pebblepad.northumbria.ac.uk

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0e:ec:14:a9:82:fd:f1:cb:a1:38:a5:f9:3e:04:05:13 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pebblepad.northumbria.ac.uk

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:ec:14:a9:82:fd:f1:cb:a1:38:a5:f9:3e:04:05:13
Serial Number (int): 19834993077894630840834024623239857427
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b9:0a:52:16:1e:0d:18:3e:d0:96:85:ca:53:04:a0:c8:38:35:9c:84
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 45:c8:8c:e3:e1:8b:34:6c:57:68:9e:fd:31:38:d5:b3:b3:0b:c2:3e
Fingerprint (sha256): 40:f7:92:92:82:3a:b8:d5:77:05:50:28:61:c4:bb:09:48:2c:fc:78:27:ed:69:e7:e1:db:17:16:1e:47:4e:d7

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate pebblepad.northumbria.ac.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pebblepad.northumbria.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pebblepad.northumbria.ac.uk
pebbleplus.northumbria.ac.uk

Other certificates including the domain name northumbria.ac.uk

(limited to 100 certificates)
sts.northumbria.ac.uk
nrl.northumbria.ac.uk
dev.learning.northumbria.ac.uk
payments.northumbria.ac.uk
nurds.northumbria.ac.uk
*.northumbria.ac.uk
eu-central-1-san1.blackboard.com
rbscalendar.northumbria.ac.uk
eu-central-1-san1.blackboard.com
www.northumbriajournals.co.uk
pebblepad.northumbria.ac.uk
corp-uat.northumbria.ac.uk
*.northumbria.ac.uk
elp.northumbria.ac.uk
eu-central-1-san1.blackboard.com
library.northumbria.ac.uk
www.london.northumbria.ac.uk
sts.northumbria.ac.uk
mail.northumbria.ac.uk
dta.northumbria.ac.uk
eu-central-1-san1.blackboard.com
mytimetable-test.northumbria.ac.uk
library.northumbria.ac.uk
eu-central-1-san1.blackboard.com
rbscalendar.northumbria.ac.uk
login.northumbria.ac.uk
my.northumbria.ac.uk
puretest.northumbria.ac.uk
myportal.northumbria.ac.uk
eu-central-1-san1.blackboard.com
alumni.northumbria.ac.uk
rbscalendar.northumbria.ac.uk
eu-central-1-san1.blackboard.com
eu-central-1-san1.blackboard.com
libraryanswers.northumbria.ac.uk
www.northumbria.ac.uk
researchportal.northumbria.ac.uk
eu-central-1-san1.blackboard.com
np-k2-wfe01.northumbria.ac.uk
sts.northumbria.ac.uk
newsroom.northumbria.ac.uk
mailtest.northumbria.ac.uk
simplyweb.northumbria.ac.uk
journals.northumbria.ac.uk
*.northumbria.ac.uk
uraip.northumbria.ac.uk
eu-central-1-san1.blackboard.com
payments.northumbria.ac.uk
london.northumbria.ac.uk
sts.northumbria.ac.uk
elp.northumbria.ac.uk
sip.unn.ac.uk
libraryanswers.northumbria.ac.uk
eu-central-1-san1.blackboard.com
figshare.northumbria.ac.uk
figshare.northumbria.ac.uk
*.apps.sp.northumbria.ac.uk
eu-central-1-san1.blackboard.com
researchportaltest.northumbria.ac.uk
qa.northumbria.ac.uk
corp.northumbria.ac.uk
newsroom.northumbria.ac.uk
idptest.northumbria.ac.uk
mail.northumbria.ac.uk
journals.northumbria.ac.uk
www.northumbria.ac.uk
*.northumbria.ac.uk
uraip.northumbria.ac.uk
www.northumbria.ac.uk
dev.learning.northumbria.ac.uk
eu-central-1-san1.blackboard.com
eu-central-1-san1.blackboard.com
eu-central-1-san1.blackboard.com
northumbriaworld.northumbria.ac.uk
library.northumbria.ac.uk
figshare.northumbria.ac.uk
login.northumbria.ac.uk
mentoring.northumbria.ac.uk
www.northumbria.ac.uk
work4.northumbria.ac.uk
store.northumbria.ac.uk
eu-central-1-san1.blackboard.com
mail.northumbria.ac.uk
*.northumbria.ac.uk
eu-central-1-san1.blackboard.com
rbscalendar.northumbria.ac.uk
www.northumbria.ac.uk
login.northumbria.ac.uk
rbscalendar.northumbria.ac.uk
simplyweb.northumbria.ac.uk
www.london.northumbria.ac.uk
eu-central-1-san1.blackboard.com
simplyweb.northumbria.ac.uk
pebblepad.northumbria.ac.uk
defcon.northumbria.ac.uk
libraryanswers.northumbria.ac.uk
sits.northumbria.ac.uk
eu-central-1-san1.blackboard.com
sits.northumbria.ac.uk
www.northumbria.ac.uk

Certificate

The complete raw certificate details for pebblepad.northumbria.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN7yC2fk+2rCf6Z4Xakt
tJZZXzoSqNCCcWN3WeMIxmSxA2EV4Z/7Wg3u+H204m0DNU6P++Hv4y/rxYylY8/u
AvBkt/Km7fz5zemgYLYwc8od3CyoeJLD7xibJTMJPwz78TZL+8Shq9TdM7HByYwY
Q/9ZHZw4BYWbHuE7WS/LojqRIgBOHE3FrHMSjVGTAM+bC5jdMzisRUC+fwqJWbxx
2VyWn2GPojOaXSX9Y4EWRZjMehvbVlwPM5HFoKHUznZKC9iK24lq+/WAEkpGO8Sn
zSqOBQETrOU/7H4HKr381x02IaP9DNxaPv+6VC547BrBd0adq44OimmBu8zlDcMu
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19834993077894630840834024623239857427
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pebblepad.northumbria.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23337786630631938665348489421774546177393020693851637314061876105069508153118019731244025489631357502752564552309480800087101668623724491756253789874621401315938673417793644482007594203657994196758987764851132647731267853583751537068089441238990335189752265249975062048980612840199200825439126988635559821779911921797713785196382040432373346036906419607028568271248310471564263013990794608643683514000295248087478894011679865122766667106337502035249132354887210866592018728456695703103711525974864680410020815265793754184466923254612921616427422751104435527693638242414919249156257901342492377505520477059890670677533
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b90a52161e0d183ed09685ca5304a0c838359c84
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pebblepad.northumbria.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pebbleplus.northumbria.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000184cd7a2bf60000040300483046022100e7fe7e9420f6d2a9d0aeffb86a524a9c34f48b0353092ebefd393dc04cb65645022100ed1feadf405ee9eb45ecbbd0a2aa9478c255050b76ca018a73b918e9597256e7007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000184cd7a2bf7000004030047304502203cfbc6c6c3997dd10183dc7669d5d279e3a9dc4b88526c43382f94c1e511733d022100ef12815fe3ec419ea8e5de37b0925a085bb036b62b2c7538b647158ef612837a007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000184cd7a2ba9000004030047304502210085163bef008dc81a843ca55f1a1ee2be898b6291dc36ef8ac60a4f0ad6683f9902207ae1ab9a8ee5991355e9a1a9745115e2c41b948731570485962fa30627136453
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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