duckid.uoregon.edu

- University of Oregon -

Issued by GlobalSign Organization Validation CA - G2

About this certificate

This digital certificate with serial number 11:21:55:d9:88:39:5a:23:5c:46:55:1f:d3:2e:af:8a:a2:1c was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DNSNames must have a valid TLD. (BRs: 3.2.2.4)
  • 1 DNS name(s) are bare public suffixes: duckid The domain SHOULD NOT have a bare public suffix (awslabs certlint)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Oregon

Organization: University of Oregon
State / Province: OR
Locality: Eugene
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:55:d9:88:39:5a:23:5c:46:55:1f:d3:2e:af:8a:a2:1c
Serial Number (int): 1492252292819326789952672843136577399595548
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 59:56:3c:13:8f:23:47:a7:f1:0e:f5:8e:86:a9:b8:49:2f:82:c3:e2
AuthorityKeyId: 5d:46:b2:8d:c4:4b:74:1c:bb:ed:f5:73:b6:3a:b7:38:8f:75:9e:7e

Fingerprint (sha1): 58:f7:3e:b5:30:5d:70:f8:2e:86:f5:31:2a:33:f1:7f:ef:b5:4f:b6
Fingerprint (sha256): 00:6f:67:fc:9a:dd:81:62:c9:30:37:d8:ee:ae:42:b2:47:e9:cc:0f:7d:32:60:fd:34:9c:e5:3e:34:13:21:4c

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalg2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalg2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalg2.crl

Check the revocation status for certificate duckid.uoregon.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for duckid.uoregon.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

duckid.uoregon.edu
duckid

Other certificates including the domain name uoregon.edu

(limited to 100 certificates)
scholarsbank.uoregon.edu
africa.uoregon.edu
is-ssoman-prod1.uoregon.edu
fs-aim-dev-iq.uoregon.edu
is-ssoman-base1.uoregon.edu
demystifying.uoregon.edu
oregoncis.uoregon.edu
atomoptics-nas.uoregon.edu
duckid.uoregon.edu
cas-vm-ig-tile1.uoregon.edu
nsrc.org
sfunder8cert.net
exchange.uoregon.edu
ctl-owncloud-dev.uoregon.edu
rsch-s16-drupal.ad.uoregon.edu
banking-business-review.com
cas.uoregon.edu
illiad.uoregon.edu
nsdb.uoregon.edu
coe.uoregon.edu
researchguides.uoregon.edu
sonar.zebrafish.org
is-ssoman-prod2.uoregon.edu
ecweb.uoregon.edu
ctl-nodejs-dev.uoregon.edu
blogs.uoregon.edu
casdocs.uoregon.edu
scalefundercert.net
onesearch.uoregon.edu
aqacs.uoregon.edu
confluence-test.uoregon.edu
genome.uoregon.edu
thepasture.uoregon.edu
blogs.uoregon.edu
cas-vm-ig-ags1.uoregon.edu
sa435gl.wpc.edgecastcdn.net
*.uoregon.edu
nagios-server.uoregon.edu
power.sjsu.edu
librarysearch.uoregon.edu
cftclinic.uoregon.edu
casmail.uoregon.edu
whitewater.uoregon.edu
secure-uswe2-1.tessituranetwork.com
coe-ytp-pre-ets.uoregon.edu
secure-uswe2-1.tessituranetwork.com
blogs.uoregon.edu
gradweb.uoregon.edu
genome.uoregon.edu
commencementmap.uoregon.edu
darts.uoregon.edu
n002.offcampuspartners.com
n002.offcampuspartners.com
lib-ohms.uoregon.edu
aeidrive.uoregon.edu
web.offcampuspartners.com
nsrc.org
sojc-hosted.uoregon.edu
scalefundercert.net
voiceweb.uoregon.edu
talapas-login.uoregon.edu
lawinfo.uoregon.edu
is-ise-pan1.uoregon.edu
blogs.uoregon.edu
webmail.uoregon.edu
fass-service.uoregon.edu
hgem.uoregon.edu
aaa-jss.uoregon.edu
researchadmin.uoregon.edu
iscas-test.uoregon.edu
n002.offcampuspartners.com
security.uoregon.edu
vascularlab.uoregon.edu
jwj-foia.uoregon.edu
www.cs.uoregon.edu
lib-scholardev.uoregon.edu
exchange.uoregon.edu
aha-mail.uoregon.edu
sa435gl.wpc.edgecastcdn.net
ia-wp.uoregon.edu
uselect.uoregon.edu
scalefunder.net
cs.uoregon.edu
scalefunder.net
is-wac1.uoregon.edu
education.uoregon.edu
ctl.uoregon.edu
tk20.uoregon.edu
sa-aoyama.uoregon.edu
blogs.uoregon.edu
talapas-login.uoregon.edu
casls.uoregon.edu
secure-uswe2-1.tessituranetwork.com
calendar.uoregon.edu
tau.nic.uoregon.edu
*.libproxy.uoregon.edu
orsa.uoregon.edu
casitchat.uoregon.edu
singlecaseinstitute.uoregon.edu
uoregon.edu

Certificate

The complete raw certificate details for duckid.uoregon.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qP19qy+51MKSuvuyraF
Ov5hWilh6BV8Pjzwt9PH/3CU6Az8nWiJb4SJ8sx4NDlGwMuhZuD+bK+5SeN+m+t8
KFb4Pp31lawlYgYYPnHnVApw2fGq56sVIlGjQ2Rkly43w2yyPEJWWMJpIjb/gm8n
fQxqIca2wjij5dieSkW0nE+0WYsN0VFouZKsiO7fnNRcjgoAGtoCXckICi2w2fl2
TiKrlZHSyEsAm+vPUaL7USQWay3ZxSHLxYo+JR8oyHYfEo4KdCwyz94lxvNrVS57
l/g3ptY4R67HvfjofoRX9y8v2sj6BXT3IrNOaU9JKZwt7qAOaeqvKe7ARUZMvaBo
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492252292819326789952672843136577399595548
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-12-04 02:16:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-25 22:17:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Eugene'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Oregon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'duckid.uoregon.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28610709003844933152688469961079256688985720880470519905038525280575530784521000919810579653513644953527391721592488428911987973440645771511104271394296436181083927365717090009616453059277889800900764531618542299497129285982733161668296665901304073407523629861324166424365650775462722186868436152737487085384335200017090468228649339574495368329394145140756533950203172827429861314860682625076362256731621481447789499641659185328992242608010228254778182915281260811430198952750744239594374416704238977338231195498968613503139783358800723962611456531429477746411350305461641275599615490225555151872131572393884638013611
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duckid.uoregon.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duckid'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalg2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							59563c138f2347a7f10ef58e86a9b8492f82c3e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5d46b28dc44b741cbbedf573b63ab7388f759e7e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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