ir.library.carleton.ca

Issued by RapidSSL SHA256 CA

About this certificate

This digital certificate with serial number 27:4b:43:58:43:51:ed:5e:82:8c:b4:5a:63:81:96:b7 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=ir.library.carleton.ca

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 27:4b:43:58:43:51:ed:5e:82:8c:b4:5a:63:81:96:b7
Serial Number (int): 52230680014358116626244754897633384119
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f

Fingerprint (sha1): f4:32:f9:a1:3f:2d:93:a7:91:d1:08:4d:f3:9b:44:4c:6c:3b:a0:d4
Fingerprint (sha256): 00:ad:8b:7c:5e:31:9d:93:80:6a:21:3a:5a:e3:6c:1d:20:d8:d7:50:fc:2e:c8:af:ec:74:cb:00:0d:fd:30:d0

Issuing Certificate URL: http://gp.symcb.com/gp.crt

Revocation information

OCSP Server: http://gp.symcd.com
CRL Distribution Point: http://gp.symcb.com/gp.crl

Check the revocation status for certificate ir.library.carleton.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ir.library.carleton.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ir.library.carleton.ca

Other certificates including the domain name carleton.ca

(limited to 100 certificates)
atlas-wiki.physics.carleton.ca
finint01.cunet.carleton.ca
*.carleton.ca
planforgood.carleton.ca
timreview.carleton.ca
ccs-casdev3.carleton.ca
sciencedev.physics.carleton.ca
ir.library.carleton.ca
alumnimentors.carleton.ca
mimcufed.carleton.ca
cqads.carleton.ca
*.nwrc.carleton.ca
hotsoft.carleton.ca
gogs.carleton.ca
cas5.carleton.ca
ssscdev2.physics.carleton.ca
ojs.library.carleton.ca
mycareer.carleton.ca
inuktutlexicon.gcrc.carleton.ca
hotsoft.carleton.ca
nextcalendar.carleton.ca
itsgit.carleton.ca
owncloud.carleton.ca
linux.doe.carleton.ca
lakehurontreaties.gcrc.carleton.ca
scienceapps1.carleton.ca
banweb77.cunet.carleton.ca
cas5.carleton.ca
banweb53.cunet.carleton.ca
san-6-s10.tlsprovisioning.exacttarget.com
scienceapps.carleton.ca
journals.carleton.ca
cas5dev.carleton.ca
cg.scs.carleton.ca
sssc.carleton.ca
mvp.soft.carleton.ca
mailhost.math.carleton.ca
tpa.carleton.ca
science.carleton.ca
cas.carleton.ca
*.carleton.ca
gogs.carleton.ca
awc.carleton.ca
cutv.carleton.ca
*.scs.carleton.ca
its-apidev1.carleton.ca
docman.carleton.ca
itsccw02.cunet.carleton.ca
elections.ccss.carleton.ca
*.carleton.ca
mailhost.math.carleton.ca
cas5dev.carleton.ca
chernode.mae.carleton.ca
ssoman.carleton.ca
sssc.carleton.ca
wiki.math.carleton.ca
vlt.carleton.ca
bandoc02.cunet.carleton.ca
cqads-vm01.carleton.ca
tpa.carleton.ca
jupyterhub.physics.carleton.ca
doclib.carleton.ca
cqads-vm01.carleton.ca
simreporting.carleton.ca
banstg01.cunet.carleton.ca
science.carleton.ca
mattermost.carleton.ca
portalclonetest.carleton.ca
ccsadc04.cunet.carleton.ca
sikuatlas.gcrc.carleton.ca
architecture.carleton.ca
deap-radiopurity.physics.carleton.ca
lakehurontreaties.gcrc.carleton.ca
deapdb.physics.carleton.ca
honoursprojects.physics.carleton.ca
dges.carleton.ca
mvp.soft.carleton.ca
itsrds05.cunet.carleton.ca
gracilis.glel.carleton.ca
itsgit.carleton.ca
u-itsadc02.cunet-uat.carleton.ca
enrichment.math.carleton.ca
planforgood.carleton.ca
www.cuol.ca
sprottcareers.carleton.ca
iggrc.carleton.ca
adminweb.carleton.ca
ccss.carleton.ca
webwork.math.carleton.ca
people.math.carleton.ca
cutv.carleton.ca
earthsci.carleton.ca
sssc.carleton.ca
rcsctx.carleton.ca
rcs-citrix5.carleton.ca
deap-deltav.physics.carleton.ca
hereforgood.carleton.ca
ngn.sce.carleton.ca
banweb03.cunet.carleton.ca
ccss.carleton.ca

Certificate

The complete raw certificate details for ir.library.carleton.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 52230680014358116626244754897633384119
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ir.library.carleton.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 766772387654683159323784628633156684120370220442599144782446274468610676927468547746460559297934990436973037850285217975280048432290186850992837221808810966009643815099488220519479117987183201497085450675115392319713135111990877891058750980403741959676762745847841573467139675000690995584366521114779134720755617754632988236537279805286247624833830908398076085026693165521662655419920986379064109503203879209824038606557528624301441026287507787079176214866098340025058341578822347427586673241198920838645271292981577857940317828798627552509767233077281750025088434532700782930992173891167936966099355319144779681708342452808310980358472451811754239957652928678651048236942456460173480005805761071413161754913031247195455756848296021088801697456468679958585307778569703342620983896969765470628402021951791499197395474796488055381654809368305325045912034798388239278873429714867345860503676692355936900419696927317157373772525181373475829094741921732874897458722123304111415451497754381423508747790927759587123406098217227286877626789730883120776968280334958398668112455375603745280052837396901960551945290864713209063185410479493721365275998097171671039902114361540461287079045757048282955946431839852434426101888114285491860735074601
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ir.library.carleton.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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