blackboard.wesleyseminary.edu

Issued by Amazon

About this certificate

This digital certificate with serial number 02:23:0c:e5:dc:bc:b9:56:da:19:af:c8:bc:7b:49:d1 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=blackboard.wesleyseminary.edu

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:23:0c:e5:dc:bc:b9:56:da:19:af:c8:bc:7b:49:d1
Serial Number (int): 2840447982097865754103150059722590673
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: e7:ef:54:ca:ad:da:19:b2:b4:72:e4:df:2c:88:25:1e:d3:f3:28:36
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): db:a9:e2:d9:20:8f:a3:ef:d5:2d:53:3f:14:3b:e6:64:1c:05:c1:10
Fingerprint (sha256): b7:04:25:a5:01:b2:fb:8b:0a:e8:07:8f:0e:81:f2:16:28:6d:32:a7:f1:a8:0b:17:94:57:20:07:2e:f1:60:26

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate blackboard.wesleyseminary.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blackboard.wesleyseminary.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blackboard.wesleyseminary.edu
*.blackboard.com

Other certificates including the domain name wesleyseminary.edu

(limited to 100 certificates)
selfservice.wesleyseminary.edu
blackboard.wesleyseminary.edu
students.wesleyseminary.edu
finances.wesleyseminary.edu
blackboard.wesleyseminary.edu
sslvpn.wesleyseminary.edu
blackboard.wesleyseminary.edu
us-east-1-san4.blackboard.com
students.wesleyseminary.edu
mail.wesleyseminary.edu
www.wesleyseminary.edu
blackboard.wesleyseminary.edu
wesleyweb.wesleyseminary.edu
www.wesleyseminary.edu
www.wesleyseminary.edu
www.wesleyseminary.edu
sso.wesleyseminary.edu
wesleyweb.wesleyseminary.edu
datatel5.wesleyseminary.edu
www.wesleyseminary.edu
wesleyseminary.edu
students.wesleyseminary.edu
us-east-1-san4.blackboard.com
datatel5.wesleyseminary.edu
sslvpn.wesleyseminary.edu
sts.wesleyseminary.edu
www.wesleyseminary.edu
us-east-1-san4.blackboard.com
us-east-1-san4.blackboard.com
selfservice.wesleyseminary.edu
www.wesleyseminary.edu
give.wesleyseminary.edu
blackboard.wesleyseminary.edu
students.wesleyseminary.edu
wesleyweb.wesleyseminary.edu
wesleyseminary.edu
mail.wesleyseminary.edu
us-east-1-san4.blackboard.com
finances.wesleyseminary.edu
www.wesleyseminary.edu
www.wesleyseminary.edu
www.wesleyseminary.edu
blackboard.wesleyseminary.edu
www.wesleyseminary.edu
us-east-1-san4.blackboard.com
wesleyweb.wesleyseminary.edu
www.wesleyseminary.edu
www.wesleyseminary.edu
www.wesleyseminary.edu
finances.wesleyseminary.edu
www.wesleyseminary.edu
blackboard.wesleyseminary.edu
wesleyseminary.edu
sts.students.wesleyseminary.edu
us-east-1-san4.blackboard.com
selfservice.wesleyseminary.edu
www.wesleyseminary.edu
webapi.wesleyseminary.edu
students.wesleyseminary.edu
sts.students.wesleyseminary.edu
www.wesleyseminary.edu
sts.wesleyseminary.edu
sts.wesleyseminary.edu
students.wesleyseminary.edu
us-east-1-san4.blackboard.com
www.wesleyseminary.edu
wesleyweb.wesleyseminary.edu
www.wesleyseminary.edu
wesleyweb.wesleyseminary.edu
www.wesleyseminary.edu
blackboard.wesleyseminary.edu
wesleyseminary.edu
www.wesleyseminary.edu
www.wesleyseminary.edu
wesleyweb.wesleyseminary.edu
us-east-1-san4.blackboard.com
blackboard.wesleyseminary.edu
wesleyweb.wesleyseminary.edu
blackboard.wesleyseminary.edu
us-east-1-san4.blackboard.com
wesleyweb.wesleyseminary.edu
www.wesleyseminary.edu
wesleyweb.wesleyseminary.edu
give.wesleyseminary.edu
blackboard.wesleyseminary.edu
us-east-1-san4.blackboard.com
mail.wesleyseminary.edu
webapi.wesleyseminary.edu
finances.wesleyseminary.edu
selfservice.wesleyseminary.edu
blackboard.wesleyseminary.edu
sslvpn.wesleyseminary.edu
www.wesleyseminary.edu
www.wesleyseminary.edu

Certificate

The complete raw certificate details for blackboard.wesleyseminary.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0X08iFRaUg23W5cABiqC
fnJ6Wm9+k3b4SEP2aEdThf8x6I3IktEGA2Uj78TGaw9xpz4V2Dd6UD4AaSoufVrC
4njJBBaHlNksiDlaJq9xSZC+Cs++sdW2Bq4TbiRe89360KO+ug3j+T5mnXgRfviP
5pEY5+r0GHG3valiPVPEp+Ikte6lermzv8xTKJI+ziyxcHYwpaJFCsEA2b1BePU1
uH9HoNTbKmlnSUZbOXdwAIHyEmnypTLwo9RE5zl68VRRusfirctsteAQEL8RCNQN
6IHUS4Or/RvzC4Ds7Qo5JoyLU3Ae6KLYS1qm42pCumkIu57lLhUEAJBGjzg77Jfm
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2840447982097865754103150059722590673
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blackboard.wesleyseminary.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26445562135669243806016469617248865567096813580636843038004422197940420291724699967353911351761139193900296848104897266912659458599149535260978437882389345799466065652659335962314816806146630489179857525787718529857450495657839361268648310934710291513006048661516941874372308843817533227901355965027700314938440269126657391875887575726471932873561582432648540759583240136372980905840573492300326151244054284719272756885527693860370120780404950188517410907929610959402218871912322129159789991236444598663693460503604562165509384856872557584131840621410626695152519930131034690735586835823084795207689340153672628692481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e7ef54caadda19b2b472e4df2c88251ed3f32836
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackboard.wesleyseminary.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackboard.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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