ukam.uky.edu

- University of Kentucky -

Issued by Thawte SSL CA

About this certificate

This digital certificate with serial number 5b:08:0f:e0:ec:7b:55:e2:3d:07:fa:0d:46:8f:d9:b3 was issued on by Thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • CAs must include keyIdentifer field of AKI in all non-self-issued certificates (RFC 5280: 4.2.1.1)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

University of Kentucky

Organization: University of Kentucky
Organization unit: UKIT
State / Province: Kentucky
Locality: Lexington
Country: US

Thawte, Inc.

Organization: Thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5b:08:0f:e0:ec:7b:55:e2:3d:07:fa:0d:46:8f:d9:b3
Serial Number (int): 121001608047735646793705665300574230963
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId:

Fingerprint (sha1): e5:f0:8d:c3:3b:7b:b5:1f:8e:eb:6e:ae:4f:e1:9c:61:38:5c:4c:0e
Fingerprint (sha256): 01:09:ff:6b:92:f1:1b:35:83:2b:8a:d1:a2:95:01:95:69:68:e7:79:1d:d0:4b:3f:65:12:8e:ef:de:be:70:c6


Revocation information

OCSP Server: http://ocsp.thawte.com
CRL Distribution Point: http://svr-ov-crl.thawte.com/ThawteOV.crl

Check the revocation status for certificate ukam.uky.edu

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ukam.uky.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Extended Key Usages

Server Authentication
Client Authentication

Extensions

4 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name uky.edu

(limited to 100 certificates)
lsv.uky.edu
remote.ca.uky.edu
www.hosp.uky.edu
download.uky.edu
imaps.netlab.uky.edu
5636470266134528-fe2.pantheonsite.io
bbtools.ad.uky.edu
landing.socialworkonline.uky.edu
5700866052980736-fe2.pantheonsite.io
5636470266134528-fe2.pantheonsite.io
scdp.uky.edu
adfs.uky.edu
alumniweb.uky.edu
ukam.uky.edu
lyncpool.ad.uky.edu
cpr.as.uky.edu
kers.ca.uky.edu
uconnectlabs.com
plyits2016svr01.mc.uky.edu
rhelp.ad.uky.edu
5636470266134528-fe2.pantheonsite.io
www.bae.uky.edu
pks2-cas2.net.uky.edu
5649684605435904-fe1.pantheonsite.io
securedns.planmygift.org
timeoffcalendar.uky.edu
ukhcsftpt.mc.uky.edu
tableaupublic.uky.edu
ww-a12.as.uky.edu
uk-pa7080-edge1-pri-mgmt.net.uky.edu
www.etrax.uky.edu
drive.uky.edu
prdukheiixdsrp04.mc.uky.edu
ctrp-dev.uky.edu
spencer.ca.uky.edu
exploreuk.uky.edu
www.hcii.cs.cmu.edu
sfbextweb.uky.edu
ibi-test.uky.edu
ukam.uky.edu
grackle.ecc.engr.uky.edu
its.net.uky.edu
horm.as.uky.edu
*.coe.uky.edu
tstukheiixdsrp02.mc.uky.edu
icmac.rch.uky.edu
mfp.uky.edu
5636470266134528-fe2.pantheonsite.io
pa7080-primary-mgmt.net.uky.edu
5700866052980736-fe2.pantheonsite.io
boonecenter.uky.edu
ra.uky.edu
5700866052980736-fe2.pantheonsite.io
prdltchvc01.mc.uky.edu
www2.ca.uky.edu
plannedgiving.zaytuna.edu
support.ccs.uky.edu
clarity.mc.uky.edu
castle.uky.edu
warehouse.ca.uky.edu
labrea.ecc.engr.uky.edu
fayette.ca.uky.edu
securedns.planmygift.org
*.law.uky.edu
ibi.uky.edu
uconnectlabs.com
sims.uky.edu
ukhcvendorreg.mc.uky.edu
5636470266134528-fe2.pantheonsite.io
athena.uky.edu
ehrci.mc.uky.edu
uconnectlabs.com
prdsprspctu01.mc.uky.edu
plyits2016svr01.mc.uky.edu
boonecenter.uky.edu
comm.uky.edu
*.mc.uky.edu
beckdt.engr.uky.edu
remote.ca.uky.edu
5636470266134528-fe2.pantheonsite.io
libraries.uky.edu
landing.socialworkonline.uky.edu
myukmpx.uky.edu
5700866052980736-fe2.pantheonsite.io
devedwcognapp01.mc.uky.edu
sudepresearch.uky.edu
i2b2ccts.uky.edu
finearts.uky.edu
sweb.uky.edu
prdcteweb01.mc.uky.edu
www.lgcr.com
www.nai.arizona.edu
prdltchvcpsc01.mc.uky.edu
pimser.coe.uky.edu
5636470266134528-fe2.pantheonsite.io
ukitspks2cmx01.net.uky.edu
scriptprorefills.mc.uky.edu
ukhr.uky.edu
5722903798611968-fe3.pantheonsite.io
ehs.uky.edu

Certificate

The complete raw certificate details for ukam.uky.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyt+fARasOouGs/0L313
o3yF9bLvn2LV4zqFP9VIEvnKn10NVYQJ96hOBTRoriunAa2lE1+vuvxBk2qqyjBi
a/wr9WWVdD5bugV3W0brxAYvD1SSoCCS+2QFAO9fzX5q/JjImFY6c7rmbDNHGHhq
4pT1LQcct+lJsjqUWDvzULRLHnBEmm7WjsasnSJeIEGBJ7HKCrHG1Ct1vpzzwEj8
oaDM2gWnsDIyTkglfGEAR30IvH1Np/1eb4VXK6n3gMZD88Drn/S0e+Li/BRzR1OD
teB5+1VQD1wfPXl+BhYzEfRYQdvRQALc3+zMbcQZHb09Nao0mLdoj4T4QehE91o4
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 121001608047735646793705665300574230963
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-01-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-01-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kentucky'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Lexington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'University of Kentucky'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'UKIT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'ukam.uky.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24132963978658774524274912357331515498645551186354169112620665378293081755138596931541113405291480492293629707569728396922034588160994267248809016950335296745140487169392164582426242193440416186545961366459582950207209335784822947859154852234152611655634164513684083271525929375158980175864094017829611547176577784859272470651220811026765396425927609612249136394339507568935425119694529281470096929589931431284821008477395969538807854017479511695340458077509008883349014172456089987663291597381892664526544757421275550129626121472488270274844557750857642702665751941381288492108432234578473546372091786991383726405729
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://svr-ov-crl.thawte.com/ThawteOV.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.thawte.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0010b2eef6754dd102a9c082a904a133ebfd897b45ce0fe492899ea7adb80b0cda05ec347002a0b82140719ef90437dc5e7143fbb0d3a4c339c8a402fd11671211ed51b0081800fb0612e6ee550a410117ebfe8e354105a6590591d306f79e1d2d8a020d9dcb2f5f0895bdf25f1385c229d05f93a094c0ab0c2132596369d3c605f234a59ef48bf3ab6a9cf4e86631dadc466a2abe6897d3ee9f709084b7a87228a8d38956894f89e6c30d83a498a23507972903d35c36900aba37c77705422a6566bffa5fc35f409284f50e1659e16a8815cc9ec40774747a471efa118d76e510ffcb15d7110f8c1ab064228894f280b7cb1463a40f9d442466026a7630797b97