learning.westminster.ac.uk

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 02:76:67:9d:24:ef:2b:bd:f4:5d:f3:d5:80:23:54:11 was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=learning.westminster.ac.uk

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 02:76:67:9d:24:ef:2b:bd:f4:5d:f3:d5:80:23:54:11
Serial Number (int): 3273248559318232457787091829779551249
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 02:bd:b8:8c:dd:1e:6a:ed:b8:cb:5c:62:d4:95:cc:ae:be:e9:40:a7
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 26:e3:2f:16:2f:20:20:ad:97:62:fd:11:eb:9b:d4:75:d9:53:20:e4
Fingerprint (sha256): 16:87:c5:17:c4:0b:34:86:0f:c5:37:eb:2d:b0:45:e8:71:db:1f:e4:9a:d1:91:59:1a:45:ae:41:87:28:74:29

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate learning.westminster.ac.uk

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for learning.westminster.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

learning.westminster.ac.uk
*.blackboard.com
learning2.westminster.ac.uk

Other certificates including the domain name westminster.ac.uk

(limited to 100 certificates)
learning.westminster.ac.uk
your.westminster.ac.uk
sgd.westminster.ac.uk
identity.westminster.ac.uk
sni.cloudflaressl.com
ssl758755.cloudflaressl.com
svn.ecs.westminster.ac.uk
bbreportingproxy.westminster.ac.uk
ssl758755.cloudflaressl.com
smtpout.westminster.ac.uk
prospect.westminster.ac.uk
support.ecs.westminster.ac.uk
bomgar.westminster.ac.uk
wificon.westminster.ac.uk
login.ecs.westminster.ac.uk
webmail.westminster.ac.uk
emea-san1.blackboard.com
upload.ecs.westminster.ac.uk
library-catalogue-test.westminster.ac.uk
timetabling.westminster.ac.uk
resolveitdev.westminster.ac.uk
financelive.westminster.ac.uk
eu-central-1-san1.blackboard.com
lists.westminster.ac.uk
mobile-app.westminster.ac.uk
emea-san1.blackboard.com
resolveitdev.westminster.ac.uk
epayments.westminster.ac.uk
uniprint.westminster.ac.uk
store.westminster.ac.uk
ssl758755.cloudflaressl.com
emea-san1.blackboard.com
accommodation.westminster.ac.uk
vacancies.westminster.ac.uk
eu-central-1-san1.blackboard.com
*.ezproxy.westminster.ac.uk
payonline.westminster.ac.uk
printportal.westminster.ac.uk
bi.westminster.ac.uk
*.users.ecs.westminster.ac.uk
shortcourses.westminster.ac.uk
sgd.westminster.ac.uk
library-collections-search.westminster.ac.uk
folio.westminster.ac.uk
intranet.ecs.westminster.ac.uk
prospect.westminster.ac.uk
eu-central-1-san1.blackboard.com
learning.westminster.ac.uk
teamwork-internal.westminster.ac.uk
emea-san1.blackboard.com
esp.westminster.ac.uk
library-collections-search.westminster.ac.uk
password.westminster.ac.uk
identity-test.westminster.ac.uk
timetabling.westminster.ac.uk
eu-central-1-san1.blackboard.com
webprint.westminster.ac.uk
jssadmin.westminster.ac.uk
engage.westminster.ac.uk
helpdesks.westminster.ac.uk
support.ecs.westminster.ac.uk
uniprint.westminster.ac.uk
vapplications.westminster.ac.uk
*.test.westminster.ac.uk
emea-san1.blackboard.com
upload.ecs.westminster.ac.uk
download.ecs.westminster.ac.uk
library-catalogue.westminster.ac.uk
housing.westminster.ac.uk
eu-central-1-san1.blackboard.com
financetest.westminster.ac.uk
summeraccommodation.westminster.ac.uk
hub.westminster.ac.uk
emea-san1.blackboard.com
accommodation.westminster.ac.uk
research.westminster.ac.uk
myintranet.westminster.ac.uk
emea-san1.blackboard.com
*.ezproxy.westminster.ac.uk
uowmail.westminster.ac.uk
upload.ecs.westminster.ac.uk
portal.ecs.westminster.ac.uk
yourvirtualopenday.westminster.ac.uk
penguin.ecs.westminster.ac.uk
intranet.ecs.westminster.ac.uk
eu-central-1-san1.blackboard.com
support.ecs.westminster.ac.uk
eu-central-1-san1.blackboard.com
mailinglist.westminster.ac.uk
payonline.westminster.ac.uk
library-catalogue.westminster.ac.uk
financelive.westminster.ac.uk
devtesthub.westminster.ac.uk
identity.westminster.ac.uk
citrixvip.westminster.ac.uk
vapplications.westminster.ac.uk
emea-san1.blackboard.com
task.westminster.ac.uk
yourvirtualopenday.westminster.ac.uk
guestwifi.westminster.ac.uk

Certificate

The complete raw certificate details for learning.westminster.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvutn9KXPw958lNBjoiUa
WWxAyS3Rk6CPA8Y2lkj1ilAXE3FUKrr/4OaeQjg1g6IfdhiIbky0fMrdU+8G54No
iTN2e9GQdOHUDRRNlURuyoIfU1eXJmluG0duzxI09Cl9NAFA4uWT+lSFZyFg3PMg
bB9oj3m2KNyM58C8zwn4wESTau0PoMeBGy+ZairnDjKgJOtLkwNXEGI/SAApneRD
Cz7vtZi0o/yXg7vfj6pTZNqV3DizuhgQI1e37ZgWWvNpoW39Qks1TxKMZFeptQ0K
1TEAck1OTrL8uxDcUgMr/vsAem7gGldRYu3rUqHY4kfIFpoXWEH539uHLn/Npmps
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3273248559318232457787091829779551249
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'learning.westminster.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24101361006485212971605065556914929257993774045337616768860038654357659521960278253406590168313221675185340895269398084450494992113730229875374341611283785445010583695586085552443721606824183578745912510900643742173858634041481273591259290117698004156966165617735653134564286362778447909488485459203943320900928592813069165713221564548928969052586050583982795400604929406603871159405769063397211474982128472786477021467000978446349325367878216288038159741634481779512685245456054703695895600838290238579072874608396784619556875663920835458097299717950910676054894136922447235815982644191218984316958302491266521918659
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							02bdb88cdd1e6aedb8cb5c62d495ccaebee940a7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learning.westminster.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learning2.westminster.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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