ssa.radford.edu

- Radford University -

Issued by GeoTrust SSL CA

About this certificate

This digital certificate with serial number 02:e7:2a was issued on by GeoTrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [DataEncipherment DigitalSignature KeyEncipherment] (00001101) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Radford University

Company registration number: btWgKBjzd2uKqj1HthEm466eEd38y7zF
Organization: Radford University
State / Province: Virginia
Locality: Radford
Country: US

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:e7:2a
Serial Number (int): 190250
Serial Number lenght: 18 bits, 3 octets

SubjectKeyId: 6e:8f:e7:eb:16:6d:06:67:f7:6c:ce:cd:73:60:b6:92:a6:34:d7:a1
AuthorityKeyId: 42:79:54:1b:61:cd:55:2b:3e:63:d5:3c:48:57:f5:9f:fb:45:ce:4a

Fingerprint (sha1): fb:eb:3a:28:b8:c4:82:df:7d:48:b6:53:a0:ff:54:f8:02:4d:bc:90
Fingerprint (sha256): 01:08:d6:7a:72:e0:45:52:b7:fb:fe:ed:f7:c4:e7:70:8f:33:b5:41:2e:91:fd:79:b3:66:8c:9f:d0:15:65:1c

Issuing Certificate URL: http://gtssl-aia.geotrust.com/gtssl.crt

Revocation information

OCSP Server: http://gtssl-ocsp.geotrust.com
CRL Distribution Point: http://gtssl-crl.geotrust.com/crls/gtssl.crl

Check the revocation status for certificate ssa.radford.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssa.radford.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssa.radford.edu

Other certificates including the domain name radford.edu

(limited to 100 certificates)
mobile.radford.edu
holst.radford.edu
mozart.radford.edu
degree-aud.radford.edu
ssa.radford.edu
myru.radford.edu
san-6-s10.tlsprovisioning.exacttarget.com
learn.radford.edu
aceweb.radford.edu
list.radford.edu
monitor.radford.edu
ruems-dev.radford.edu
hd-wsus.radford.edu
cca-svr-30.radford.edu
sapphire.radford.edu
www.radford.edu
edge_uc3.peopleadmin.com
edge-uc3.peopleadmin.com
*.asp.radford.edu
ssb.radford.edu
support.radford.edu
sso-pprd.radford.edu
ruwireless.radford.edu
ru-data.radford.edu
webwork.radford.edu
impactlms.radford.edu
sqlteacher.radford.edu
mlad01.radford.edu
aceweb.radford.edu
ssbxe.radford.edu
www.radford.edu
edge-uc3.peopleadmin.com
esm.radford.edu
trident-pprd.radford.edu
eva1.radford.edu
eva1-dev.radford.edu
monk.radford.edu
journals.radford.edu
webapps.radford.edu
libguides.radford.edu
mobile.radford.edu
san-6-s10.tlsprovisioning.exacttarget.com
trid-adconnect.radford.edu
batch1.radford.edu
ise.radford.edu
edge_uc3.peopleadmin.com
ru-portal.portal.radford.edu
edge-uc3.peopleadmin.com
encore.radford.edu
edge-uc3.peopleadmin.com
portal.radford.edu
edge_uc3.peopleadmin.com
celearntest.radford.edu
armad01.radford.edu
author-train.radford.edu
ruems-dev.radford.edu
edge_uc3.peopleadmin.com
geog-grant.radford.edu
odyssey-web.radford.edu
sites.radford.edu
classclimate.radford.edu
wagner.radford.edu
wagner.radford.edu
bonita6-pprd.radford.edu
netappsrv1.radford.edu
gitlab.radford.edu
ldaps.radford.edu
list.radford.edu
onecampus.radford.edu
cca-svr-40.radford.edu
collegiatelink.studentvoice.com
breeze.radford.edu
appnav-pprd.radford.edu
support.radford.edu
cognos.radford.edu
*.asp.radford.edu
sso.radford.edu
my.radford.edu
tutortrac.radford.edu
myru.radford.edu
hd-wsus.radford.edu
edge_uc3.peopleadmin.com
owa.radford.edu
libguides.radford.edu
learntest.radford.edu
san-6-s10.tlsprovisioning.exacttarget.com
libguides.radford.edu
onecampus.radford.edu
lp5-beis.radford.edu
edge_uc3.peopleadmin.com
list.radford.edu
classclimate.radford.edu
journals.radford.edu
webvpn.radford.edu
trident.radford.edu
ssb.radford.edu
edge-uc3.peopleadmin.com
webvpn.radford.edu
tutortrac.radford.edu
edge-uc3.peopleadmin.com

Certificate

The complete raw certificate details for ssa.radford.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnk1SgLmE3ScWaI3WWlJb
HXgSAIRlX31/8mDnUjMQdB6Qj1jxV3eTJ9R8uPObMDDzf9wo45m32gGCQe5YFN6b
BsY+ZfIcUN3JsNhCS3JtkfdaUB3WtqNmsR7ZsdqkJZJFbKqHKp7Jq6B4tKdKKhIk
1upZOtNPoRKm0cPDBle4xP2856Es8+27ihbz6xMVCfM+fuk3dhp+U4C0CzZPQy9S
Y48Rr2yK6Luth2l+wENCddcYpH8war82CKFqPTEtCutQTbOEMncjjn4E+Bio2HOK
031tZhchsj5mncG50fGxWlicOtSOkeJR7Uvb5P55ZIfTsXsmLaBwh0gEab3HHph9
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 190250
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-06-16 17:00:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-06-19 15:20:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'btWgKBjzd2uKqj1HthEm466eEd38y7zF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Radford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Radford University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssa.radford.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19983781220358170603199564762397674438239742287860558972425765644277434845206403635739928705910720612832788862249553958857655684618042970929344209903626808606866639943085872160660413907221928723073664707043704732367650929395233011293858486794394174351674870873956619564550804829853926145675239106524448830405887723291099038146416060591461757390439845036626782106997274579129095088499015256808054565928004598164339677523765240838578723343446240059844684460396330409714879070030507212548435776889854519836686065655225430907741389663874013135593433506129066267699197736890514786328312338885391114345621699632398893350317
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4279541b61cd552b3e63d53c4857f59ffb45ce4a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04b0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssa.radford.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-crl.geotrust.com/crls/gtssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6e8fe7eb166d0667f76ccecd7360b692a634d7a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gtssl-aia.geotrust.com/gtssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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