blackboard.noctrl.edu

Issued by Amazon

About this certificate

This digital certificate with serial number 07:bc:f7:3c:16:ee:f9:3a:8c:fb:57:3e:b2:ad:2b:f2 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=blackboard.noctrl.edu

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:bc:f7:3c:16:ee:f9:3a:8c:fb:57:3e:b2:ad:2b:f2
Serial Number (int): 10285762295858383033407426699159481330
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: f7:48:eb:68:66:90:69:b5:03:62:ad:a5:97:54:c6:76:d8:f0:07:68
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): e5:4a:47:10:9b:01:1b:5b:5a:c3:8f:ff:85:3c:f8:c4:26:f6:ae:35
Fingerprint (sha256): 1e:2b:c4:bc:ec:31:24:b3:47:28:20:69:4f:dd:b1:c8:b5:47:05:c9:ad:b4:4b:fe:a0:ea:d2:f1:48:07:18:28

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate blackboard.noctrl.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blackboard.noctrl.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blackboard.noctrl.edu
*.blackboard.com

Other certificates including the domain name noctrl.edu

(limited to 100 certificates)
blackboard.noctrl.edu
5649684605435904-fe1.pantheonsite.io
*.noctrl.edu
blackboard.noctrl.edu
hub.northcentralcollege.edu
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
merlin.noctrl.edu
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
*.noctrl.edu
canvas.noctrl.edu
merlin.noctrl.edu
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
blackboard.noctrl.edu
5649684605435904-fe1.pantheonsite.io
*.noctrl.edu
5649684605435904-fe1.pantheonsite.io
*.noctrl.edu
*.noctrl.edu
*.noctrl.edu
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
*.noctrl.edu
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
hub.northcentralcollege.edu
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
library.noctrl.edu
library.noctrl.edu
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
fs.testmail.noctrl.edu
wifiauth.ad.noctrl.edu
hub.northcentralcollege.edu
wifi.noctrl.edu
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
merlin.noctrl.edu
blackboard.noctrl.edu
idatahub.noctrl.edu
5649684605435904-fe1.pantheonsite.io
*.noctrl.edu
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
wifi.noctrl.edu
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
*.libproxy.noctrl.edu
blackboard.noctrl.edu
*.noctrl.edu
5649684605435904-fe1.pantheonsite.io
*.libproxy.noctrl.edu
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
blackboard.noctrl.edu
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
vpn.noctrl.edu
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
5649684605435904-fe1.pantheonsite.io
*.noctrl.edu
*.noctrl.edu

Certificate

The complete raw certificate details for blackboard.noctrl.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxvRPpuTb4+YT32RokKst
LmA9yNzlDpBTtOLNH/xN4fwehY8wFt/z2Et7XluICcRO6f0ZQk46v2kppWqxyFKy
AsRS/pDySl8GQJCv5DGRm7LXQ2XiNxmaICdhXuL5VDHlLdsFKvwSY/s5cWJlZ7Ez
zbJrMECgpY++TgvIw3nCarafR90S1NovGww7RkUzUH/Oeo0IHBzyF0t0FkKvSNBf
u0SiFjo04T1zNbRDPhr0Nqo3YolVrizkNv8W5cx5aDvUap4bbS0hFTf7FWqgcgmA
M7zaT+ebvoO3qxguqu2st0Z/slbXdzq2ysDHqFyvrCd0QLs4zEiebhuY78hZtB51
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10285762295858383033407426699159481330
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blackboard.noctrl.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25115658696725364909213183976717660211857783060453995651001016926878896380602434154349155161776307881419085206174605661480304645087828033823389697176937817343323650349019854277126817862096293945260170690316874400514550772164573387241431137916541211874359873009387760218709140291848746113991775439029645676321309475584572614312675551877056031717453852522801390320193097510104392141415883913018650194779784684153525825763323215231538782356154992510175545925454185455979617493035590024546112059856534781950285289112905718963738847840122459859273705175859947152211601334614515870390632150504572275992072191807809006761319
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f748eb68669069b50362ada59754c676d8f00768
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (43 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackboard.noctrl.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackboard.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							01670076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017a5434a56a000004030047304502201e081b72e21d57dd52be6ccfd3a73e778033c643a4ad0bf442d2f071aa2c239402210093b817fc3d92cc18b4c9fa94d33e8b7cedf1c3ddef010aaf86c9d118098c27e30076002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f020000017a5434a4dd0000040300473045022009be1f1a40e29bf43fdc8e5ed08c1ebae3121d595177400f13d60febcc39dc6d0221009a4449225c826d9d9a71fa7f771fca69313eb579b90e2c32ce86148a5b19b8cb00750051a3b0f5fd01799c566db837788f0ca47acc1b27cbf79e88429a0dfed48b05e50000017a5434a4fc000004030046304402202164a2eec5c9af5ce237d15e972b0f654bef54bda3c9dc1c630ac460d611280002201c4bc20b6d3ef30c666a396d792a00664ce63291b785e84c28a98397b3c236d7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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