fundopp.uci.edu

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number fc:c1:41:20:f9:c6:23:03:0d:0f:68:1c:46:bb:49:27 was issued on by Google Trust Services LLC.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fundopp.uci.edu

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): fc:c1:41:20:f9:c6:23:03:0d:0f:68:1c:46:bb:49:27
Serial Number (int): 335968889200722759616008961212498528551
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 35:06:49:49:7d:1f:31:cf:71:8b:29:88:fd:74:3b:5e:7c:84:6a:8d
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 80:7a:79:19:27:49:7c:85:19:77:cd:20:63:b2:48:f8:d4:1e:8f:f4
Fingerprint (sha256): 01:06:c0:67:22:fd:f0:63:3e:09:c3:40:43:fb:97:f4:2e:54:7e:eb:ad:4a:69:d9:ae:80:1e:27:3e:0c:cd:d6

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/89EZZlUMYb4
CRL Distribution Point: http://crls.pki.goog/gts1p5/kPtajCim2Js.crl

Check the revocation status for certificate fundopp.uci.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fundopp.uci.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fundopp.uci.edu
*.fundopp.uci.edu

Other certificates including the domain name uci.edu

(limited to 100 certificates)
lgbtrc.uci.edu
aegep.bio.uci.edu
antnet.uci.edu
fieldstudy.soceco.uci.edu
us.prod.campusgroups.com
zm-app-p-1.ad.uci.edu
www.startupguide.innovation.uci.edu
sites.uci.edu
prod.2.slot.cdn.salesforce-communities.com
cluster3.technolutions.net
asap.ap.uci.edu
cluster3.technolutions.net
fibre-data.rgs.uci.edu
us.prod.campusgroups.com
www.socsci.uci.edu
analytics.eee.uci.edu
dipper.sa.uci.edu
mobility.hs.uci.edu
commencement.uci.edu
bai.ess.uci.edu
corporate.ce.uci.edu
webmail.ss.uci.edu
fundopp.uci.edu
status.oit.uci.edu
ds3000.hs.uci.edu
5709068098338816-fe3.pantheonsite.io
ldap1.ics.uci.edu
apply.admissions.uci.edu
stage-web.due.uci.edu
www.mwoodlab.bio.uci.edu
webauth-staging.service.uci.edu
basicneeds.uci.edu
ece.uci.edu
cluster3.technolutions.net
www.circ.eng.uci.edu
5709068098338816-fe3.pantheonsite.io
prod.2.slot.cdn.salesforce-communities.com
myaccount.hs.uci.edu
pmalab.hsis.uci.edu
prod.1.slot.cdn.salesforce-communities.com
osh.chs.uci.edu
web.athletics.uci.edu
dce-panorama.ad.uci.edu
ldap1.ics.uci.edu
studentcenter.uci.edu
styleguide.innovation.uci.edu
us.prod.campusgroups.com
mpp.soceco.uci.edu
tssg.hs.uci.edu
maillists.nac.uci.edu
trademarks.uci.edu
studentleadership.uci.edu
sba.lawnet.uci.edu
www.internationalstudies.socsci.uci.edu
connectedlearning.uci.edu
cls-p-k1.oit.uci.edu
applications.oit.uci.edu
www.imca.uci.edu
sites0.bio.uci.edu
www.ics.uci.edu
www.startupguide.innovation.uci.edu
caidm.som.uci.edu
airwatch02.hs.uci.edu
keys.arts.uci.edu
tls.automattic.com
vote.elections.uci.edu
libguides.law.uci.edu
www.fs.uci.edu
webster.reg.uci.edu
webmail.uci.edu
cascade.content.uci.edu
fred.es.uci.edu
ovariancancer.uci.edu
cluster3.technolutions.net
esb-ucp.aws.uci.edu
ci-redcap.hs.uci.edu
logictimeline.com
esb-dev-ucp.aws.uci.edu
ags.uci.edu
video.ath.uci.edu
resnet-cca1-arc.reshsg.uci.edu
mammag.uci.edu
mail.uciorthopaedics.com
public.ha.uci.edu
oir-admin-pri.ucinet.uci.edu
web.offcampuspartners.com
cpep.uci.edu
cpep.uci.edu
access.hs.uci.edu
welcomeweek.uci.edu
it.dos.uci.edu
*.ics.uci.edu
cpw.ece.uci.edu
kualidocs.oit.uci.edu
taha.eng.uci.edu
uchastings-stg.trs.oit.uci.edu
news.uci.edu
fa.uci.edu
webreg2.reg.uci.edu
core.humanities.uci.edu

Certificate

The complete raw certificate details for fundopp.uci.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwm8skQcG+kD1vnDFQlNn
dPxM0FIbQVa97OXc8GEe9sAsc54KSXFXR4mo4HKjIHkJ35dNfJGkt/r+5rOWoYYs
ffZns/mBvPRLQPxe5PJ5F3pT1isj+lOpDEp2lOqO3sG5PoSpDRI4L7/KtPxbzeXX
BUr7jGnC0dlp7MMaNPfhmsP2C3xxnXsRNKhY/hPqVdi4ROix2YTpbACRZxpAz3jB
43ThuE1laqNbVRSHjeMSEOyKTsXofWcXDSvm+t/AicpmkTD1PF6z2scTr8MMQ74q
KzC3A+uD68/7Czkp5oLJpahMizEWU79W2a/b+jN1qKEDKJjZX8Ub5i8Icv61l2Kf
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335968889200722759616008961212498528551
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-18 17:54:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-16 17:54:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fundopp.uci.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24545053149423599619359490826891575845268827152648183885235768304072285738149484680641449188232740349400378147521842182087301781107941805473688837666651959993244698009577200063400627254839914378470227629478261812703200124805915339136741075806001839057464317907087234442849975095723854232962313607129866849029009533996100380986959860593621757319985285679423559178683293281710030459082207765452599819607627598083751158395306804295385867154838202840514369261917556079895346744996807864493022347539794291821977950868376280064953682467290445231607396590590493440811922791872582657312283392471233292274445601701333620137911
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							350649497d1f31cf718b2988fd743b5e7c846a8d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/89EZZlUMYb4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundopp.uci.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fundopp.uci.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/kPtajCim2Js.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b442340f9000004030047304502201569fb1b4d76955bbc04c2947677e54256d5eecf9b1d0c5340ce242259095695022100af640472021e7c2e961dd3e43245697820253424e6c5f02dc955ddbe7d89896a007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b442340e8000004030047304502205b171452e3e2cc456a428c870c1e8e894c5c86558fc5db9dfa2bd85975befdd9022100c01aa7e88dc75724ecf6ff60865357b85225436597569f1863608bca11736540
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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