb.northumbria.ac.uk
www.london.northumbria.ac.uk
eu-central-1-san1.blackboard.com
simplyweb.northumbria.ac.uk
pebblepad.northumbria.ac.uk
defcon.northumbria.ac.uk
libraryanswers.northumbria.ac.uk
sits.northumbria.ac.uk
eu-central-1-san1.blackboard.com
www.northumbria.ac.uk
mentoring.northumbria.ac.uk
*.apps.sp.northumbria.ac.uk
sits.northumbria.ac.uk

Certificate

The complete raw certificate details for *.northumbria.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JL3apkcjQkVJ0SitekX
jsjW3vIkz8UnH/tcDelElJI9yLgaRC7KpdhDOnGsWqCYPFKoZ+yAtHZY/HxGGBGt
+oj6jZnQzvyDsB6v6Y7DYm3CddLajh6H1uazh1jog9gty2qdG7sfLG/0hWDptYCy
3CVsz7wBXWVghW9eu+1yak4rz0o3mSHjGCJLDLixXw7HxQmPHVYZXEkiVSxmnPEq
PI2XI39hYOPC0+xumIQjc8F6qxOFwjeOGmdUUJjSY/XkWkAUIvOu1sVqpGONY2rg
cWENfplhq3eeEMQErOEOGfWuqRQKWoY1wcQuhl000SOl2Qpe+llkh2lHffjW8DHU
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4680061902438979960345387203934181523
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.northumbria.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27339945740240932350997644256068365670258639708885856241568657260222527645750379408820962121244725606483989580725727295887605110742180388536496233453101919912965149248429740758856761133025608271271437598725093383795154233513962385328117381509656523314856046253480638311838247261878075029287254596678099285940828729030491214823714809482101234348229563187017767932561253947981220062404431094893654687239608404316048583388247150688728886665223102432801458627735214215528612476425037609434988640496936755891347272137321750167809395353116846176090509120599425333077725668263213579543682923570183642404044505739592041878723
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aa8f7fd00ca1a8cb5632c600adca3666ad2ccf05
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.northumbria.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackboard.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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