qccommunity.qc.cuny.edu

- Queens College/CUNY -

Issued by GeoTrust SHA256 SSL CA

About this certificate

This digital certificate with serial number 5f:59:24:17:70:7b:c9:ff:17:9d:7b:f2:3b:5e:13:78 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Queens College/CUNY

Organization: Queens College/CUNY
Organization unit: Hosting
State / Province: New York
Locality: Flushing
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5f:59:24:17:70:7b:c9:ff:17:9d:7b:f2:3b:5e:13:78
Serial Number (int): 126739506043782049750103606847302669176
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 14:67:8e:ed:83:4f:d6:1e:9d:40:04:0c:04:46:a1:70:34:b2:0f:72

Fingerprint (sha1): f2:22:99:d5:46:57:a9:87:27:7b:df:a3:cf:02:48:a4:3f:b9:bf:7e
Fingerprint (sha256): 02:88:b0:f0:4d:01:7f:c6:ce:e1:2e:d6:1a:92:1b:ae:d1:a2:05:9b:35:1f:ae:19:ae:2b:ec:d0:b8:52:02:b6

Issuing Certificate URL: http://gj.symcb.com/gj.crt

Revocation information

OCSP Server: http://gj.symcd.com
CRL Distribution Point: http://gj.symcb.com/gj.crl

Check the revocation status for certificate qccommunity.qc.cuny.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qccommunity.qc.cuny.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qccommunity.qc.cuny.edu

Other certificates including the domain name cuny.edu

(limited to 100 certificates)
www.math.csi.cuny.edu
5684453372329984-fe2.pantheonsite.io
us.prod.campusgroups.com
*.gc.cuny.edu
*.csi.cuny.edu
ucdc.edu
csicampusnet.csi.cuny.edu
us.prod.campusgroups.com
guides.newman.baruch.cuny.edu
*.mhc.cuny.edu
mail.journalism.cuny.edu
eportfolios.macaulay.cuny.edu
libpapercut-vs.librarygp.citytech.cuny.edu
test.eis.uw.edu
qwifi.qc.cuny.edu
www.design-engineering.princeton.edu
5684453372329984-fe2.pantheonsite.io
nxterra.ucop.edu
ssa.ccny.cuny.edu
csi2-pps2.csi.cuny.edu
cslive.csi.cuny.edu
*.citytech.cuny.edu
mail.qc.cuny.edu
*.kbcc.cuny.edu
*.bmcc.cuny.edu
www.hcii.cs.cmu.edu
208.lsnc.net
5684453372329984-fe2.pantheonsite.io
*.citytech.cuny.edu
cunyba.us.reclaim.cloud
www.blogs.earthjustice.org
us.prod.campusgroups.com
qccommunity.qc.cuny.edu
*.citytech.cuny.edu
libcal.library.hunter.cuny.edu
5684453372329984-fe2.pantheonsite.io
library.citytech.cuny.edu
webdev.colorado.edu
virtual2.unlv.edu
5769928858664960-fe3.pantheonsite.io
5756915711737856-fe1.pantheonsite.io
mysite.qc.cuny.edu
*.york.ezproxy.cuny.edu
*.york.cuny.edu
5635703144710144-fe4.pantheonsite.io
upenn-it.asc.upenn.edu
*.qcc.cuny.edu
www.math.csi.cuny.edu
onesearch.cuny.edu
Collegiatelink4.Campuslabs.com
*.cuny.edu
csomlcms.cuny.edu
athletics.baruch.cuny.edu
senate.qc.cuny.edu
hub.meed.com
208.lsnc.net
webmail.exchtest.cuny.edu
*.cuny.edu
vision.cs.qc.cuny.edu
newmedialab.cuny.edu
dev.wellness.yale.edu
nml-jail.newmedialab.cuny.edu
qc.cuny.edu
*.gc.cuny.edu
go.journalism.cuny.edu
cunyba.cuny.edu
lib01.bcc.cuny.edu
hr.hunter.cuny.edu
live.ucdavis.edu
info-dev.calperformances.org
websql.brooklyn.cuny.edu
ldapmaint.ccny.cuny.edu
*.gc.cuny.edu
towa.tlehman.cuny.edu
ww2.hunter.cuny.edu
us.prod.campusgroups.com
libcal.library.hunter.cuny.edu
libcal.library.hunter.cuny.edu
good.gsm.cornell.edu
archivesspace.library.csi.cuny.edu
gold.cs.qc.cuny.edu
newlaborforum.cuny.edu
www.lgcr.com
cetls.bmcc.cuny.edu
pwdregister.bcc.cuny.edu
www.nai.arizona.edu
upenn-it.asc.upenn.edu
library.hunter.cuny.edu
mymail.baruch.cuny.edu
nistmep.blogs.govdelivery.com
spstime.sps.cuny.edu
*.cuny.edu
dev.embody.yale.edu
scalefunder.net
scalefunder.net
club.kjzz.org
cunyba.us.reclaim.cloud
help.brooklyn.cuny.edu
us.prod.campusgroups.com
asianamericanyc.hunter.cuny.edu

Certificate

The complete raw certificate details for qccommunity.qc.cuny.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26fa103wQiCwkI3KQXAu
u6ZClb+/UT0iHR6LeeoOm0zVlff1ySEpFqxuI5ojHU2dINkuTHPa0HiDvlllxncl
JP+24hVBtrDuNefzj2j2y3AOHUcUOOx4BSA17aCuqCDcdTB09Wd9p8WsUHsRHHsR
ICUANGqBB1Ajqgd1TItE83H/mws9EiGZl67C6SqGqZEg2JYGmyj2pZEhvVQAKLq9
bLMwl3TuLuBV1oSdSisiE6cdS2fpQU4azj+SY4pIjZeYSnJhVJY5NLQr7cmGsdam
8u5ejDdzyY4ixJWSuTzGHzkk6aX6C41gBDvKxtjUcUDtNfm4Ih88vHB21YwpqO0+
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 126739506043782049750103606847302669176
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-05-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Flushing'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Queens College/CUNY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hosting'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'qccommunity.qc.cuny.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27728961097975949830363246193158149801079432150079311429448138990836440040162226918577227437621973817451802698852050957889351308132572388121378972873618712266988155198899545971599381626480887381467376816180565477793006703436580631172461689256997376695670643259889595936853458941359129823916473221848999491648742824701398156226126138383825622947832818192864478293390397465082076547647520647313274339258748682293215326554058559212324264400559191946059073723846644800244504449627663396003151615343696458546390401829801838386567929196131232609261499468937673494480318585738250494273321266085685918244464425385787512405683
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qccommunity.qc.cuny.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 14678eed834fd61e9d40040c0446a17034b20f72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gj.symcb.com/gj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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